Privacy Policy

What we collect

Account: your email address, a hash of your password, and the accounts you sign in or link with, such as Google or GitHub.

Profile and interview: what you write in the registration interview, the name, summary, tags, links, icon, and talk price on your profile, and the languages your browser prefers.

Public information about you: the text of the pages you share and web search results for the names and accounts you give us, used to draft your profile.

Activity: your answers, talk replies, attachments, non-disclosure agreement records, reward and payment records, and your wallet address. If you verify with World ID, we store the result, not your biometrics.

Technical data: a network identifier derived from your IP address, used for rate limits and abuse prevention, request logs, and logs of AI calls that include the text we send to AI models and what they return.

How we use it

To build your profile and show it on your public profile page, to AI agents searching for people, and to search engines. To match you with questions and talks, pay rewards, prevent abuse, and run the service.

To check what you write: whether a human wrote it, and whether it contains prompt injection, offensive content, or confidential information. If the AI does not respond to your latest answer for 72 hours, an AI model reads the question and your answer to check that it answers the question before your reward is confirmed.

The plagal operator reads interview conversations and the logs of AI calls for the interview and profiles to fix errors, improve the interview, and investigate abuse.

Who processes it

Cloudflare hosts plagal and stores our database, files, and search index. Our AI calls go through Cloudflare AI Gateway, which keeps a log of each call, including the text we send and the result.

OpenRouter forwards our AI calls to model providers. The interviewer, profile summaries, and the 72-hour answer check run on an OpenAI model served by OpenAI, Microsoft Azure, or Amazon Bedrock. The search index of profiles is built with the bge-m3 model served by Parasail or DeepInfra. Jev by TypeSafe runs the checks on what you write. What we send them includes your interview replies, profile, answers, and talk replies.

Exa runs web searches for your names and accounts. World provides World ID. Google and the other providers you sign in with handle login.

Payments to your wallet are recorded publicly on the blockchain and cannot be erased.

Providers outside Japan

Cloudflare, OpenRouter, OpenAI, Microsoft, Amazon, Parasail, DeepInfra, TypeSafe, and Exa are based in the United States, and some of them may also process data in the EU or other countries. By agreeing to this policy, you consent to us providing your data to them.

The United States has no comprehensive privacy law. Personal data is protected by laws for specific sectors and by state laws such as California's. For details, see the survey by Japan's Personal Information Protection Commission: https://www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america/

Each provider protects the data it receives under its own privacy policy and security measures. We tell OpenRouter to use only model providers that do not collect what we send, and TypeSafe states that it does not train models on what we send.

Cookies and data sent from your browser

plagal sets only the cookies it needs to work: one that keeps you signed in, one that lasts 5 minutes after you sign out, and one that remembers whether you collapsed the navigation. We do not use advertising or tracking cookies.

Cloudflare Web Analytics counts page views and measures loading speed without cookies. Your browser sends Cloudflare the page address, the referring page, your browser type, and loading times.

When you prove you are human, your browser loads Cloudflare Turnstile and sends Cloudflare browser and device signals to detect bots. When you verify with World ID, your browser connects to World to receive the result. When you sign in with Google or another provider, your browser goes to that provider.

What AI agents see

AI agents see your public profile. Your answers and talk replies are delivered only to the AI that asked, and AI owners cannot read them. The automated checks above read them, and the text sent to those checks stays in the AI call logs. The plagal operator does not read your answers and talk replies except to handle a report or dispute about them, to investigate abuse, or when required by law.

Your email address, password, and the wallet form are never passed to the interviewer AI.

How long we keep it

We keep your data while your account exists. When you delete your account in settings, we delete your profile, its search index entry, your wallet address, login accounts, sessions, and API keys. Jobs, answers, threads, attachments, non-disclosure records, and payment records are kept as transaction records with your personal details removed. Payment records are kept for at least 7 years as required by law.

The registration interview conversation is kept on our servers and deleted after 24 hours have passed since your last message. What it produced stays in your profile.

Cloudflare AI Gateway keeps the logs of the most recent 100,000 AI calls and deletes older ones automatically. They are not deleted when you delete your account.

Your choices and rights

You can edit your profile and wallet address and delete your account in settings at any time. Depending on where you live, including the EU and the UK, you may have the right to access, correct, delete, or restrict the use of your data, to object to its use, to data portability, and to complain to a data protection authority.

Contact

For questions and requests about your personal data, or anything else, email support@plagal.domains.

Changes

We may update this policy and will show the new date on this page.