Privacy policy.
This policy explains what Plan Pull collects, how we use it, who we share it with (short answer: almost no one), and what rights you have. Plan Pull is operated by Wolf AI, Inc. (a Delaware C-corporation) doing business as Wolf Automations. "We," "us," and "Plan Pull" all refer to the same company.
The short version
- We collect the information you give us (account details, plans you upload) and basic technical data (IP, browser) needed to make the product work.
- We use that data to run Plan Pull, process your takeoffs, and occasionally email you about your account.
- We don't sell your data. We don't license your drawings. We don't train public AI models on your content.
- You can delete your account and all associated data at any time.
1. Information we collect
Information you provide
- Account info: name, company name, email, phone number, password.
- Payment info: billing address and card details (handled by Stripe; we never see or store full card numbers).
- Your content: blueprints, photos, sketches, notes, project names, and addresses you upload or enter.
- Communications: messages you send us via email, chat, or our contact forms.
Information we collect automatically
- IP address, browser type, device type, operating system.
- Pages you visit, actions you take in the app, timestamps.
- Cookies and similar technologies to keep you logged in and remember preferences.
2. How we use information
- To run Plan Pull: analyzing your plans, generating takeoffs, delivering exports.
- To operate your account: authentication, billing, password resets, support.
- To improve Plan Pull in aggregate: understanding which features are used and where users get stuck (we use anonymized aggregated data — never your specific plans).
- To communicate with you: product updates, billing notices, security alerts, occasional product emails (you can unsubscribe).
- To comply with law and enforce our terms.
3. AI processing of your plans
When you upload a plan, we send the content to AI models (including Anthropic's Claude) to perform the takeoff. These requests are made under enterprise agreements that:
- Prohibit use of your content to train the AI provider's base models.
- Require the AI provider to delete your content from their systems after processing (typically within 30 days).
- Meet or exceed industry-standard data protection and security requirements.
In other words: your plans power your takeoffs and nobody else's. They are not training data for any company.
4. Who we share information with
We share information only with:
- Service providers who help us run Plan Pull: hosting (Vercel), database and storage (Supabase), payments (Stripe), email delivery (Postmark), AI processing (Anthropic). Each is under contract to keep your data confidential and use it only to provide services to us.
- Your team: teammates you invite on Agency plans can see the projects you share with them.
- Legal compliance: if required by law, court order, or to protect rights, property, or safety.
- Business transfers: if Wolf AI, Inc. is acquired or merged, your information may transfer to the acquiring company. We'll notify you and give you options before that happens.
We do not sell your personal information. We do not share your content for marketing, advertising, or AI training purposes outside of running the service you're paying for.
5. How long we keep your data
- Active projects: as long as your account is active, or until you delete them.
- Deleted projects: fully wiped from storage within 30 days.
- Account data: retained while your account is active. Upon account deletion, wiped within 60 days (some backups may persist up to 90 days before rotating out).
- Billing records: retained for 7 years to comply with tax and financial regulations.
6. Security
We protect your data with:
- Encryption in transit (TLS 1.3) and at rest (AES-256).
- Least-privilege access controls — only a small number of authorized staff can access customer data, and only when necessary for support.
- Regular security reviews and third-party penetration testing.
- An ongoing SOC 2 Type I audit (expected late 2026).
No system is perfectly secure. If a breach ever affects your data, we'll notify you within 72 hours of confirming it.
7. Your rights and choices
- Access: view your data anytime in your account settings.
- Correct: update your profile info anytime.
- Delete: delete individual projects or your whole account from settings. Permanent.
- Export: download your data in JSON format from settings.
- Opt out: unsubscribe from marketing emails; transactional emails (billing, security) you cannot unsubscribe from while your account is active.
California residents have additional rights under CCPA (to know, delete, and opt out of sale — though we don't sell data). EU/UK residents have rights under GDPR (access, rectification, erasure, portability, objection). To exercise any right, email info@planpull.ai from the address on your account.
8. Cookies
We use cookies for authentication (so you stay logged in), preferences, and basic analytics. You can disable cookies in your browser, but parts of Plan Pull may not work without them.
9. Children
Plan Pull is not directed at children under 16. We don't knowingly collect information from children. If you believe a child has provided us information, contact us and we'll delete it.
10. International users
Plan Pull is operated from the United States. If you use Plan Pull from outside the US, your information will be transferred to and processed in the US, which may have different privacy laws than your country.
11. Changes to this policy
We'll update this policy from time to time. If we make material changes, we'll email active users and post a notice on the site. The "Last updated" date at the top always reflects the current version.
12. Contact us
Questions, requests, or concerns about privacy:
Email: info@planpull.ai
Phone: 925-444-7030
Mail: Wolf AI, Inc. — Plan Pull Privacy, Northern California, USA