Privacy Policy

Effective date: April 2, 2026

The Plow Collective, Inc ("Plow Co", "Plow", "we", "our", or "us") is built with privacy at its core. This policy explains what data we collect, how we use it, and the choices you have.

1. What Plow Does

Plow is a macOS application that connects to your personal data sources (messages, calendar, photos, email, and more) and uses AI to help you manage your digital life. Processing happens on your device and through secure cloud services you explicitly authorize.

2. Data We Collect

Account information. When you create an account, we collect your phone number for authentication via one-time passcode (OTP) and, if you opt in, for sending and receiving SMS text messages as part of the Plow Messaging Service.

Usage data. We collect anonymized usage metrics such as which features you use, session duration, and error reports to improve the product.

API and connector data. When you connect third-party services (e.g., email, calendar), Plow accesses that data on your behalf. We transmit data to our AI providers only as needed to fulfill your requests, and we do not store the contents of your personal data on our servers beyond what is necessary to process your request.

Google user data. When you connect your Google account, Plow may access the following types of data depending on the permissions you grant:

• Gmail — email message metadata, headers, and body content to process your requests (e.g., searching or summarizing email).
• Google Calendar — event details, attendees, and scheduling information (e.g., summarizing your agenda or finding availability).
• Google Contacts — contact names and email addresses (e.g., looking up contact information you ask about).

Plow only requests access to the Google data types necessary to fulfill the features you use. This data is transmitted to our AI providers solely to process your specific requests and is not stored on our servers beyond the duration of request processing.

3. SMS/Text Messaging Data

When you opt in to the Plow SMS text messaging service, we collect your mobile phone number and your consent to receive text messages.

Use of SMS data. We use your mobile phone number solely to send and receive text messages as part of the Plow Messaging Service you have opted in to.

No sharing of SMS opt-in data. We do not sell, rent, or share your mobile phone number, text messaging opt-in data, or SMS consent with any third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Where other sections of this Privacy Policy describe sharing of personal data with third parties, such sharing explicitly excludes your mobile phone number, SMS opt-in data, and text messaging consent information. Your SMS data may be shared only with service providers who assist in delivering text messages (e.g., our messaging platform provider and telecommunications carriers), and only as necessary to deliver the Messaging Service.

SMS opt-out. You may opt out of receiving text messages at any time by replying STOP to any message. Upon opt-out, we will cease sending text messages and will retain your opt-out preference to ensure compliance.

SMS data retention. We retain your phone number and messaging consent for as long as you are subscribed to the Messaging Service. Upon opt-out, we retain your opt-out status to honor your preferences and delete other messaging data within 30 days.

Message frequency and rates. Message frequency varies based on your usage. Message and data rates may apply.

4. Data We Do Not Collect

• We do not sell your personal data to third parties.
• We do not use your personal data to train AI models.
• We do not store the contents of your messages, emails, or photos on our servers long-term.

5. How We Use Your Data

• To authenticate you and provide access to the service.
• To process your requests through AI models on your behalf.
• To improve the reliability and performance of user-facing features within Plow.
• To communicate with you about your account or the service.

6. Third-Party Services

Plow integrates with third-party AI providers (such as Anthropic and OpenAI) to process your requests. When you use these features, relevant data from your request is sent to these providers under their respective privacy policies. We select providers that commit to not training on user data.

We also use standard infrastructure providers (hosting, analytics, error tracking) that may process limited technical data.

7. Google User Data

Plow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In addition to the general commitments described throughout this policy, the following applies specifically to data obtained through Google APIs:

Access. Plow accesses Google user data only when you explicitly connect your Google account and make a request that requires it.

Use. Google user data is used solely to provide and improve user-facing features within Plow that you initiate — such as email search, calendar summaries, and contact lookup.

Storage. Google user data is not stored on our servers beyond what is needed to process your active request. No long-term copies are retained.

Sharing. Google user data may be transmitted to our AI processing providers (currently Anthropic and OpenAI) solely to fulfill your request. These providers are contractually prohibited from retaining or training on this data. Google user data is never sold or provided to advertising platforms, data brokers, or information resellers; used for serving ads, retargeting, or interest-based advertising; used to determine creditworthiness or for lending purposes; or transferred to any third party conducting surveillance.

8. Google Data Transfer Restrictions

Google user data is transferred to third parties only under the following circumstances:

• To provide user-facing features you have requested and consented to (e.g., transmitting data to our AI providers to process your request).
• For security purposes, such as investigating a bug or abuse.
• To comply with applicable law, regulation, or legal process.
• In connection with a merger, acquisition, or sale of assets — only after obtaining your explicit prior consent.

9. Human Access to Google Data

No Plow employee, contractor, or agent will read your Google user data unless:

• (a) You have given specific consent for us to view specific data (e.g., for a support request you initiated).
• (b) It is necessary for security purposes, such as investigating a bug or abuse.
• (c) It is required by applicable law.
• (d) The data has been aggregated and anonymized so that it cannot be associated with any individual user.

10. Data Security

We use industry-standard security measures including encryption in transit (TLS) and at rest, secure authentication, and access controls. API keys and session tokens are managed securely and can be revoked at any time from your account dashboard.

11. Data Retention

Account data is retained while your account is active. Usage data is retained in anonymized form. You may request deletion of your account and associated data at any time by contacting us.

Google user data. Data accessed from Google APIs is used in real-time to process your requests and is not retained on our servers after the request is complete.

12. Business Transfers

In the event of a merger, acquisition, or sale of assets, we may transfer your account and usage data as part of the transaction. Google user data will only be transferred after obtaining your explicit prior consent.

13. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format.

To exercise any of these rights, contact us at privacy@plow.co.

14. Children's Privacy

Plow is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or by email. Continued use after changes constitutes acceptance of the updated policy.

Google user data. If we change how we use Google user data, we will notify you and obtain your explicit consent before applying the new practices to your Google data.

16. Organizational Compliance

All Plow employees, agents, contractors, and successors are required to comply with this privacy policy and the Google API Services User Data Policy when handling Google user data.

17. Contact Us

If you have questions about this privacy policy, contact us at privacy@plow.co.