Privacy policy

Last updated November 2, 2026 · Terms of service · Cookie policy · Refund and cancellation policy

Who we are

Pluma is a product of EVA Digital Inc. ("we", "us"), a Delaware corporation based in the United States. You can reach us at hello@pluma.website.

This policy follows US privacy law. If you're in the European Union or the United Kingdom, your law gives you the rights described in "If you're in the EU or the UK" below, and we honor them.

What this policy covers

This policy covers this website, how the Pluma dashboard (app.pluma.website) uses your Google account when you sign in with Google (see "Signing in with Google" below), and the chat assistant some websites made with Pluma offer their visitors (see "Chat assistants on Pluma websites" below). A fuller privacy notice for the whole Pluma service, the dashboard and the websites we make and look after for customers, is on its way.

What we collect

Very little. Specifically:

• Your light or dark mode choice, if you pick one. It's saved in your own browser, in its storage and in one small cookie ("pluma_theme") that the Pluma dashboard reads too, so both open the same way. It only says light or dark, and we don't record it.
• Nothing else. This website has no accounts, no analytics, no advertising trackers, and no other cookies. (Sign in or sign up, and you move to the Pluma dashboard — see "Signing in with Google" below for what that collects.)

Signing in with Google

If you choose "Continue with Google" in the Pluma dashboard (app.pluma.website), Google shares your name, email address and profile picture with Pluma. We ask Google for nothing more: only the basic "email" and "profile" permissions.

• We use them only to create your Pluma account, sign you in, and show your name and picture in your dashboard.
• We keep them with your account on our servers, run by OVHcloud in France.
• We don't use Google user data for advertising, we don't sell it, we don't use it to train AI models, and we don't share it with anyone except the hosting provider that stores it for us.
• You can disconnect Pluma at any time at myaccount.google.com/permissions, or delete your account in the dashboard's Settings.

Chat assistants on Pluma websites

Some businesses with a website made by Pluma turn on a chat assistant that answers visitors' questions. If you use one:

• We keep what you type and the answers you get, so the assistant can follow the conversation. We delete the conversation 30 days after its last message.
• To write each answer, your messages are sent to the AI company that writes it: the one Pluma uses, or the one the business chose (Anthropic, OpenAI or Google).
• We don't save your IP address with the conversation, the business can't read it, and we don't use it for advertising or to train AI models.
• Your browser remembers which conversation is yours until you close the tab.

Fonts

The lettering on this site comes from Pluma's own servers. Your browser doesn't ask Google or anyone else for it, so no one else learns that you visited.

What we don't do

• We don't sell your personal information, and we don't "share" it for advertising, as California law defines those words. We never have.
• We don't use it for targeted advertising, and we don't build profiles of you.
• We don't add you to any list you didn't ask to be on.
• We don't make decisions about you by automated means alone.

Do Not Track and Global Privacy Control

We don't follow you across other websites, so there's nothing for a "Do Not Track" signal to switch off. If your browser sends a Global Privacy Control signal, we treat it as a request not to sell or share your information, which we don't do anyway.

Who else sees it

Only the companies we rely on to host Pluma, store email and send replies, and only as far as needed to do that. They work for us under contract and can't use your information for anything else. We don't hand your details to anyone else unless the law requires it.

If you pay for a plan, the payment company that takes your payment (Stripe for US dollars, Razorpay for Indian rupees) handles your payment details; we never see your full card number. Payments in US dollars are taken by EVA Digital Inc. Payments in Indian rupees (by UPI, net banking or an Indian card) are collected by Habilesoft India Private Limited (CIN U72200RJ2014PTC045748), which sells Pluma in India and issues the invoice for those payments. The company that takes your payment receives your name, email address and what you bought, to take the payment and issue the invoice.

Where it's kept

This website itself doesn't hold anything about you — your theme choice lives in your own browser, and we don't record it. If you sign in to the dashboard with Google, that account data is kept on our servers, run by OVHcloud in France (see "Signing in with Google" above). Our team, in the United States and elsewhere, may reach it to run Pluma.

How long we keep it

We don't hold anything from this website itself, so there's nothing to keep or delete here. If you've signed in to the dashboard with Google, that account data stays until you delete your account or disconnect Pluma (see "Signing in with Google" above) — or until you ask us to remove it under "Your rights" below.

Conversations with a chat assistant on a Pluma website are deleted 30 days after their last message.

Your rights

Some US states, such as California, give their residents privacy rights. We give the same rights to everyone, wherever you live. You can:

• Ask what we hold about you and how we use it, and get a copy.
• Ask us to correct it.
• Ask us to delete it, and we will — the whole record, promptly.
• Opt out of any sale, sharing or targeted advertising (we don't do these, but you can still ask).

Email hello@pluma.website for any of these. It's free, and using these rights never changes how we treat you. We may need to confirm it's really you before we act, and someone you authorize can ask for you. We'll reply within 45 days. If we turn your request down, reply to us and we'll look at it again; if you're still unhappy, you can contact your state's attorney general.

If you're in the EU or the UK

For people in the European Union and the United Kingdom, EVA Digital Inc. is the "controller" of the information described here under the General Data Protection Regulation (the GDPR) and the UK GDPR. The law lets us use it for these reasons:

• Your Google name, email address and picture: to create and run the account you asked for (our contract with you, Article 6(1)(b) of the GDPR).
• Your light or dark choice: to show the theme you picked (our legitimate interest in remembering a choice you made, Article 6(1)(f)).
• Emails you send us: to answer you (our legitimate interest in replying, or our contract with you if you use Pluma).
• What you type in a chat assistant on a Pluma website: to answer your questions (the legitimate interest of that business, and ours, in answering its visitors, Article 6(1)(f)).

On top of the rights above, you can ask us to limit what we do with your information, object to how we use it, and withdraw any permission you've given. We'll reply within one month. Your information is kept in France, inside the EU; when it reaches us in the United States or anyone else outside the EU or UK, it's protected by the safeguards the GDPR requires, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. You can also complain to the data protection authority where you live or work (in the UK, the Information Commissioner's Office).

Keeping it safe

We take sensible precautions to protect the little we hold. No method of storing or sending information is completely secure, so we can't promise perfection — but we hold very little, which is the best protection there is. If something ever went wrong with your information, we'd tell you as the law requires.

Children

This website is not aimed at children, and Pluma accounts are for people 18 and over. We don't knowingly collect anything from children under 13, or from anyone under 18. If you think we have, tell us and we'll remove it.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and the date at the top.

Contact

EVA Digital Inc. · 131 Continental Dr, Suite 305, Newark, DE 19713, United States · hello@pluma.website