Legal
Privacy Policy
Last updated: October 26, 2026
Plujo, based in Ontario, Canada ("Plujo", "we", "us"), runs plujo.com. This policy explains what personal information we collect through the site, why, who helps us handle it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
01 What We Collect
You can read plujo.com without telling us who you are. We collect personal information only when you give it to us, plus a small amount of technical information described in sections 03 and 04.
Contact form. Your name, email address, the topic you choose, your company if you add it, and your message.
Connect the Dots and the Brain Scorecard. Your website address, industry, team size band and salary band; your ratings of each part of your business; and your name and email address when you ask for your scorecard. To keep the tool from being abused, we also store your browser's user agent and a one-way scrambled version of your IP address (we cannot turn it back into your address). We record when your scorecard is created, emailed and opened, and whether you click to book a call.
If you are under 18, please do not submit personal information.
02 How We Use It
We use what you give us to answer your message, build and email your Brain Scorecard, follow up about working together, and improve the site and the tool. We do not sell, rent or trade your personal information.
AI. When you use Connect the Dots, we read the public pages of the website you enter and send that text, your industry, your team size band and your ratings to Anthropic's Claude API, which rewords the tool's questions for your business and helps write your scorecard. We do not send your name or email address. Anthropic does not use data sent through its API to train its models. The numbers in your scorecard are calculated by our code, not by AI.
03 Analytics
We use Google Analytics 4 to understand how people find and use plujo.com: which pages are visited, roughly where visitors are, what device and browser they use, and whether someone sends the contact form or finishes Connect the Dots. Google Analytics uses cookies (section 04) and sends this information to Google. We use it only on the public pages of the site, not in our staff area. We do not send Google your name, email address or message.
You can block Google Analytics on every site with Google's opt-out add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser. Google explains how it uses this data at policies.google.com/technologies/partner-sites.
The contact form and Connect the Dots are protected by Google reCAPTCHA, which checks that you are a person and not a bot. Google's Privacy Policy and Terms of Service apply to it.
04 Cookies
Cookies are small files a website stores in your browser. plujo.com uses:
- plujo-session and XSRF-TOKEN: keep the site working while you use it, remember your progress in Connect the Dots, and protect the forms against forgery. They are needed for the site to work.
- _ga and _ga_XMRHXDTYD1: Google Analytics, to tell one visit from the next. They last up to two years.
- reCAPTCHA cookies set by Google on the contact and Connect the Dots pages, to spot bots.
You can set your browser to refuse or delete cookies. The site will still mostly work, but Connect the Dots and the forms need the first two.
05 Who Helps Us
We share personal information only with service providers who help us run the site, and only as much as they need:
- Google Cloud hosts the site and its database in the United States (us-central1).
- Mailgun sends our emails, including your scorecard.
- Anthropic provides the AI described in section 02.
- Google provides Analytics and reCAPTCHA (section 03).
- Bunny Fonts serves the site's typefaces, so your browser contacts it when a page loads.
- TidyCal handles bookings if you choose to book a call; its own privacy policy applies there.
Some of these providers store or process information outside Canada, mainly in the United States, where it may be accessible to authorities under local law. We may also disclose information if the law requires it, or to protect the rights, property or safety of Plujo, our clients or others.
06 How Long We Keep It
We keep contact messages and scorecards for as long as we need them to follow up with you and run our business. Your scorecard link keeps working so you can come back to it. Ask us and we will delete your information, unless the law requires us to keep it.
07 Accuracy & Security
We take reasonable steps to keep your information accurate, and we protect it with measures suited to its sensitivity, including encrypted connections and restricted access. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
08 Your Choices
You can ask to see the personal information we hold about you, correct it, or have it deleted, and you can withdraw your consent to us contacting you at any time. Email hello@plujo.com and we will answer within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
09 Other Sites
plujo.com links to other websites. We are not responsible for their privacy practices, so please read their policies.
10 Changes
We may update this policy. When we do, we will change the date at the top of this page.
Questions about your privacy?
Email hello@plujo.com, or reach out through our contact page.