Privacy Policy

1. Introduction

PlanetGraph ("we," "our," or "us") operates the PlanetGraph platform, an AI-native graph database service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, API, and related services (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in via a third-party provider (e.g., Google, GitHub), we receive basic profile information from that provider.

Usage Data

We automatically collect information about how you interact with the Service, including API calls, query execution metadata, token consumption, timestamps, IP addresses, and browser or client identifiers.

Graph Data

You may store nodes, edges, and properties in your graph database. We process this data solely to provide and maintain the Service. We do not access, analyze, or use your graph data for any purpose other than delivering the Service to you, unless required by law.

Derived Search and Embedding Data

If you configure properties as searchable, PlanetGraph may create derived search artifacts and embeddings from those selected properties to provide search and semantic retrieval. You control which properties are eligible for search and embedding through property search rules and per-property search settings.

Billing Information

Token purchases and transaction history are recorded. If payment processing is enabled, payment processing is handled by third-party payment processors; we do not store full credit card numbers.

3. Data Processing Roles

For customer graph data submitted to the Service, you are the controller or processor, as applicable, and PlanetGraph acts as a processor or subprocessor. PlanetGraph acts as a controller for account, billing, security, fraud-prevention, and operational metadata used to run and protect the Service.

Enterprise customers may request data processing terms at legal@planetgraph.ai or review our Data Processing Addendum.

4. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your identity and manage your account
• To process transactions and manage token balances
• To enforce access control policies you configure
• To monitor and improve platform performance and security
• To send service-related communications (e.g., security alerts, billing notifications)
• To comply with legal obligations

5. Data Sharing and Access Policies

PlanetGraph enables data sharing between users through access policies. When you create an access policy on your properties, other users may purchase access to that data using tokens. You have full control over which properties are shared, at what price, and can revoke access policies at any time.

We do not sell your personal information or graph data to third parties. We may share information with:

• Service providers who assist in operating the platform (hosting, payment processing)
• Law enforcement or regulatory bodies when required by applicable law
• Other users, only when you have explicitly configured access policies to share specific properties

6. Google-Derived Data and Limited Use

If you use PlanetGraph with Google-derived data, including email-derived data, we process that data only to provide, secure, maintain, and support the Service you configure. We do not sell Google-derived data or use it for advertising.

PlanetGraph may transfer Google-derived data only to subprocessors necessary to provide the Service. Customer property content is sent to OpenAI for embeddings only when the customer configures the relevant properties as searchable and therefore eligible for semantic retrieval.

7. Data Security

We implement security measures including encryption in transit, encryption at rest, property-level encryption, property-level access controls, node and edge visibility controls, audit logging, and managed infrastructure protections. See our Security page for more detail. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention and Deletion

We retain account information and graph data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Product delete actions remove data from active product surfaces and trigger cleanup of relevant search indexes, embeddings, and graph projections where applicable.

Verified GDPR erasure requests may require a broader workflow across active Postgres records, encrypted properties, derived search indexes, embeddings, Neo4j projections, and backup retention cycles. Audit, billing, security, and legal records may be retained where required or reasonably necessary, with minimization or anonymization where appropriate.

9. Subprocessors

We use subprocessors to host, secure, authenticate, email, and operate the Service. Our current subprocessor list is available at Subprocessors.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your graph data via the API
• Object to or restrict certain processing activities

To exercise these rights, contact us at privacy@planetgraph.ai.

11. International Data Transfers and Residency

Your data may be processed in jurisdictions outside your country of residence. We use appropriate safeguards for international transfers in compliance with applicable data protection laws. PlanetGraph's managed production API and primary database currently run on Google Cloud in the United States in us-central1. See Data Residency for details.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@planetgraph.ai.