Privacy Policy
Effective 1 March 2026
Overview
Pluto Connect is a telehealth platform designed for therapy sessions between clinicians and their clients. We take privacy seriously, especially given that our users may include children.
Data We Collect
- Clinician accounts: Email address, display name, and timezone preference.
- Client information: First name, date of birth, and parent/guardian contact details (email). This information is entered by the clinician on behalf of their client.
- Session data: Scheduled session times, session status, and invite email records.
Data We Do NOT Collect or Store
- Video and audio: Sessions are not recorded. Video and audio streams are processed in real-time by Daily.co and are never stored by Pluto Connect.
- Canvas drawings: Collaborative whiteboard content exists only during live sessions and is not permanently stored.
- Chat messages: In-session chat messages are automatically deleted 24 hours after a session ends.
How We Use Your Data
Your data is used solely to facilitate therapy sessions: scheduling, sending invite emails, and managing session access. We do not sell, share, or use your data for advertising purposes.
Third-Party Services
- Supabase: Database and authentication (hosted in Sydney, Australia).
- Daily.co: Video conferencing infrastructure.
- MailerSend: Transactional email delivery.
- Fly.io: Application hosting (Sydney region).
Cookies
We use session cookies for authentication and session management only. We do not use tracking cookies or third-party advertising cookies.
Children's Privacy
Client accounts are managed by clinicians. Children access sessions via invite links and do not create accounts or provide personal information directly to Pluto Connect.
Data Retention
Account data is retained while your account is active. Chat transcripts are automatically deleted 24 hours after session end. You may request account deletion by contacting us.
Contact
For privacy enquiries, contact us at support@plutoconnect.io.