Privacy Policy

1. Who we are

Triont Pty Ltd is an Australian company providing AWS infrastructure intelligence services under the plainfra brand. Your account data, conversation history, generated reports, and infrastructure metadata are stored on AWS infrastructure in Sydney (ap-southeast-2). Data processed by models running inside AWS is never used to train AI models, under AWS's service terms. Where a third-party AI provider is used, that provider's terms apply.

Contact: support@plainfra.com

2. What we collect

Account information. When you sign up for plainfra, we collect your name, email address, company name, AWS account ID, and AWS region. This is required to create and manage your account.

Infrastructure telemetry. plainfra queries your AWS environment using a read-only IAM role you deploy in your account. We collect infrastructure metadata including resource inventories, health states, alarm states, scaling events, Cost Explorer data, CloudWatch alarm states, security group rules, and S3 bucket configuration. We do not access application data, S3 object contents, database rows, DynamoDB items, Secrets Manager secret values, secure SSM parameters, queue messages, or log event contents.

Query logs. We log the natural language queries you submit to plainfra and the responses generated. These logs are used for service operation, debugging, abuse detection, and service improvement.

Usage data. We collect usage metrics including query counts, token consumption, API response times, and error rates. This data is used for billing, capacity planning, and product improvement.

Website analytics. We use Google Analytics to collect anonymised information about how visitors use plainfra.com, including pages visited and approximate location. No personally identifiable information is collected through this mechanism.

3. How we use your information

• To provide, operate, and maintain the plainfra service
• To process billing and manage your subscription
• To send service-related communications including account setup instructions, billing receipts, and important service notices
• To debug issues and respond to support requests
• To detect and prevent abuse, fraud, and unauthorised access
• To improve and develop the Service, including detection rules, prompts, investigation recipes, and our own AI models, using records of how investigations were carried out, as described in Section 4
• To produce anonymised case studies, examples, and marketing materials as described in Section 5

4. AI and query data

plainfra uses AI models to process your queries and generate responses. The query, relevant infrastructure metadata, and response are processed to produce the answer or report.

AWS-hosted models do not train on your data. Data processed by models running inside AWS is never used to train AI models, under AWS's service terms. Where a third-party AI provider is used, that provider's terms apply. We do not share, sell, or license your data to any third party for the purpose of training their models. Nothing about your environment becomes part of a model that anyone outside plainfra can query.

plainfra does learn from how investigations are run. Separately from those providers, we retain and use records of how each investigation was carried out — which tools were selected and in what order, the queries issued, the infrastructure metadata returned, where the investigation paused or stopped, and whether the resulting answer was judged sound. We call these investigation traces, and we use them to develop, train, and evaluate plainfra's own models and decision systems.

Traces are pseudonymised before they are retained. Direct identifiers — AWS account identifiers, resource names and ARNs, tag values, hostnames, IP addresses, and your organisation and user identifiers — are replaced with stable substitute tokens using a one-way function. We do not keep a mapping that would let us reverse those tokens. A pseudonymised trace can still carry the structural shape of an environment, so we describe traces as pseudonymised rather than anonymous. Traces contain no credentials, authentication data, or billing information.

What we build from traces stays inside plainfra. The models and decision systems we develop from traces are our own intellectual property. They are never published, never shared or licensed to a third party, and never offered as a dataset. They are used only to run plainfra itself. What they encode is investigative procedure — which enquiry follows which, when a line of enquiry is exhausted, how a finding is weighted — rather than the contents of any particular environment.

Traces are retained indefinitely and are not deleted on the schedule in Section 7. Models, datasets, and decision systems developed from them are owned by Triont, may be used to serve all of our customers, and may be commercialised as part of or separately from the Service.

plainfra stores conversation history and query logs as described in Sections 2 and 7. Apart from investigation traces, AI processing does not change those retention periods.

5. Anonymised examples and case studies

We may use findings, query patterns, or infrastructure discoveries from real plainfra assessments as anonymised examples in our marketing materials or documentation. Before doing so, we remove all identifying information including company names, AWS account IDs, resource identifiers, and any information that could reasonably identify your organisation.

To opt out, email support@plainfra.com. We will honour all opt-out requests within 14 days.

6. Data sharing and third parties

We do not sell your data. We share data only in the following limited circumstances:

• Service providers. We use AWS for hosting and infrastructure, Stripe for payment processing, and Amazon SES for transactional email. These providers process data only as necessary to deliver services to us.
• Legal obligations. We may disclose information if required by Australian law, court order, or regulatory authority.
• Business transfers. In the event of a merger, acquisition, or sale of assets, customer data may transfer to the acquiring entity. We will notify affected customers.

7. Data retention

We retain account information for the duration of your subscription and for 90 days following account closure. Conversation history and infrastructure telemetry snapshots are retained for 90 days. Generated reports are retained for 365 days. Query logs are retained for 12 months. Billing records are retained for 7 years as required by Australian tax law. Pseudonymised investigation traces, described in Section 4, are retained indefinitely and are the one exception to the periods above.

8. Data security

Stored customer data is kept on AWS infrastructure in Sydney (ap-southeast-2). Access to production systems is restricted to authorised Triont personnel. API keys are stored as SHA-256 hashes, so we cannot recover your plaintext key. All data in transit is encrypted using TLS.

9. Your rights

Under the Australian Privacy Act 1988, you have the right to access, correct, or request deletion of personal information we hold about you. Contact us at support@plainfra.com. We will respond within 30 days.

10. Cookies

We use Google Analytics cookies on plainfra.com to understand site usage. These cookies do not collect personally identifiable information. You can opt out using the Google Analytics Opt-out Browser Add-on.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify customers of material changes by email and update the effective date above. Continued use of the service after changes are notified constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at support@plainfra.com.