Privacy Policy
Version 2026-10-25. This explains what Plato Perfect Forms (the "App") and its sign-up and access service collect, where it goes and how long we keep it.
1. What we receive
When you sign up: your name, phone number and email, your plan (the free beta), and when you accepted the beta terms. A copy is emailed to our support inbox. We review each sign-up; when we approve yours we record when, and email you a download link made for you: a random code that works for one download, only while your access is approved. We record when the link is first used; after that it keeps working for one week (in case the download is interrupted) and then stops. Every new link email replaces the last code.
When the App checks your access (at sign-in and about every four hours while online): your ServiceTrade sign-in email, the App's version, and your phone's device ID (on Android, the Android device ID; on iPhone, a random ID the App creates and keeps in the phone's keychain). We keep only the latest check-in for each phone.
To stop abuse we keep the internet address of each sign-up attempt and each request to email a download link for one hour (and of a wrong admin password for ten minutes); older ones are deleted automatically.
2. What we never receive
Your ServiceTrade password, your session, your customers, jobs, inspection forms, answers, deficiencies, photos and signatures go only between your phone and ServiceTrade (spoken answers and the Dot: see section 3). They are never sent to us, except what the Dot passes through our server on its way to OpenAI, which we do not keep (see section 3). The App contains no advertising, analytics or tracking services, and the barcode/QR scanner reads codes on your phone.
3. Voice
When you answer by voice, the App uses your phone's own speech recognizer. On Android, the default recognizer (on most phones Google's) may, with signal, send the audio to its provider to turn it into text, under that provider's privacy terms. On iPhone, Apple's recognizer works on the phone when the phone supports it; otherwise Apple may process the audio on its servers, under Apple's privacy terms. The App's spoken questions are made on the phone. We never receive the audio. You can always tap or type instead, and the microphone opens only when you tap it unless you turn on "Listen after each question".
The Dot inside Plato (optional). When you speak a result that Plato's own voice commands don't handle, Plato sends the text of that sentence (never the audio), with the last few you said, and a short list of the devices for that part of the open form (their labels, places, status and current values) through our own server at thegophergalaxy.com to OpenAI's API, which returns form actions; Plato checks every action before it changes the form. The OpenAI key lives only on our server, never in the App. Our server checks the App's license and passes the request on; it keeps no inspection content, only a count of requests from each phone (for rate limits) and a log line for each request with a scrambled (hashed) device ID, the result status and how much text was processed. OpenAI processes the request under its API terms; per those terms, data sent through its API is not used to train its models. Sentences you say without signal are kept on your phone, encrypted, for up to seven days (and removed when you sign out), and are sent when signal returns.
4. On your phone
Changes waiting for signal and the copies of recent forms are stored on your phone, encrypted. Waiting changes are removed once ServiceTrade has them (on iPhone, the App may also send them in the background when signal returns, only to ServiceTrade); photos are deleted from the App once uploaded, or when you cancel them. Copies of forms, today's jobs and deficiency lists are removed after seven days (a form with changes still waiting is kept until they are sent) and when you sign out. The App also keeps an encrypted log on your phone of the values it wrote (when, which device and field, the old and new value, and whether you entered it), for up to seven days, so a report can be checked; it never leaves your phone unless you send it to us. If the App crashes on Android it saves a short report in the App's own folder on the phone (time, App version, phone model, Android version and the technical error details; not encrypted; passwords and session codes are removed, but an error message can quote a value the App was handling), keeping the newest 20; it is not sent anywhere unless you send it to us. Your settings stay on the phone until you uninstall the App.
5. How we use it
Only to give you access to the App, keep it working, contact you about the beta (including support you ask for) and block misuse. We do not sell or rent your information or use it for advertising.
6. Who else sees it
Our web host stores the sign-up and access records, and our email provider carries the sign-up notice. Like any website, our web host's standard server logs also record the internet address and time of each page visit and access check; the host keeps and deletes those logs on its own schedule, and we use them only to fix problems or stop abuse. We disclose information only if the law requires it.
7. How long we keep it
Sign-up and access records are kept while you use the beta and deleted within 90 days after you ask us to, or after the beta ends, unless the law requires us to keep them longer.
8. Your choices
To see, correct or delete your information, or to stop using the beta, contact Tech Support by text at 469-996-9420 or email at platoforms@thegophergalaxy.com. Deleting your access record means the App will ask you to sign up again.
9. Changes
If we change this policy, the version date above changes. Important changes are announced to signed-up users.