1. Controller and contact details
PlumWallet is operated by Francesco Dongo, a self-employed professional, VAT no. 14441480960, who is the data controller. For privacy questions and requests concerning your rights, contact support@plumwallet.cloud.
2. Data we process
PlumWallet processes usernames, email addresses, passwords stored as hashes, account settings, uploaded documents and attachments, text fields, notes, dates, collections, categories and sharing settings. It also processes technical data needed for sessions, security and service operation, activities recorded in your wallet and any messages you send to support.
Additional features process extracted attachment text, change history with authors and previous values, links between renewals and versions, trashed data, external sharing recipients’ email addresses and access expiry dates. A technical content fingerprint is stored to flag identical files.
3. Purposes and legal grounds
Account and archive data are used to provide the functions you request: access, storage, viewing, sharing, export and account management. The legal basis is performance of the requested service. Processing needed to protect the service and prevent abuse is based on the legitimate interest in security, with respect for users’ rights. Legal obligations may require additional processing.
4. Other people’s documents
Only enter relatives’ or other people’s data when you are entitled to do so and have informed them where required. In particular, do not upload health information or other special-category data without an appropriate legal basis. Include only necessary details and check recipients before sharing.
5. Sharing and reminders
Shared documents are accessible to selected users according to the permissions granted: view, edit or full control. When enabled, expiry reminders are emailed to the owner and the users the document is shared with. Emails contain the document title, expiry date and a link to the web app. The owner and users with edit or full-control access can change the reminder. Revoking sharing stops future access but does not remove copies a recipient has already downloaded.
Attachments can also be shared with recipients without an account using a link and a 6-digit PIN sent by email, for a chosen duration or until revoked. Anyone with the link and PIN can open the attachments while access remains valid. Even view-only recipients can create an independent document copy in their own wallet, optionally with attachments, or leave the share. Revocation does not remove downloaded or duplicated copies.
6. Providers and access to data
The service uses Aruba hosting, database and email infrastructure. Technical providers process data required to deliver their services. The operator may access data for support, maintenance, account administration and security; data may also be disclosed where required by law. Data is not sold for marketing purposes. Encryption does not prevent the server from processing data to provide the service.
Word recognition in PDFs and images runs in the browser on the user’s device, without sending attachments to an external recognition service. Extracted text is then stored encrypted on the server for search.
AI renewal guidance is prepared but not active: this feature currently sends no data to OpenAI. When activated, analysis will require confirmation and use only the hints displayed and editable in the popup — document type, location and issuer — without sending attachments or other document data. Applicable processing information will be updated before activation.
7. Data protection
Connections to the web app use HTTPS. Attachments, notes and document fields are encrypted on the server; passwords are stored as hashes. Management metadata, such as titles, categories and expiry dates, is not all encrypted. Document access is checked against the user’s account and permissions. This protection is not end-to-end encryption.
Indexed text, history content and trashed data are also stored encrypted. History makes changes recorded since the feature was enabled visible to users authorised to access the document.
8. Retention and deletion
Archive data is retained while the account is in use. Documents and attachments moved to trash remain recoverable by the owner for 30 days and continue to use storage, unless permanently deleted sooner. Once that period expires, they are no longer recoverable and are removed by scheduled cleanup. Restoring does not reactivate sharing or reminders. Leaving a received share ends the recipient’s access without deleting the owner’s document. Backup copies, technical records and support communications may require additional retention limited to recovery, security or applicable legal requirements. Contact the controller for retention information relevant to your situation.
9. Cookies and this website
This presentation website does not embed third-party advertising or analytics tools. The web app uses technical cookies for authentication, sessions and request protection. These cookies are needed for requested functions. Hosting infrastructure may log technical information about requests.
10. Your rights
Where provided by applicable law, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You can export your archive and delete your account from the account page. You may also lodge a complaint with the Italian Data Protection Authority or your competent supervisory authority. Send requests to support@plumwallet.cloud.
11. Updates
This page describes the PlumWallet web app and is updated when processing practices change. The revision date appears above.