How Pluto handles your data
Pluto works with your order revenue, ad spend, costs, and profit. Here's where that data lives and what we do with it.
Last updated
Certifications
We haven't completed a SOC 2 audit or ISO 27001 certification yet, and we're not claiming either.
Your data
Where it lives
Pluto's backend, object storage, and both databases all run in US regions.
Customer data
We keep the order's country, region, and city, plus a customer ID for repeat-buyer analytics. Not names, emails, phone numbers, or street addresses.
Deletion
When a store leaves Pluto, we delete its data, and nothing is kept afterward.
The stack
Merchant interface
Business logic and integrations
AWS us-east-1, Northern Virginia
AWS us-east-1, Northern Virginia
Locks, queues, and idempotency
Authentication and organizations
Security and data residency
Found a security issue? Email legal@pluto.camp with enough detail for us to reproduce it. If you need your data in a specific region, like the EU or APAC, get in touch and we'll talk it through.