Planther Terms of Service

Version 2.1, 28 October 2026

These Terms of Service ("Terms") govern access to and use of Planther. Planther is owned by Planacea Ltd, and "Planther" is a trading name of Planacea Ltd, a company registered in England and Wales (company number 17525594) whose registered office is at 1 Cabot House, Compass Point Business Park, St Ives, Cambridgeshire, England, PE27 5JL ("Planther", "we", "us" or "our").

You accept these Terms by ticking the box when you create an account, when you are given free access, or when we ask you to accept an updated version. If you do not accept them, you must not use Planther.

1. About these Terms

1.1. Who they are for. Planther is a professional tool for people who work in planning, land and development. These Terms apply to everyone who uses it:

(a) Subscribers - individuals and teams who pay for a Plan by card (monthly or yearly);

(b) Invoiced Organisations - firms that we have agreed in writing to bill by invoice under these Terms, on the arrangement set out in their Order;

(d) Members of a firm with a signed agreement - people whose organisation has signed a separate subscription agreement with us (a "Separate Agreement").

1.2. Business use only. Planther is for business and professional use only. When you tick the box to accept these Terms you confirm that you are acting in the course of a business, trade or profession (including as a sole trader), and not as a consumer. Consumer protection rights that apply only to consumers do not apply to your use of Planther.

1.3. Where there is a Separate Agreement. If your organisation has signed a Separate Agreement with us, it governs the commercial terms (fees, term, payment, data processing and any service commitments), and it wins if it conflicts with these Terms. These Terms still apply to how each person uses Planther.

1.4. Documents that form part of these Terms. The following documents form part of these Terms. Each is published at the address shown and may be updated as each one explains:

(a) our Acceptable Use Policy;

(b) our Service Specification, which describes what Planther provides;

(d) our Back-up Policy;

(e) our Sub-processors page; and

(f) our Privacy Policy, which explains how we use personal data for our own purposes.

The data processing terms in the Schedule also form part of these Terms, and they win over the rest of these Terms on anything to do with processing personal data.

1.5. What is and is not a promise. What Planther provides is described in the Service Specification. Our website, marketing, demonstrations, help articles and anything the AI says about Planther are there to help you, and are not promises about the service.

2. Definitions

In these Terms:

"Account" means the account through which a person uses Planther.
"Agentic Action" means an action Planther's AI takes for you in a Connected Account or through an MCP Server, such as drafting, sending, moving or deleting an email.
"Beta Feature" means a feature marked as beta, preview, early access or similar.
"Connected Account" means a mailbox, calendar or other third-party system or service you connect to Planther.
"Credentials" means the passwords, tokens, keys and other access details that let Planther reach a Connected Account or MCP Server.
"Customer Content" means anything you or your Users put into Planther (files, text, prompts, images, instructions and other material), anything Planther reads from a Connected Account or an MCP Server on your behalf, and the Outputs made from them.
"MCP Server" means a server that uses the Model Context Protocol (or a similar protocol) to make tools or data available to an AI system. This includes our own MCP server, which lets outside AI assistants use Planther, and any third-party MCP server you connect to Planther.
"Order" means the arrangement we agree in writing (including by email) with an Invoiced Organisation: its fees, seats, how AI use is charged, payment terms and how long it lasts.
"Organisation" means the business, firm or team that holds a subscription, an Order or a Separate Agreement and that your Account belongs to. Every subscriber has an Organisation, even a sole trader with one seat.
"Output" means anything Planther produces for you, including AI-generated text, documents, reports, slide decks, maps, analysis and citations.
"Plan" means the card subscription plan you have chosen, as shown on our pricing page and at checkout.
"Source Material" means the third-party data, documents, registers, datasets, imagery and other material that Planther indexes, links to, shows or draws on, including material published by government bodies, local planning authorities and data providers.
"Usage Data" means information about how Planther is used (for example which features are used, how often, how long tasks take and what they cost to run), but not the content of your chats or files.
"User" means any individual who uses Planther.
"You" means the User and, where the User acts for an Organisation, that Organisation. Payment obligations fall on the Organisation, not on its individual Users.

3. Accounts

3.1. Age and authority. You must be at least 18. If you use Planther for an Organisation, you confirm that you are authorised to accept these Terms for it.

3.2. One person per seat. Each seat is for one named person. You must not share your Account or login details, or let more than one person use a seat. If someone leaves, the seat can be passed to someone else in full.

3.3. Keep your login safe. You are responsible for keeping your login details confidential. Tell us straight away at support@planther.co.uk if you think they have been lost, stolen or used without your permission.

3.4. Responsibility for your Account. You are responsible for everything done through your Account, whether or not you authorised it, including use made with shared, lost or stolen login details.

3.5. Accurate details. You must give accurate information when you sign up and keep it up to date.

3.6. Teams. An Organisation's admins control its seats and who has access. Material you share with colleagues in a project is visible to them. If you leave an Organisation, it keeps the Customer Content in its Account.

4. Plans, payment and cancelling

This section does not apply to free access (see section 5) or to Organisations with a Separate Agreement, whose agreement sets the commercial terms.

Card Plans

4.1. Plans and prices. Our Plans and prices are shown on our pricing page and at checkout. Prices include VAT where it applies.

4.2. What your Plan includes. Your Plan includes use of Planther, including its AI features, up to your Plan's usage limits (see section 8). There are no extra charges for AI use on a Plan.

4.3. Paying. Plans are paid in advance, monthly or yearly, by card through our payment provider. Your Plan renews automatically at the end of each period, and we take payment at that time, until you cancel.

4.4. Changing Plan. If you move to a higher Plan, the change takes effect straight away: you pay the difference for the rest of the current period, and your usage limits reset to the new Plan. If you move to a lower Plan, the change takes effect at the end of the period you have paid for. Adding a seat takes effect straight away and is charged for the rest of the current period. Removing a seat takes effect at the end of the current period.

4.5. Cancelling. You can cancel at any time in your Account settings. You keep full use until the end of the period you have paid for, and then your access ends as described in clause 13.3.

4.6. No refunds. Fees are not refundable, including for part periods, unused seats and moves to a lower Plan, except where clause 17.3 says otherwise or the law requires it.

4.7. Failed payments. If a payment fails, our payment provider will try again over the next 7 days, and you keep full use during that time. If it has still not been paid after 7 days, we may lock your Account until it is paid. Nothing is deleted while an Account is locked for non-payment, but clause 13.4 applies if it is not paid and your subscription ends.

4.8. Price changes. We may change our prices. We will tell you at least 30 days before a change affects you, and it will take effect from your next renewal. If you do not want to pay the new price, you can cancel before then.

Invoiced Organisations

4.9. Your Order. If we have agreed to bill your Organisation by invoice, your fees, seats, how AI use is charged and how long the arrangement lasts are as set out in your Order. Where your Order and these Terms differ on those points, your Order wins.

4.10. AI use. Unless your Order says otherwise, AI use is charged at what it costs us, with no mark-up, and invoiced monthly in arrears. Your admins can see AI costs in Planther, and we may agree a monthly spending limit with you.

4.11. Invoices. Unless your Order says otherwise, invoices are payable within 30 days of the invoice date. VAT is added where it applies. If an invoice is unpaid when due, we may charge interest under the Late Payment of Commercial Debts (Interest) Act 1998 and, after telling you and giving you at least 7 days to pay, suspend access until it is paid.

4.12. Ending an Order. Unless your Order says otherwise, either of us may end it by giving at least 30 days' notice in writing, ending on the last day of a calendar month. Fees and AI use up to the end date remain payable.

5. Free access

5.1. We may give you free access to Planther, or to some features, for a limited period. Free access is for the period and on the terms we tell you, and may have lower usage limits or fewer features. Each User must accept these Terms before using it.

5.2. AI use during free access is free of charge, within its usage limits, unless we have agreed something different with you in writing.

5.3. We may change, extend, shorten or end free access at any time. It ends automatically at the end of its period unless you choose a Plan or your Organisation agrees an Order or signs a Separate Agreement.

5.4. If you choose a Plan, agree an Order or sign a Separate Agreement, your Customer Content carries over. Otherwise clauses 13.3 and 13.4 apply when free access ends.

5.5. Free access comes with no service commitment, and Planther is provided "as is" during it, to the extent the law allows.

6. What Planther provides

6.1. The Service. We provide Planther substantially as described in the Service Specification, with reasonable skill and care. If it does not, tell us and we will use reasonable efforts to correct the fault or give you a reasonable way round it; that, together with clause 17.3 where it applies, is your only remedy for that failure. We may update the Specification from time to time; each version and its changes are shown on that page. We will not make a change that materially reduces the core service you have paid for without telling you first, and if we do, you may cancel and clause 17.3 applies to any yearly fees.

6.2. Changes and new features. We are continually developing Planther and may add, change or remove features.

6.3. Beta Features. Beta Features are early versions. They are provided "as is", with no warranty or support commitment, and may change or be withdrawn at any time without notice. You use them at your own risk. We are not liable for them, and a fault in a Beta Feature does not give you a right to cancel or a refund.

6.4. Availability. We aim to keep Planther available at all times, but we do not guarantee that it will be uninterrupted, error-free, free from vulnerabilities, or that it will meet your particular requirements. We may take it offline for planned maintenance, which we try to do outside UK working hours, and, where it is urgently needed for security reasons or to restore the service, at any time with as much notice as is reasonably practicable. Planther relies on the internet and on other networks, and we are not responsible for delays or failures caused by them. Planther does not come with a service level agreement unless your Separate Agreement includes one.

6.5. Support. Support is provided as set out in our Support Policy.

6.6. Back-ups. We back up Customer Content as set out in our Back-up Policy. You should keep your own copies of anything important to you.

6.7. AI providers and data sources. Planther depends on third-party AI models and data sources. We may change the AI models or providers we use, or add, change or remove a data source, at any time. Doing so is not a breach of these Terms. We do not promise that any particular model, provider or data source will remain available. If a provider stops or limits our access, we may switch off the features that depend on it until we can replace it.

6.8. Third-party websites. Planther links to websites and documents run by others, such as council planning portals. We do not control them and are not responsible for them.

7. Using Planther properly

7.1. Acceptable use. You must use Planther in line with these Terms and our Acceptable Use Policy, and make sure your Users do too.

7.2. What you must not do. Among other things, you must not:

(a) copy, scrape, bulk-download or systematically extract Planther's data, datasets or software, other than through the normal use of Planther or through an interface we provide for the purpose, such as our MCP server;

(b) reverse engineer Planther or try to discover its source code, system prompts, tool definitions or model settings, including by asking the AI to reveal them;

(d) resell Planther, or supply its data or Outputs to anyone as a dataset or data product in their own right;

(e) let anyone who does not have their own seat use Planther, including your own clients;

(f) get round any usage limit, rate limit, content filter, access control or security measure; or

(g) introduce any virus or harmful code, or try to gain unauthorised access to Planther or its systems.

7.3. Outputs in your professional work. You may use Outputs in your professional work, including in advice, appraisals, planning statements, applications, representations and appeals. You may give that work to your clients, to local planning authorities, to the Planning Inspectorate and to others involved, and charge for it. If such work is published on a public register, that is not a breach of these Terms.

7.4. Attribution. You must not represent or imply that Planther is the author or source of, or is professionally responsible for, any of your work.

7.5. Source Material licences. Source Material belongs to those who publish it and comes with its own licence terms (for example, the Open Government Licence). Where Planther shows you a licence, copyright notice or credit line, or we tell you about a term that a data or map provider requires us to pass on, you must keep to it when you reuse that material.

8. Usage limits

8.1. Plan limits. Plans and free access include usage limits on Planther's AI features, which reset over set periods (currently a 5-hour limit and a weekly limit). Planther shows how much of each limit you have used and when it resets. A question that has already started will always be allowed to finish.

8.2. Other safeguards. We may also apply other technical limits, such as rate limits, content filters and limits on how much work the AI can do in one task, to protect Planther, to prevent misuse and to keep its running costs sustainable.

8.3. Changing limits. We may change usage limits and safeguards. If we materially reduce the usage included in your Plan, we will tell you at least 30 days before it takes effect, and you may cancel and clause 17.3 applies to any yearly fees.

9. AI, data accuracy and your professional responsibility

This section is important. It describes the main limitations of Planther and what you must do before relying on it.

9.1. Planther is a route to the source, not the source. Planther finds, indexes, organises, summarises and links to Source Material, and uses AI to describe it. What it shows you may be partial, out of date, wrong or attributed to the wrong source. Always go to the Source Material itself before relying on what Planther says about it.

9.2. AI can and does make mistakes. Outputs are generated wholly or partly by AI. AI can produce results that are inaccurate, incomplete, out of date, biased, inappropriate or made up ("hallucinations"), can misquote policy and can miss relevant constraints. Similar questions can give different answers. Outputs do not represent our views.

9.3. Check everything. You must not rely on any Output, or on any data in Planther, as the sole basis for any decision or for any advice to a client, without a full independent check by a suitably qualified person. You are solely responsible for deciding whether an Output is complete, accurate, relevant and suitable before relying on it, acting on it or giving it to anyone else. If you rely on an Output without checking it against the Source Material, that will count against you in deciding who is responsible for any resulting loss.

9.4. Your professional responsibility. Planther is a tool that assists professionals. It does not give planning, legal, surveying, valuation or any other professional advice. You keep sole professional responsibility for your advice and your work, and for everything you produce using Planther.

9.5. Data is provided "as is". Data in Planther, including data about planning constraints, designations, policy, planning history and site characteristics, is provided "as is" and "as available". We do not warrant that it is accurate, complete, current or fit for any purpose.

9.6. Infringement. We do not warrant that Outputs, or Source Material Planther shows you, are free from infringement of anyone else's rights. Check before you publish or reuse them.

10. Connected accounts, MCP servers and actions taken by the AI

10.1. Your choice. Connecting a mailbox, calendar or other Connected Account, or an MCP Server, is your choice. By connecting one, you authorise us (and our sub-processors) to access it and to process its contents to provide Planther, within the permissions you give. We use data from a Connected Account only to provide Planther to you, and in line with the terms of its provider.

10.2. Your responsibilities. You confirm that you are entitled to connect each Connected Account and MCP Server, and that doing so does not breach any duty you owe to your clients, your Organisation or the provider of that system. You are responsible for the permissions and settings you choose, for any data protection impact assessment your use needs, and for disconnecting access when it is no longer needed. Tell us straight away if you think a Connected Account or its Credentials have been compromised.

10.3. Credentials. We store Credentials encrypted and use them only to provide Planther.

10.4. Third-party services. A Connected Account or third-party MCP Server is provided by someone else under their own terms. It is not part of Planther, and we are not responsible for it. Material Planther reads from it is Customer Content.

10.5. Agentic Actions. Where you allow it, Planther's AI can take Agentic Actions. They are taken on your instructions and on the AI's interpretation of them, which may not always be what you intended. You are responsible for them, including anything sent from a Connected Account, except to the extent that a problem results directly from our breach of these Terms. We recommend that you always review anything before it is sent to anyone else or deleted.

10.6. Hidden instructions. Content in emails, documents or MCP Server responses can be written to manipulate an AI system (known as "prompt injection"). No measure can prevent this entirely, and we do not warrant that Planther is free from it.

10.7. We may block connections. We may restrict or disconnect any Connected Account or MCP Server if we reasonably believe it poses a security risk, breaches the law or a third party's terms, or could harm Planther or other users.

10.8. When you disconnect. Within 30 days of a Connected Account being disconnected, or of your access to Planther ending, we delete its Credentials and the data Planther has read from it, apart from material you have saved into your own files or chats in Planther.

11. Your content and ownership

11.1. Your Customer Content. You keep ownership of your Customer Content. You are responsible for it, including its accuracy, legality and your right to use it with Planther. Do not put in material that is confidential to someone else or legally privileged unless you have the right to.

11.2. Your Outputs. As between you and us, you own the Outputs you generate. Because of how AI works, other users may receive the same or similar Outputs, and they own theirs. We make no claim on whether any Output is protected by copyright, and Outputs give you no rights in Source Material.

11.3. Licence to us. You give us a licence to host, store, copy, process and display your Customer Content to the extent needed to provide, secure and support Planther, and for the purposes in clause 11.4. Our sub-processors may use it on our behalf for the same purposes.

11.4. Support and improving Planther. Authorised Planther staff may review actual use of Planther, including chats, inputs and Outputs, to answer support requests, find and fix faults, and check and improve the quality of Outputs. We may also use anonymised data derived from use of Planther to improve our prompts and the way Planther works. Access is limited to the staff who need it, and is logged. You may opt out of review for quality checking and of the anonymised improvement use by emailing privacy@planther.co.uk. Review to answer a support request you have raised, or to investigate a fault, cannot be opted out of.

11.5. No training on your content. We do not use Customer Content to train AI models. We only send Customer Content to AI model providers whose terms prohibit training on it, and we use zero data retention wherever a provider offers it. We cannot guarantee how third parties behave, but we choose and configure our providers on this basis.

11.6. Usage Data. We may use Usage Data to run, secure, price and improve Planther, and to produce anonymised statistics that do not identify you or your Users.

11.7. Our rights. We and our licensors own all intellectual property rights in Planther, including its software, its databases and the selection and arrangement of its data, its design and user interface, our prompts and our drafting methods. These Terms give you a non-exclusive, non-transferable right to use Planther for your own business while you are authorised to use it, and no other rights.

11.8. Feedback. You give us a permanent, free right to use any feedback, suggestions or bug reports you give us to improve Planther. We will not publish your feedback, or say it came from you, without your permission.

12. Data protection

12.1. When we are the controller. For the personal data we use to run your Account, communicate with you and run our business, we are the controller, as described in our Privacy Policy.

12.2. When we are your processor. For personal data in your Customer Content, you (or your Organisation) are the controller and we are your processor. The data processing terms in the Schedule apply to that processing, unless your Organisation's Separate Agreement includes its own data processing agreement, in which case that applies instead.

12.3. Your responsibilities. You may only put personal data into Planther where you have a lawful basis for doing so and have given any notices required under data protection law. The same applies to special category data (such as health information) and criminal offence data, including any that arrives through a Connected Account, for which you must also meet any extra condition the law requires.

13. Suspending and ending access

13.1. Suspension. We may suspend your access, in whole or in part, straight away if:

(a) you materially breach these Terms or our Acceptable Use Policy;

(b) there is a security risk, or we suspect unauthorised use of your Account;

(d) the law, or one of our providers, requires it.

13.2. Ending your access. We may end your access if you seriously or repeatedly breach these Terms, by telling you. We may also end your access for any reason by giving you at least 30 days' notice, in which case clause 17.3 applies to any yearly fees.

13.3. What happens when access ends. Your right to use Planther's features ends. We may still let you sign in to look at and download what you have in Planther, without using the AI or other features that cost us to run, but we do not promise to. Fees already due remain payable. Outputs you have already used in your own work are not affected.

13.4. Your Customer Content when access ends. If you want an export of your Customer Content, ask us at support@planther.co.uk within 30 days of your access ending; we will provide it in a format we choose. After that we may delete it at any time. We normally keep it for up to one year, so that if you come back you may find everything as you left it, but we do not promise to. If you would like it deleted sooner, email us and we will delete it from Planther promptly. Copies in back-ups are removed as those back-ups expire, as set out in our Back-up Policy. Clause 10.8 applies to data from Connected Accounts. We keep invoices, credit notes and billing records for six years, as UK law requires, and security logs for up to two years.

14. Confidentiality

14.1. Each of us will keep the other's confidential information confidential and use it only for the purposes of these Terms. Your confidential information includes your Customer Content and your clients' affairs. Ours includes non-public information about Planther, including its prompts, models, data sources, user interface, pricing arrangements, roadmap and unreleased features.

14.2. You must not share screenshots, demonstrations or details of Planther with a competitor of ours, or publish any benchmark or comparison of Planther, without our written permission. You may show Planther to your own clients in the ordinary course of your work.

14.3. These obligations do not cover information that is or becomes public other than through a breach of these Terms, that the receiving party already had lawfully, or that the law requires to be disclosed. They continue after your access ends.

15. Conflict of interest

15.1. A director of Planacea Ltd is also a director of a practising planning consultancy firm. No Customer Content is or will be shared with that firm in either direction.

15.2. We supply Planther to planning professionals generally, including to firms that may compete with you.

16. Liability

16.1. What we do not exclude. Nothing in these Terms limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot be limited by law.

16.2. Implied terms. Except as these Terms expressly say, all warranties, conditions and other terms implied by law are excluded to the fullest extent the law allows.

16.3. Losses we are not liable for. Subject to clause 16.1, we are not liable for any:

(a) loss of profits, revenue, business, goodwill or anticipated savings, or wasted expenditure;

(b) loss or corruption of data (our only obligation is to try to restore it from our latest back-up);

(d) refused or delayed planning applications, lost appeals, abortive appraisals, or costs awarded against you or your clients;

(e) claims brought against you by third parties, including your own clients;

(f) loss caused by a Connected Account, an MCP Server, a third-party service or website, open-source software, the permissions you choose, prompt injection, or an action you instructed; or

(g) indirect or consequential loss,

however it arises.

16.4. Our total liability. Subject to clauses 16.1 and 16.3, our total liability to you and your Organisation (taken together) for everything arising out of or in connection with these Terms and Planther is limited to the greater of the fees paid for Planther in the 12 months before the event giving rise to the claim (not counting charges for AI use under clause 4.10) and £500. For free access, it is limited to £100.

16.5. Why these limits are fair. You accept that these limits are reasonable given the price of Planther, the nature of AI, and the fact that Planther assists, and does not replace, the judgement of a qualified professional.

16.6. Your indemnity. You will compensate us, and our directors, staff and contractors, for any loss, cost or claim (including reasonable legal costs) arising from your use of Planther in breach of these Terms or the law, from your Customer Content (including any claim that it infringes someone's rights or was put in without a lawful basis), or from your use of a Connected Account, an MCP Server or Agentic Actions, except to the extent caused by our own breach.

17. Changes to these Terms

17.1. We may update these Terms. We will tell you about material changes at least 30 days before they take effect, by email or in Planther, and may ask you to accept the new version. A change to these Terms does not change the fees or other commercial terms in an Order without your agreement.

17.2. If you do not accept a change, you may cancel before it takes effect. If you keep using Planther after that date, you accept the updated Terms.

17.3. Refund for yearly subscribers. If you are on a yearly Plan and you cancel because we have materially reduced the core service (clause 6.1) or your usage limits (clause 8.3), made a change to these Terms that is materially worse for you, or ended your access under the second sentence of clause 13.2, we will refund the fees for the whole months remaining in your paid year.

18. General

18.1. Entire agreement. These Terms (with the documents in clause 1.4, any Order and any Separate Agreement) are the whole agreement between you and us about Planther. You have not relied on anything we said or wrote that is not in them, and you will have no claim for any statement not set out in them, except for fraud.

18.2. Transfer. You may not transfer your rights under these Terms without our consent. We may transfer ours to another company, including as part of a reorganisation or sale of our business.

18.3. Events beyond our control. We are not liable for any delay or failure caused by events beyond our reasonable control, including an outage at one of our providers.

18.4. Severance and waiver. If any part of these Terms is found to be unenforceable, the rest still applies. A delay in enforcing a right is not a waiver of it.

18.5. No partnership. Nothing in these Terms creates a partnership or agency between us.

18.6. Third parties. Only you and we have rights under these Terms, apart from the people protected by clause 16.6. No one else may enforce them under the Contracts (Rights of Third Parties) Act 1999.

18.7. Notices. Legal notices to us go to legal@planther.co.uk. We may give you notice by email to your Account address or in Planther. An email notice counts as received when sent, or at 9am on the next working day if it is sent outside 9am to 5pm on a UK working day.

18.8. Disputes. If a dispute arises, please contact us first and we will try in good faith to resolve it within 30 days. These Terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction, except that either of us may seek urgent relief in any court.

18.9. Contact. Planther, a trading name of Planacea Ltd, 1 Cabot House, Compass Point Business Park, St Ives, Cambridgeshire, England, PE27 5JL. Support: support@planther.co.uk. Privacy and data protection: privacy@planther.co.uk. Legal: legal@planther.co.uk.

Schedule: Data processing terms

These terms apply where we process personal data in your Customer Content as your processor (clause 12.2). They set out what Article 28 of the UK GDPR requires. "Data Protection Laws" means the UK GDPR, the Data Protection Act 2018 and any law that replaces or supplements them.

1. Subject matter, duration, nature and purpose. We process personal data in your Customer Content to provide, secure and support Planther, and as described in clause 11.4, for as long as you use Planther and for the periods in clauses 10.8 and 13.4.

2. Types of personal data and people. Any personal data you or your Users put into Planther or that it reads from a Connected Account: typically names, contact details, job titles, addresses and correspondence, relating to your Users, your staff, your clients, the people you correspond with, and anyone else named in your Customer Content.

3. Instructions. We process this personal data only on your documented instructions, which are these Terms and your use of Planther (including deleting something in Planther), unless the law requires otherwise. We will tell you if we think an instruction breaks Data Protection Laws.

4. Confidentiality. Everyone we authorise to process it is bound by a duty of confidentiality.

5. Security. Planther is a standard service provided in the same way to all customers. We maintain appropriate technical and organisational measures, including:

(a) encryption in transit and at rest, and encrypted storage of Credentials;

(b) multi-factor authentication on all our infrastructure accounts, and least-privilege access;

(c) staff access to Customer Content limited to support, fault-finding and quality review, with each view of a chat logged;

(d) logging and monitoring of our systems; and

(e) the back-ups described in our Back-up Policy, held in the United Kingdom.

We hold Cyber Essentials certification, and our hosting providers are certified to ISO/IEC 27001 and SOC 2. We are not obliged to put in place different or additional measures for an individual customer.

6. Sub-processors. You give us general authorisation to use sub-processors that meet all of these rules:

(a) they are needed to provide or support Planther;

(b) they process personal data under a written contract that meets Article 28 of the UK GDPR (which may be their standard terms) and gives materially the same protection as this Schedule;

(c) where they provide AI, personal data is not used to train AI models, and zero data retention is used wherever they offer it;

(d) the customer content we store (uploaded files, chats, documents and data from Connected Accounts) is held in the United Kingdom, unless you agree otherwise;

(e) any processing outside the UK takes place only in the countries in paragraph 7 and uses a safeguard listed there;

(f) they hold a recognised security certification (such as ISO/IEC 27001 or SOC 2) or have equivalent measures; and

(g) we list them on our Sub-processors page before they start processing personal data, and record the change in its change log.

We remain responsible for our sub-processors. If we change these rules, we will tell you at least 30 days before the change takes effect; if you object, your remedy is to cancel within those 30 days. A Connected Account or third-party MCP Server you choose to connect is your own provider, not our sub-processor.

7. International transfers. Personal data may be processed in the United Kingdom, the European Economic Area, the United States, and any other country covered by UK adequacy regulations. Where a transfer needs a safeguard, we rely on one or more of: UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework), the International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, binding corporate rules, or another mechanism allowed under Chapter V of the UK GDPR. We may replace one safeguard with another that the law allows. Transfers that you start yourself, for example by connecting a third-party service, are your responsibility.

8. Helping you. Taking into account the nature of the processing, we will help you respond to requests from individuals exercising their rights, and with your security, data protection impact assessment and breach notification obligations. Where Planther lets you find, export or delete data yourself, please use those tools first. We may charge for help that is excessive or goes beyond what Planther already provides, at our standard rate (currently £100 an hour), and will tell you the cost before starting.

9. Data breaches. We will tell you without undue delay, and in any event within 72 hours, after we discover a personal data breach affecting your Customer Content, and give you the information you reasonably need.

10. Deletion. When your access ends, we delete or return personal data as set out in clauses 10.8 and 13.4, unless the law requires us to keep it.

11. Information and audit. We will give you the information reasonably needed to show that we comply with this Schedule, including copies of the third-party certifications and audit reports we hold, which are our confidential information. If that is not enough to show compliance, we will allow and contribute to an audit by you or an auditor you appoint, on reasonable notice, during working hours, no more than once a year (unless a regulator requires more), and at your cost. Our sub-processors' terms may limit any audit of them.

12. Liability. We are liable under this Schedule only for loss resulting directly from our breach of it or of Data Protection Laws, reduced to the extent you or your Users contributed to it. Liability under this Schedule is subject to section 16, as one combined limit with the rest of these Terms. Nothing in this Schedule limits any fine a regulator may impose or any right an individual has under Data Protection Laws.