Legal
Last updated: 2026-07-22
This page covers three things: what we do with your email, what this website is and isn't, and how to reach us. Plain English throughout. If something here is unclear, email us — we'll fix the copy.
Privacy
What we collect
Only what you type into a form, and only when you submit it. What that is depends on the form.
Mailing list, and lead-magnet downloads: your email address. Nothing else.
Waitlist (early access): your email address, which exchanges you selected, and — if you chose to write one — the free-text note describing what you trade. That note is optional and it is stored exactly as you wrote it, so please don't put anything in it you wouldn't want us to hold. Alongside it we record how you arrived: the referring page, and any campaign tags in the link you clicked.
For every form we also store the time you submitted and, for the waitlist, where you are in the invite queue.
What we do not collect: no cookies beyond what's required to load the page, no analytics tracking, no behavioral profiling, no third-party pixels, and no advertising identifiers. We don't ask for your name, your location, your trading size, or anything about your accounts — and you should never send us API keys, passwords, or exchange credentials through any of these forms.
Why we collect it
To do the thing you asked for — send you the research artifact you requested, put you on the early-access waitlist and email you when your invite is ready, and/or send you 1–2 updates per month about Plutous (product progress, research, and the date we open to external users). By submitting a form, you're consenting to us contacting you for those purposes. Nothing else.
The waitlist's extra fields exist so we know which exchanges to prioritise and roughly who's waiting — they help us decide what to build and who to invite next. They are not used to profile you, they are not shared, and they are not used to decide anything about you other than the order of the invite queue. Every email has an unsubscribe link, and using it stops the emails immediately.
Legal basis (GDPR)
For readers in the EU / UK: we process your data on the basis of your consent (you typed it in and hit submit — including when you submit it to download a gated artifact or to request early access) and our legitimate interest in keeping interested readers informed about a product they asked to hear about. You can withdraw consent at any time by unsubscribing or by emailing us; the unsubscribe link is in every email.
Who processes it
It depends which form you used, and the difference matters:
- Mailing list and lead-magnet downloads — we use Beehiiv as our email provider. They store the list, send the emails, and handle unsubscribes on our behalf.
- Waitlist — we hold this one ourselves, in our own database, on infrastructure we run at Google Cloud. It is not on Beehiiv. Access is limited to the founders.
We don't sell, rent, or share your data with anyone else, and we don't use it to train anything. If we change providers, we'll update this page.
How long we keep it
Mailing list: as long as you stay subscribed. When you unsubscribe, your address is removed from the active list. Beehiiv may retain suppression records (so we don't email you again by accident) for a limited period as required by anti-spam law — that's a one-way list, not a marketing list.
Waitlist: until you're invited and sign up, or until you ask us to remove you, or until we close the waitlist — whichever comes first. Deleting your record removes your address, your exchange selections and your free-text note. The audit-log entry described under Your rights is the one exception, and it's the only one.
Your rights
You can:
- Access — ask what we hold about you. For the mailing list that's your email and your subscription status. For the waitlist it's the fields listed under What we collect, and we'll send you the whole record.
- Correct — update your email by unsubscribing the old one and subscribing the new one, or email us and we'll do it.
- Delete — unsubscribe to stop the emails, or email hello@plutous.io and we'll delete your waitlist record: your address, your exchange selections, and your free-text note. We do this by hand right now, and we'll confirm within 30 days. One limit, stated plainly rather than buried: we keep an internal audit log of significant events, and it holds a dated entry recording that an application was made — for older entries, including the email address used. We don't edit that log, because a log we can quietly edit isn't evidence of anything. It is never used to contact you or to build a profile. If you want that entry gone as well, ask — we'll either do it and log that we did, or tell you why we can't.
- Object — tell us to stop processing your data for any reason, at any time.
- Port — ask for a copy of your data in a machine-readable format.
For readers in California: the same rights apply under CCPA — access, deletion, and opt-out of sale (we don't sell data, but the opt-out is yours by default). No discrimination for exercising them.
For readers in Malaysia, where we're incorporated: the same access and correction rights apply under the Personal Data Protection Act 2010, and you can withdraw your consent to our processing at any time by writing to the address below.
To exercise any of these, email hello@plutous.io. We'll respond within 30 days.
Data controller
Plutous Technology Sdn. Bhd. (Company No. 202601025785 (1687881-H)), a company incorporated in Malaysia, of 7-2, Plaza Danau 2, Jalan 2/109f, Taman Danau Desa, 58100 Kuala Lumpur, Malaysia. Contact us at hello@plutous.io.
Security
Everything is transmitted over TLS. The mailing list is stored by Beehiiv under their security controls; we don't keep a second copy of it. The waitlist is stored in our own database, encrypted at rest, on private infrastructure, reachable only by the founders. We're a small team and we assume any system can be breached — if one is, and your data is affected, we'll tell you and the relevant authorities within the timelines the law requires.
About this site
Plutous.io is currently an informational site. Nothing here is offered for sale, and joining the waitlist neither creates an account nor guarantees you one — it puts you in a queue we invite from in waves. The product itself is in private beta behind an invite, and the full terms of service governing it will be published before it opens to external users. If you already hold an invite, the terms you agreed to at signup are the ones that apply to your account.
Not investment advice
Plutous is trading infrastructure. We are not a registered investment advisor, broker-dealer, or money transmitter in any jurisdiction.
Content we publish — on this site, in our emails, or on our social channels — is educational: it explains how crypto-derivatives mechanisms (such as funding and basis) work, using public market data, and how we build trading infrastructure. It is not a recommendation, solicitation, or offer to buy, sell, or hold any asset, and it is not a suggestion that any strategy is suitable for you. It is not an offer of investment services.
Where we describe how our own infrastructure or strategies perform, past performance is not indicative of future results. Trading crypto assets, especially perpetual futures, carries substantial risk including total loss of capital. Readers are responsible for their own due diligence and any trading decisions they make.
Content on this site may not be appropriate for residents of all jurisdictions. Access to this site does not constitute an offer or solicitation where such would be prohibited by local law.
Third-party marks
Exchange, protocol, and digital-asset names and logos displayed in the Services are the trademarks of their respective owners and are used solely to identify those services and assets. Their display does not indicate any affiliation with, endorsement by, or sponsorship by their owners.
Contact
Questions about this page, your data, or anything else: hello@plutous.io.
Updates
We may update this page as the site, the product, or the law changes. Material changes will be flagged at the top. The "Last updated" date always reflects the current version.