Privacy Policy

Last Updated: September 22, 2025

This Privacy Policy explains how Plug Technologies Inc Oy ("Plug", "we", "us") collects, uses, and protects your information when you use our product at https://app.plug.inc and our website at https://plug.inc (together the "Product").

This policy complies with Meta's Platform Terms and does not supersede them for Meta Platform Data.

1. Information We Collect

Account Information

When you create an account, we collect:

- Name and email address

- Company information

- Password (encrypted)

- Payment details (processed by our payment provider)

Meta Platform Data

When you connect your Facebook account to Plug, we collect:

- Meta user ID, email, and username

- Access tokens for authentication

- Ad account IDs and business manager information

- Ad performance data

- Campaign configurations and creative assets

- Custom audiences and pixel data

This data is collected only after you authorize our Product through Facebook Login for Business.

Automatically Collected Information

- Device and browser information

- IP address and approximate location

- Product usage data and feature interactions

- Log data and performance metrics

2. How We Use Your Information

We use your information to:

- Operate and improve the Product

- Process payments and send transactional emails

- Provide customer support

‍

For Meta Platform Data specifically:

- Sync and analyze ad campaign performance

- Generate optimization recommendations and automations leveraging AI

- Create performance reports and analytics

- Manage ad budgets and creative assets

‍

We process data based on:

- Contract performance (to provide our Product)

- Legitimate interests (to improve and secure our Product)

- Legal obligations (to comply with laws)

- Your consent (where required)

3. Data Sharing

Service Providers

We share data with service providers who help us operate the Product:

‍

Categories of providers that process Meta Platform Data:

- Cloud infrastructure and database storage

- Analytics and data warehousing

- AI services for performance analysis

- Security and content delivery

- Email communications

‍

These providers are contractually required to:

- Process Meta Platform Data only at our direction

- Comply with Meta's Platform Terms

- Delete data when no longer needed

- Maintain confidentiality

Other Disclosures

We may disclose your information:

- To comply with legal obligations

- To protect rights and safety

- In connection with a business transfer

- With your consent

We do not sell your personal information.

4. Data Retention

- Account data: Retained while your account is active and as required for legal purposes

- Meta Platform Data:

 - Active connections: Retained while connected

 - After disconnection: Deleted within 30 days

 - Aggregated analytics: Up to 90 days

- Other data: Deleted when no longer necessary for business purposes

5. Your Rights

Under GDPR (EEA/UK users), you have the right to:

- Access your personal data

- Rectify inaccurate data

- Erase your data ("right to be forgotten")

- Restrict processing

- Data portability (receive your data in a portable format)

- Object to processing

- Withdraw consent at any time

- Lodge a complaint with your supervisory authority

For all users, you can:

- Update your information in your account settings

- Delete your account at any time

- Export your data by a request to us.

Meta Platform Data Rights

- Disconnect your Facebook account anytime through the Product

- Upon disconnection, Meta data is automatically deleted within 30 days

- Request immediate deletion by contacting software@plug.inc

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

- Encryption in transit and at rest

- Access controls and authentication

- Regular security assessments

- Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. International Data Transfers

We are based in Finland and process data in the EEA. When we transfer data outside the EEA, we ensure appropriate safeguards through:

- Standard Contractual Clauses

- Adequacy decisions

- Other approved mechanisms under GDPR

8. Cookies and Tracking

We use essential cookies for Product functionality and analytics cookies to understand usage. You can manage cookie preferences through your browser settings. We also use Meta Pixel for conversion tracking when you have connected your Facebook account.

9. Children's Privacy

The Product is not intended for users under 16 years of age. We do not knowingly collect data from children.

10. California Privacy Rights

California residents have additional rights under CCPA, including the right to know what personal information we collect and the right to opt-out of sale (we do not sell personal information).

11. Changes to This Policy

We may update this policy and will notify you of material changes via email or Product notification. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy inquiries or to exercise your rights:

Email: security@plug.inc
‍
Address:
Plug Technologies Inc Oy
Lapinlahdenkatu 16
00180 Helsinki
Finland

For Meta Platform Data requests, please specify this in your communication.

Data Protection Officer: software@plug.inc

---

This privacy policy provides CCPA-equivalent protection to all users regardless of location.