Privacy Policy

What is collected when you open an account

Sign-up is only through signing in with Google. When you sign in, your email address, name and profile picture are collected as approved by Google, and a Plugger account is created for you based on those details. We never see or store your Google password at any stage.

The waitlist

Joining the waitlist stores a first name and an email address, and, if you chose to add them, an artist name, phone and genre. One purpose: to update you when early access opens and about the launch. Joining does not open an account and does not commit you to any payment. Clicking the button is your consent to receive those updates by email, and the details are also passed to Mailchimp, the service the updates are sent through, where they are tagged as waitlist members. Every email carries an unsubscribe link, and you can also ask us to delete the registration entirely.

The smart assistant (chat)

What you type to the assistant is sent to our server to compose a reply, and is not stored by us after the reply is sent. The assistant answers from a knowledge base we wrote ourselves. If and when we connect an external language model to it, the message content will also be processed by the model provider (Anthropic) for composing the reply only, and we will update this section. Do not type sensitive details to the assistant, it has no need for them. Your IP address is used transiently only to rate-limit requests, and is not stored.

The contact form

A message sent through the contact page (name, email, subject and text) reaches us as an email via Resend, the service we send mail through, and is read by a person. The message is not stored in the site's database, only in our mailbox.

Cookies and tracking

The session cookie (plugger_session) is signed and encrypted, accessible only to the server (HttpOnly), and kept for up to 30 days. Two additional temporary cookies (up to 10 minutes) are used only for the Google sign-in process itself. Google Analytics stores anonymous statistical cookies. There is no Facebook pixel or any advertising network pixel on the site, and no advertising tracking.

The industry contact list

A fixed rule in the system's code: the browsing screens for Plugger's contact list (broadcasters, editors, writers) never show a personal name or email address, only the media outlet they work with. A contact with no registered outlet is labeled "Freelancers and similar" instead of showing an identifying detail. The full name and address are revealed only on the final approval screen before an actual send, and only for that send.

Smart links

When someone opens a smart link you created or clicks one of its platform buttons, only the action type (view / click), the platform, and a timestamp are saved, no name, no email address and no identifying detail about that visitor.

Who the data is shared with

• Google - for the sign-in itself only.
• Google Analytics - anonymous browsing data only (which pages were viewed, where you came from), to understand how the site is used. Never your name or email address.
• Mailchimp - your email address and name, for launch updates (the waitlist) and a monthly update, and only if you consented.
• Resend - sending mail: contact-form messages to us, and messages to industry contacts on your behalf after your approval.
• Anthropic - only if and when an external language model is connected to the smart assistant, and only message content for composing a reply.
• Paddle / PayPal - only if and when you make a payment through them, per their own privacy policies.

The data is not sold and not shared for advertising purposes with any third party. This is a closed list: there is no provider that does not appear on it.

Data security

The site is served over HTTPS only. Access keys for every external provider are kept only on the server and are never sent to the browser. The session cookie is signed so it cannot be forged, and the smart assistant's replies are signed so nothing can be planted into it that it did not say.

How long the data is kept

There is currently no automatic deletion: account details, campaigns and smart links are kept for as long as the account exists, and a waitlist registration is kept until you ask us to delete it or until the launch is over and we update this page. A deletion request is carried out in full.

Your rights

Under Israel's Protection of Privacy Law, 5741-1981 (including Amendment 13), you are entitled to review the information kept about you, to ask for it to be corrected, and to ask for it to be deleted. Send a request to the email below, and we confirm in writing and handle it within 14 business days.

[TO BE COMPLETED: registered business name, company or business number, and address]

To request to review, correct or delete your information: hello@pluggerhub.com