Last updated: 2026-02-16 (KST)

plug Privacy Policy

Effective date: 2026-02-16
Controller: Plumise (Company)

This Policy explains how personal data is collected, used, retained, and deleted in plug. This is an operational template and should be finalized with local legal counsel.

1. Data we collect

1.1 Account and authentication

  • Email address
  • Login verification records
  • Account identifiers

1.2 Automatically collected data

  • Access logs (IP, user-agent, timestamp)
  • API usage metrics (key identifier, method, request or error counts)
  • Session or cookie identifiers

1.3 Billing data

  • Billing provider customer and subscription IDs
  • Invoice and refund records
  • Card raw data is handled by payment providers, not stored by us

2. Purposes of processing

  • Account authentication and access control
  • API key issuance, auth, usage accounting, quota enforcement
  • Security monitoring and abuse prevention
  • Billing, invoicing, refunds, support
  • Legal compliance and dispute handling

3. Retention

  • Account data: until account deletion (unless legal retention applies)
  • Security or access logs: up to 12 months by default
  • Billing records: retained per applicable law and accounting obligations

4. Sharing and disclosure

We do not disclose personal data to third parties unless required by law, user consent, or legitimate service operation.

5. Processors

We may use processors for:

  • Email delivery infrastructure
  • Payment processing
  • Cloud hosting and infrastructure
  • Monitoring and analytics tools

6. International transfers

Data may be transferred internationally through cloud, payment, and security vendors.
Where required, we apply lawful transfer safeguards and provide required notices.

7. Data subject rights

Users may request access, correction, deletion, restriction, and withdrawal where applicable by contacting privacy@plumise.com.

8. Security measures

  • Least-privilege access controls
  • Encryption in transit
  • Monitoring and incident response
  • Patch and vulnerability management

9. Contact

10. Changes

This Policy may be updated for legal or service changes, with notice before material updates.

plug — Production RPC for Plumise