Plug Technologies Inc Privacy Policy

Privacy Policy

Last Updated: December 10, 2025

This Privacy Policy explains how Plug Technologies Inc Oy (“Plug”, “we”, “us”) collects, uses, and protects your information when you use our product at https://app.plug.inc and our website at https://plug.inc (together, the “Product”).

This Privacy Policy is intended to comply with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”), and with Meta’s Platform Terms. Where Meta Platform Data is involved, Meta’s Platform Terms apply in addition to this Privacy Policy and are not superseded by it.

‍

How to Read This Policy

This Privacy Policy describes both:

  1. Data that may be technically accessible to Plug depending on the permissions granted by the user through Meta’s platform (e.g. Facebook Login for Business / Meta Business Integration), and

  2. Data that Plug actively processes as part of the Plug product’s functionality.

Meta permissions may allow broader technical access depending on configuration and authorizations chosen by the user. However, Plug’s Product is designed primarily to analyze advertising account–level performance data, configuration metadata, and user interactions with the Product.

Plug does not design its Product to intentionally process customer end-customer personal data (such as customer lists, lead submissions, audience memberships, or pixel-level event data) as part of its core functionality. Further details on Plug’s actual data processing practices and data roles are described in the Plug Terms of Service, including Annex A (Data Processing Information).

‍

1. Information We Collect

Account Information

When you create an account or are invited to use the Product, we collect:

  • Name and email address
  • Company information
  • Authentication credentials (passwords stored in encrypted or hashed form)

Payment details (processed by our payment provider)

‍

Meta Platform Data

When you connect your Facebook or Meta Business account to Plug, and authorise the Product through Facebook Login for Business or Meta Business Integration, Plug may collect or be technically permitted to access Meta Platform Data, including:

  • Meta user ID, email address, and username
  • Access tokens used for authentication and authorised access
  • Advertising account IDs and Business Manager information
  • Advertising performance data
  • Campaign configurations and creative assets
  • Custom audiences and pixel data

This data is collected or made accessible only after you explicitly authorise the Product via Meta’s standard authentication and permission flows.

While Meta permissions may allow access to these categories of data, Plug’s Product functionality focuses on advertising account performance analysis, configuration metadata, reporting, and analytics. The listing of these categories reflects possible permissions under Meta’s platform framework, not necessarily continuous or active use of every data category.

‍

Automatically Collected Information

We automatically collect certain information when you use the Product, including:

  • Device and browser information
  • IP address and approximate location
  • Product usage data and feature interactions
  • Log data and performance metrics

‍

2. How We Use Your Information

We use your information to:

  • Operate, maintain, and improve the Product
  • Authenticate users and manage workspace access
  • Process payments and send transactional communications
  • Provide customer support and respond to inquiries

Meta Platform Data

With respect to Meta Platform Data, we may use such data to:

  • Sync and analyse advertising campaign performance
  • Generate performance reports and analytics
  • Produce optimisation insights and AI-assisted recommendations
  • Support workflows involving budgets, campaign structures, and creative performance

‍

Legal Bases for Processing

We process personal data based on the following legal bases:

  • Contract performance: to provide and operate the Product
  • Legitimate interests: to improve, secure, and maintain the Product
  • Legal obligations_ to comply with applicable laws‍
  • Consent: where required under applicable law

‍

3. Data Sharing

Service Providers

A current list of sub-processors is available in Annex B of the Plug Pilot Terms of Service. We share data with service providers that help us operate and support the Product. These include providers offering:

  • Cloud infrastructure and database storage
  • Analytics and data warehousing
  • AI services for performance analysis
  • Security, monitoring, and content delivery
  • Email and messaging services

Service providers that process Meta Platform Data are contractually required to:

  • Process data only at our direction
  • Comply with Meta’s Platform Terms
  • Delete data when no longer required
  • Maintain appropriate confidentiality and security measures

Other Disclosures

We may disclose information:

  • To comply with legal or regulatory obligations
  • To protect the rights, safety, or security of Plug, users, or others
  • In connection with a merger, acquisition, or business transfer
  • With your explicit consent

We do not sell personal information.

‍

4. Data Retention

We retain data only for as long as necessary to fulfill the purposes described in this Policy:

  • Account data: retained while your account is active and as required for legal or business purposes
  • Meta Platform Data:
    • Active connections: retained while connected
    • After disconnection: deleted within 30 days
    • Aggregated analytics: retained for a limited period for product improvement (Up to 90 days)‍
  • Other data: deleted or anonymized when no longer necessary

‍

5. Your Rights

GDPR Rights (EEA / UK Users)

You have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability (receive your data in a portable format)
  • Object to processing
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

General Controls

All users may:

  • Update account information via account settings
  • Delete their account at any time
  • Request a copy or deletion of data by contacting Plug

Meta Platform Data Rights

  • You may disconnect your Facebook or Meta account at any time through the Product
  • Upon disconnection, Meta Platform Data is deleted within approximately 30 days
  • You may request earlier deletion by contacting software@plug.inc

‍

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit and at rest
  • Access controls and authentication mechanisms
  • Regular monitoring and security assessments
  • Incident response procedures

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

‍

7. International Data Transfers

Plug is based in Finland and primarily processes data within the EEA.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Other lawful mechanisms under GDPR

‍

8. Cookies and Tracking

We use essential cookies required for Product functionality and limited analytics cookies to understand Product usage.

Where applicable, you can manage cookies through your browser settings. Meta Pixel may be used for conversion tracking when you have connected your Facebook account.

‍

9. Children’s Privacy

The Product is not intended for users under 16 years of age. We do not knowingly collect personal data from children.

‍

10. California Privacy Rights

California residents have rights under the CCPA, including the right to know what personal information is collected and the right to opt out of sale. Plug does not sell personal information and provides CCPA-equivalent protections where applicable.

‍

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or Product notifications. Continued use of the Product after changes constitutes acceptance of the updated Policy.

‍

12. Contact Us

For privacy inquiries or to exercise your rights, contact:

Email: software@plug.inc

Address:
 Plug Technologies Inc Oy
Lapinlahdenkatu 16
00180 Helsinki
Finland

For Meta Platform Data requests, please specify this in your communication.

Data Protection Contact: software@plug.inc

---

This privacy policy provides CCPA-equivalent protection to all users regardless of location.