What PLGN stores about you, who else sees it, and how long we keep it.

What an account holds

Creating an account stores your name, your email address, whether that address has been verified, the picture your sign-in provider gave us if there is one, and the date you joined. If you sign up with a password we store a one-way hash of it, never the password itself. If you sign up with Google we store Google's own id for your account and the tokens Google issues us, so the connection keeps working.

While you are signed in there is a session: a token, when it expires, the IP address the session was opened from, what your browser says it is, and which workspace you are currently in. Verification links and password-reset links are stored until they expire. When you connect an AI client to PLGN, the permission you gave it and the tokens that keep it connected are stored too.

For each workspace you belong to we store your role in it and which brands you are allowed to see. If we ever open your workspace to help with a support problem, the session records that it is an administrator acting rather than you, and the action is written to an audit log.

To prove you are a real person we also store your phone number and when it was verified, and for a short time the number you typed. The proof is a message you send from that number to PLGN's WhatsApp Business number, through WhatsApp (Meta), with a one-time code in it. The code stops working after 15 minutes. The code and the number you typed are deleted when the number is verified, or within two days if it never is. Once a free trial starts, a one-way code derived from the number is kept so the same number cannot start a second one.

What a workspace holds

Whatever you and your AI assistant put into it:

• Brands, and what PLGN has been told about each one — voice, audience, what it sells, the words it will not use — with the history of every change
• Posts, their captions and notes in each language the brand writes in, topics, snippets, hashtag sets, campaigns and creative briefs
• Image jobs: the prompt that was used, which model ran it, what it cost in points, and a link to the picture
• PLGN's AI in plgn desk: for each chat that uses it, the chat's name (the start of its first message, or the job it ran), which AI models answered, and what it cost in points. Not the conversation itself
• The lines plgn desk remembers about you, kept with your own desk settings. They are shown to the AI apps you connect to PLGN when they read your brand for you — only yours, never another member's — and you can delete them on the desk's Account page
• Web searches, and reads of websites, social pages and map listings made for you, with what came back, so asking for the same one again soon costs nothing
• An activity log of every call your AI assistant makes: which tool, which member, how long it took, and the arguments it was called with — shortened when they are long, and with any value whose field name looks like a secret replaced by “[redacted]” before the row is written
• The Cloudinary keys you connect, encrypted with AES-256-GCM under a key that exists only on the server
• Your plan and what it has spent, and the billing name, address and tax number you type in for your receipts

Paying

You pay on Kashier's own payment page, not on ours. Your card number never reaches PLGN. We do not see it, we do not store it, and there is no saved card for us to charge again — every payment is one checkout you start yourself.

What we store for a payment is the order reference we generated, the amount, the currency, whether it succeeded, and the message Kashier sent us about it, kept as it arrived so a disputed payment can be traced. If that message names the country your card was issued in, we keep a note when it does not match your billing country, so that somebody can look at it. It never changes what you were charged.

Which currency you pay in follows your billing country, and that country is filled in for you from a two-letter country code our hosting platform derives from your internet connection. The code is what we store; the address itself is not kept for this. It is fixed once you have paid.

Cookies

Signing in sets a session cookie — without it the app cannot tell one visitor from the next. Four more remember a choice you made: your language, the brand you were last looking at, light or dark, and whether you dismissed the setup checklist.

There are no analytics cookies and no advertising cookies anywhere on this site, because there is no analytics and no advertising.

Who else sees it, and where it is handled

A short list of companies, each doing one job:

• Kie AI runs the image models. The prompt for a picture, and the address of any picture you asked it to work from, are sent there. Nothing else from your workspace goes with them
• OpenRouter runs PLGN's AI in plgn desk. When a chat uses it, the chat so far — what you typed, the answers, the brand details the desk read for the job, and any picture you added — is sent to OpenRouter, which passes it to the company whose AI model answers. PLGN itself does not keep the conversation
• TypeSafe runs the Jev check behind PLGN's post checks and picture judgments. A draft, or a picture's description, and the brand rules it is scored against are sent there as questions, and a score comes back. Nothing else from your workspace goes with them
• Apify reads the public websites, social accounts and map places you ask plgn to research, and runs web searches. It is sent the address, account name or search words, and nothing from your workspace. A public page, account or place that any workspace read in the last 7 days can be served to another workspace from plgn's saved copy instead of being read again; your searches, brands and posts are never shared
• Cloudinary holds your pictures — in your own Cloudinary account, under the keys you connected. We do not host your media at all; PLGN stores the link to it
• Kashier takes the payment, as above
• WhatsApp (Meta) carries the verification message you send and PLGN's reply to it. It sees the number the message came from, and the message
• Google, in two places: if you choose “Continue with Google”, and on every page of this site, which loads its typefaces from Google Fonts — so your browser asks Google for them and Google sees that request. We send Google nothing about you ourselves
• An email provider carries our email over SMTP: the verification link, a password reset, a workspace invitation, the reminder before a period ends, and the notification when somebody fills in the enquiry form. It sees the address and the message
• Sentry, in the EU, receives a report when something breaks: the error, the page or action it happened in, the browser and system type, and roughly how long it took. It is not sent your name, your email address, your cookies, what you typed, or your brands' content, and it is not used to follow you around the site
• A managed MongoDB database stores everything above, except plgn desk's chats, jobs and settings, which a managed Postgres database (Supabase) stores; the application itself runs on a hosting platform. All of them are the providers' own servers, not machines in an office

How long we keep it

Your own content stays until you delete it, or until the workspace is deleted; a plan that ends deletes nothing. The record of PLGN's AI use and the saved research reads have no end date: we keep them, even after a workspace is deleted. Everything else has a period, and a job that runs once a day enforces it:

• The activity log: 12 months.
• A knowledge entry's history: 12 months — except that the newest 30 versions of an entry are always kept, however old they are.
• A sign-in session: 7 days after it has expired.
• A verification link or password-reset link: 7 days after it has expired.
• A checkout nobody paid: 30 days after it has expired.
• The brand list attached to an invitation nobody accepted: 30 days after the invitation has expired.

Getting a copy, and getting rid of it

A copy of your content: Settings → Workspace → Download my data. It gives you a ZIP holding every brand's posts as both JSON and a spreadsheet, plus knowledge, offerings, campaigns, topics, the library, and the pictures themselves. An owner or an admin can do this at any time, including after a plan has run out.

That download is not everything this page has described. It does not carry your creative briefs, the prompt stored on an image job, the knowledge entries PLGN writes for itself when it runs a brief, the activity log, the record of PLGN's AI use, or the saved research reads. And if one brand holds more posts or knowledge entries than a single download can carry, the newest are kept and a README inside the ZIP says, per brand, how many of each were kept and how many there were.

Deleting it: Settings → Workspace → Delete workspace, which only an owner can do. It is not a request and not a flag — what the next section describes happens straight away, and there is no undo.

Anything else — asking what we hold about you, or asking us to correct it — is an email to privacy@useplgn.com from the address on the account. There is no form to fill in.

What deleting a workspace really does

A workspace owner can delete their workspace from Settings → Workspace. It is not a request and not a flag: the content is deleted from our database. Posts, topics, snippets, hashtag sets, brands, knowledge entries and their history, offerings, campaigns, briefs, image jobs and the activity log all go, the workspace itself goes, every connected AI client is signed out, and the account of anyone who was only in that workspace is deleted with it. There is no undo.

Your pictures are not ours to delete. They live in your own Cloudinary account, under credentials you gave us. We try to delete the plgn folders we created there and we tell you exactly which ones we managed to remove; anything you moved elsewhere in that account stays, and only you can delete it.

Four things survive, and we would rather say so plainly than have you find out. Your payment records and receipts are kept, because they are financial records and we are required to keep them; after the deletion they can no longer be opened from the app. And we keep a note that your email address may not start another free trial — stored as a one-way code derived from the address, never the address itself, so the collection cannot be read back as a list of people who left. It means you can subscribe and pay again at any time, but a second free trial is not offered. That note is kept for the owner who deletes the workspace. A teammate whose account goes with it gets one only if their own address had already used a free trial; if it never did, nothing about them is kept and they can still start one.

The other two: the record of PLGN's AI use — each chat's name, which AI models answered, and what it cost — and the saved research reads, with what came back. We keep both, and neither can be opened from the app after the deletion.

What the form collects

Only the fields you fill in:

• Your name
• Your work email address
• Your company
• How many brands you run, as a range
• A WhatsApp number, if you choose to give one. The field is optional
• Your message

What it deliberately does not collect

No IP address. No browser or device fingerprint. No cookies, and no analytics or advertising trackers on this page.

That is a design decision, not an oversight. Forms like this are usually protected from abuse by recording the sender’s IP address. We rate-limit on total volume instead, and de-duplicate repeat submissions by email address, specifically so that no identifying data has to be retained to keep the form working. The form also carries a hidden field that real people never see; if something fills it in. The submission is discarded and nothing is stored at all.

Why we hold it

To read your enquiry and reply to it. We do not add you to a mailing list. We do not build a profile from it, and we do not sell it or share it for anyone else’s marketing.

Who else touches it

Two service providers, each doing one job: a managed MongoDB database stores the enquiry, and our email provider delivers the notification email to us. Nobody else receives it.

How long we keep the enquiry

24 months from the day you send it, after which it is deleted automatically. Enterprise conversations are slow, and we would rather be able to pick one back up a year later than pretend otherwise: but that window is a limit, not an intention.

Having it deleted, or asking what we hold

Email privacy@useplgn.com from the address you used, and we will delete your enquiry and confirm that we have. You can also ask for a copy of what we hold, or ask us to correct it. There is no form to fill in and no account to create.

Who we are

PLGN, operated by Hyper Business Solution. Questions about this notice go to the same address above.