Privacy Policy

Plug-in AI (“we”) operates this platform and is the data controller for the account and usage data described below. Where an agency uses the platform to create work for its own clients, the agency controls the content it generates and we process that content on its behalf.

Privacy questions: privacy@plug-in.ai

• Account data — name, email address, organization, and role, provided when an account is created or invited.
• Content you submit — prompts, uploaded reference images, video and audio, and the settings chosen for each generation.
• Generated output — the images, video, and audio the platform produces for you, plus their generation metadata (model, duration, resolution, cost).
• Usage and billing records — generation counts, the client and job each generation is billed to, credit purchases, and wallet balances.
• Technical data — log entries, IP address, browser and device information, and error diagnostics.
• Product news — if you ask for it: your email address, the language you read in, and a record of your consent (when, from which IP address and browser, and the words you agreed to). We do not track whether you open our emails.

We do not collect special-category personal data, and we ask that you do not upload it. Payment card details are entered directly with our payment processor and never reach our servers.

• To run generations you request and deliver the resulting files.
• To meter usage, charge credits accurately, and produce the per-client cost reports the platform is built around.
• To operate accounts, authentication, invitations, and role permissions.
• To keep the service secure and reliable — abuse prevention, debugging, and capacity planning.
• To comply with legal, tax, and accounting obligations.
• To send product news and launch announcements, only to people who asked for them. Every issue has a one-click unsubscribe, and account emails such as receipts are not affected by it.

We do not sell personal data, and we do not use your prompts or generated content to train our own models.

We process data to perform our contract with you (running generations, billing), on the basis of legitimate interests (security, service improvement, fraud prevention), and where required to meet legal obligations. Where we rely on consent, you may withdraw it at any time.

We use a small number of specialist providers to deliver the service, each processing only what their function requires:

• AI model providers — receive the prompt and any reference media needed to run a generation you request.
• Cloud hosting and storage providers — run the application and store your files.
• Authentication provider — manages sign-in, sessions, and team invitations.
• Payment processor — handles card payments and subscription billing.
• Email delivery provider — sends transactional messages such as invitations and receipts, and product news to people who asked for it.

These providers act on our instructions under contract. We do not permit them to use your content for their own purposes.

The platform operates internationally, so data may be processed outside your country, including outside the EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

• Generated files and their metadata are retained while your workspace is active, so your team and finance reports can reference them.
• Billing and credit records are retained as long as required by tax and accounting law (typically seven years).
• Reference uploads are retained for as long as the generations that used them remain available.
• On account closure we delete or anonymize personal data within 90 days, except records we must keep by law.
• If you unsubscribe from product news, we keep only your email address and the date and reason, so that we never write to you again.

Data is encrypted in transit and at rest. Access to production systems is limited to personnel who need it, workspaces are isolated from one another, and every generation is attributable to the user and organization that requested it.

Subject to local law, you may request access to your personal data, correction, deletion, restriction, portability, or object to certain processing. Contact privacy@plug-in.ai and we will respond within the period required by applicable law (30 days in most jurisdictions). If you are a member of an agency workspace, we may direct your request to that agency, which controls its own content.

EEA/UK users may also lodge a complaint with their local data protection authority.

The platform is a business tool and is not directed to anyone under 16. We do not knowingly collect data from children.

We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.

You can connect an AI assistant such as Claude or ChatGPT to your workspace, and sign in to our plugins for creative apps such as After Effects, Premiere Pro, Photoshop, Illustrator, DaVinci Resolve and Blender. You make each connection yourself, signed in with your own account, and you can disconnect any of them at any time in Account → Connections.

• From an assistant — only the inputs of the tools it calls on your behalf: prompts, settings, the reference files you choose, and client and job names. We do not receive your conversations, chat history or the assistant's memory, and our tools never ask for passwords or payment details.
• From a plugin — the name of the app and of the computer it runs on, which we show you when you approve the sign-in and keep in your workspace's record of that approval; the work you generate or import through it; and, when an assistant asks to see your open project, a picture of it that is passed to the assistant and not stored.
• Sign-in tokens — assistants and plugins hold tokens that act as you, and we store them only as one-way hashes. Access tokens expire after an hour and renewal tokens after sixty days without use; disconnecting revokes them at once.

What an assistant does with your conversation is governed by that assistant provider's own terms and privacy policy, not this one.

We will update this policy as the service evolves. Material changes will be announced in-product or by email before they take effect, and the date above will always reflect the current version.