Privacy policy
Plug is an app that keeps your online orders together. To do that it reads the emails shops send to your Plug address. This page says what Plug keeps, what it does with it, and what it never does.
What Plug keeps
- Your account. The email address you sign in with, and, when you sign in with Google or Apple, the name and picture they share. Apple's "Hide my email" is supported.
- Your Plug address. The address Plug makes for you, like yourname@plugs.it.com, and any earlier addresses you keep receiving mail on.
- Email sent to your Plug address. Order confirmations, shipping updates, invoices, return emails, newsletters: the message, its attachments and the images it shows.
- What Plug reads from those emails. The shop, products, prices, order numbers, tracking codes, delivery times, discount codes, return codes and labels.
- What you do in the app. Labels, archived orders, notification settings, and the returns you start.
How Plug uses it
- To show your orders, parcels, invoices, codes and returns in the app, and to send you notifications about them when you want those.
- To follow a parcel: Plug opens the carrier's tracking page from the link in the shop's email, reads it, and nothing more.
- To help with a return: Plug finds the shop's return page and keeps the return code or label the shop sends.
- To forward a shop email to your own inbox or reply to a shop from your Plug address, only when you ask for it.
Automatic reading, no human reading
Shop emails are read by software, including an AI language model from Google (Gemini), to tell what kind of email it is and what it says about your order. Email text is sent to that service for this purpose only; it is not used to train models. Nobody at Plug reads your emails. The people who run Plug can see which shops you order from and whether things work, but not what you bought, for how much, or what the emails say.
Where it is kept
Plug runs on Cloudflare and keeps its data in a database and file store managed by Plug. Email text, attachments, your name and anything that identifies you are stored encrypted. Plug does not sell data and does not share it with shops or advertisers. Shops never see your phone or when you read their email: images in emails are fetched by Plug's servers, not by your phone.
How long
Orders and their emails stay as long as your account exists, so you can look back at an order, an invoice or a return. Deleted orders can be brought back for 30 days and are then removed. Tracking pages Plug read are kept for a week when a check changed something, for troubleshooting, and then removed.
Your choices
- Choose or change your Plug address in the app, and switch earlier addresses off.
- Choose which notifications and forwarded copies you get, per kind of email.
- Delete orders, emails, codes and labels in the app.
- Delete your account and everything in it: email support@getplug.app from the address you signed in with. It is removed within 30 days.
What Plug never does
- Plug never places an order, never pays, and never stores card, bank or webshop passwords.
- Plug never fills in or sends anything on a shop's website on its own: a return is only registered after you tap to do so, and Plug shows you what it did.
- Plug never reads email that isn't sent to your Plug address.
Questions
Plug is a trade name of De Zoete Holding B.V. (KvK 66984149), The Hague, the Netherlands, which is responsible for your data. For anything about your data, write to support@getplug.app. If you are in the EU you can also complain to your data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.