Plushcap, Inc. Privacy Policy

This policy explains how Plushcap, Inc. (“Plushcap,” “we,” “us,” or “our”) collects, uses, and discloses personal information in connection with our website, web application, APIs, MCP server, integrations, and communications (together, the “Services”). Our Terms of Service govern use of the Services.

We do not sell personal information or share it for targeted advertising. We do not send customer-submitted data to AI providers. Customer content and usage data are excluded from AI model training by default, and use of a customer’s name or logo in marketing requires explicit permission.

1. Who we are and how to contact us

Plushcap, Inc. is responsible for the personal information described in this policy. For privacy questions or requests, email [email protected] or write to:

Plushcap, Inc.
PO BOX 309
Philomont, VA 20131
United States

When an organization provides personal information to us solely for processing on its behalf, that organization is responsible for its own privacy notices and instructions. An applicable data processing agreement governs our processing in that role. You may contact your organization about information it controls, or contact us for help directing your request.

2. Information we collect

Account and profile information. We collect information you provide when creating or managing an account, such as your email address, username, name, password credentials, and any optional contact or organization information you supply. We also maintain account status, organization membership, subscription details, and preferences, such as followed companies and email settings.

Customer submissions and communications. We receive information you submit through the Services or send to us, including searches and request parameters, support requests, feedback, and other customer content. Please only provide personal information that you are authorized to share and that is needed for your request.

Billing information. Stripe processes payments and collects payment details through its payment services. We receive information needed to manage billing, such as customer and subscription identifiers, plan, payment status, and transaction records. We do not store full payment card numbers in the Plushcap application.

Sign-in and connected services. If you use Google sign-in, we receive the account information needed to authenticate you, such as your email address, basic profile information, and sign-in identifiers. For API and MCP access, we process credentials, authorization records, permissions, and connected-client information needed to provide and secure that access.

Technical and usage information. We and our service providers collect information about requests and use of the Services, such as IP address, browser and device information, referring page, pages or endpoints accessed, timestamps, usage counts, and diagnostic information. Logs and error reports may contain account identifiers, request details, or information included in a request. We use this information for analytics, troubleshooting, security, and enforcing plan limits.

Public sources. Our research and analysis features collect information from publicly available websites and services, including company blogs, articles, professional profiles, social posts, and videos. This material can include personal information such as author names, professional roles, and statements made publicly. We use it to organize, summarize, analyze, and present industry information.

3. How and why we use information

We use personal information to create and maintain accounts; authenticate users and connected clients; provide requested features and results; manage subscriptions and payments; respond to support requests; send service and marketing communications; understand usage and improve the Services; maintain reliability and security; prevent abuse and fraud; enforce our agreements; and comply with legal obligations.

Where European Economic Area or United Kingdom data protection law applies, our legal basis depends on the activity. We rely on performance of a contract to provide the Services you request; legitimate interests in operating, securing, and improving our business and Services, and communicating where permitted, subject to your rights; legal obligations for required records and compliance; and consent where required. When processing depends on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. Information needed to provide an account or paid subscription may be required for those features to work.

4. When we disclose information

Service providers. We use providers for hosting, authentication, payments, email, analytics, diagnostics, and security. They receive information relevant to their functions. Our providers include DigitalOcean for application and database hosting; Cloudflare for network delivery and security; Tailscale for secure administrative network access; Stripe for payments and subscriptions; Google for Google sign-in; Resend for email delivery; Plausible for website analytics; and Sentry for error monitoring and diagnostics.

At your direction. We disclose information when you ask us to do so or authorize a connection. An organization account may make account and membership information available to its authorized administrators. If you use an external AI assistant or other MCP client, that client sends requests to Plushcap and receives the results you request. Its handling of information is governed by its own terms and privacy policy.

Public material and results. Public-source material described above may appear in our pages, reports, search results, and API or MCP responses. Customers may reuse results as permitted by our Terms of Service and applicable law. This does not make private account information or customer submissions public by default.

Legal, safety, and business needs. We may disclose information when required by law or legal process, to protect rights and safety, investigate abuse, or enforce agreements. Information may also be disclosed in connection with a merger, acquisition, reorganization, financing, or sale of business assets, subject to applicable confidentiality and data protection requirements.

We do not sell personal information or share it for cross-context behavioral advertising or other targeted advertising.

5. AI and customer permissions

We do not send customer-submitted data to AI providers. We may use AI to analyze or summarize publicly available source material. An external AI assistant you choose to connect operates separately from Plushcap; Plushcap receives the requests and parameters that client sends, rather than an entire conversation unless it is included in a request.

As provided in our Terms of Service, we do not use Customer Content or Usage Data to train, develop, or enhance AI or machine learning models without separate, prior, explicit written or electronic opt-in consent. This restriction also covers aggregated or de-identified forms of that information and training by our providers or subprocessors. Signing up, accepting the Terms, or using the Services is not that consent.

We use a customer’s name, logo, or other brand assets in marketing or publicity only with prior, explicit written or electronic permission and within the scope of that permission.

6. Cookies and similar technologies

We use cookies and browser storage for functions such as keeping you signed in, protecting forms and sessions, and remembering preferences such as your display theme. Analytics, diagnostics, and security providers also process browser and network information as described above. We do not use these technologies for targeted advertising.

You can manage cookies and site storage through your browser settings. Blocking or clearing them may sign you out, reset preferences, or prevent some features from working. Marketing email preferences are managed separately as described below.

7. Email preferences

Marketing email preferences are enabled by default when you sign up. You can turn them off at any time, including before receiving your first marketing email, in the email preferences on your account page. You can also use the unsubscribe link in a marketing email or contact us to opt out. Default enrollment is not a substitute for affirmative consent where applicable law requires it.

Opting out of marketing does not stop essential account, security, billing, or other service communications.

8. Retention and deletion

We have not set a single fixed retention period for all account data. We retain personal information for as long as reasonably necessary for the purposes described in this policy, considering whether your account remains active, the nature of the information, service and security needs, legal and tax requirements, and the resolution of disputes.

Under our Terms of Service, after termination, you may request deletion of Customer Content, and we will delete it within 90 days after receiving that request, subject to the retention exceptions in the Terms and any earlier deadline required by law or an applicable data processing agreement. This provision concerns Customer Content; it does not require keeping all personal information for 90 days or extend a shorter legal deadline for responding to a privacy request.

Some information may need to be retained for legal compliance, security, dispute resolution, or to honor an opt-out. Backup and archival copies are subject to the applicable retention exceptions in the Terms and applicable law. Contact us to request account deletion or to ask about retention of particular information.

9. Your choices and privacy rights

You can manage available account and email settings through the Services. Depending on where you live and applicable law, you may also have rights to access or obtain a copy of personal information, correct it, delete it, restrict or object to processing, receive portable data, or withdraw consent. You may object to processing for direct marketing at any time. Applicable exceptions may limit a request, including where records must be kept by law.

To exercise a right, contact [email protected] with enough information for us to understand your request. We may need to verify your identity and, for an authorized agent, their authority. We respond within the time required by applicable law and will explain any applicable limitation. We do not discriminate against you for exercising a privacy right. Where applicable, you may appeal a refusal by contacting us, or complain to your local data protection authority.

If public-source material contains personal information about you, you may contact us about correction, removal, or an objection to its processing. We will assess the request under applicable law, including any relevant public-interest, expression, and legal exceptions.

10. Security and international processing

We use technical and organizational measures designed to protect personal information, including access controls and measures to secure administrative access. No service can guarantee complete security.

Plushcap is based in the United States. Our Services and providers may process information in the United States and other countries, whose privacy laws may differ from those where you live. Where applicable law requires safeguards for an international transfer, those requirements apply to our processing. Contact us for information about the locations and safeguards relevant to your information.

11. Age requirements

The Services are intended for people aged 13 or older and are not directed to children under 13. You must also meet any higher minimum age for independent use or consent required by the law where you live. If you are under the age of legal majority, you must have permission from a parent or guardian to use the Services and enter the Terms of Service.

We do not knowingly collect personal information from children under 13 or users below an applicable higher minimum age. If you believe a child has provided information in violation of these requirements, contact us so we can investigate and delete information as required by law.

12. External websites and services

The Services link to third-party sources and can connect to external services you choose. This policy describes Plushcap’s practices; those other services have their own privacy policies and controls. Review them before providing information or authorizing access.

13. Changes to this policy

We may update this policy as our Services or practices change. We will post the revised policy here and update the date above. For material changes, we will provide additional notice where appropriate or required by law, such as by email or a notice in the Services, and obtain consent where legally required. Changes to our contractual Terms of Service remain subject to the amendment provisions of that agreement.

Policy attribution and license

This policy adapts the structure of Automattic’s open-source Privacy Policy with original text describing Plushcap’s practices. The source and this adapted policy text are licensed under Creative Commons Attribution-ShareAlike 4.0 International. This license applies to the policy text, not to personal information, customer content, or the Services.