Plunk privacy & data

Data Controller: For your account data (email, password, billing) Data Processor: For your contact data (we process on your behalf)

Email address (required for login and notifications)

Contact email addresses

Open count and click count (aggregated)

IP address and user-agent

Billing email, usage amounts, transaction history

We use your data to: Authenticate you and maintain your session (JWT tokens) Send emails on your behalf via AWS SES

Process payments via Stripe

Suspicious login attempts

Retained: Until you delete your account

Retained: Until you delete contacts or your account

Retained: Indefinitely (for analytics and deliverability tracking)

Retained: 30 days (automatic deletion)

All data is stored in the European Union / European Economic Area

Protected by Data Processing Agreements (DPA) and Standard Contractual Clauses (SCCs)

Immediate and permanent deletion (no grace period)

Request a copy of all personal data we hold about you

Correct inaccurate or incomplete data

Delete your account and all associated data

Export your data in JSON format

Object to processing based on legitimate interests

Temporarily limit how we process your data

File a complaint with your data protection authority

We DO NOT sell your data. Ever.