Privacy Policy

1. Who we are

Plug is an AI video creation service operated by PLUG AI INC (“Plug”, “we”, “us”). This policy describes information handled when you use our website, studio and connected integrations.

Our business address is 228 Park Ave S, #48791, New York, NY 10003, United States of America. For privacy or support requests, contact studio@alphagroup.ai.

2. Information we handle

• Account and workspace: your email address, user and workspace identifiers, membership roles, sign-in sessions, preferences and account activity.
• Creative inputs and outputs: prompts, creative-assistant messages, scripts, product and brand information, URLs, property details, photos, portraits, screenshots, recordings, audio, generated videos, captions and export files.
• Presenter permissions: permission attestations, consent status, reference images and related records used to check whether a presenter may be used. Do not upload someone’s face, voice or other personal information without the necessary permission.
• Usage and operational records: generation settings, job history, quality results, feedback, workspace learning records, provider request identifiers and costs, error and audit logs. Hosting systems may record connection information such as IP addresses and request details.
• Billing: credit balances, purchase and adjustment history, Stripe checkout identifiers and payment-confirmation information. Card details are collected by Stripe’s hosted checkout, rather than by a Plug card-entry form.

3. Google sign-in

Plug requests the Google sign-in scopes openid, email and profile. Google returns identity information during sign-in; Plug verifies and stores your email address to find or create your account. The current sign-in implementation does not save your Google profile name or picture, or retain Google access or refresh tokens for later API access.

Signing in does not give Plug access to your Gmail messages, Drive files, contacts or calendar. Your Google identity is used for authentication, workspace access, support and security. It is not sent to AI generation providers as part of the sign-in flow.

You can revoke Plug’s Google connection in your Google Account connections. Revoking access does not itself delete your existing Plug workspace or previously saved work.

4. How information is used

We use information to authenticate users, run workspaces, generate and edit media, enforce presenter permissions, process purchases and credit usage, provide support, prevent abuse and troubleshoot the service. Generation recipes, quality results and feedback can be saved to improve later creative choices within your workspace.

Optional research features retrieve and analyze websites or media URLs you supply. Scheduled Scout features can revisit tracked company sources and prepare updates for your workspace. Use only sources and content you are authorized to provide.

5. Service providers and sharing

The information shared depends on the feature you use and the providers enabled for it:

• Hosting and storage: Amazon Web Services and database infrastructure store and process account records, media and operational data. Some processing also uses application-server storage.
• AI and media processing: relevant prompts, scripts, images, audio, video or media URLs may be sent to fal.ai and its model providers, Anthropic, Google AI or Cloud services, xAI, ModelsLab, or BytePlus when the corresponding feature is enabled. These services return generated content or analysis.
• Research and capture: searches, source URLs or capture instructions may be sent to Tavily, Browserbase and stock-media services such as Pexels or Pixabay when used.
• Payments: Stripe receives the selected credit pack, price and internal user/workspace identifiers. Stripe collects payment information directly and sends payment events to Plug. See Stripe’s Privacy Policy.
• Workspace collaboration: authorized members and administrators can access information according to their workspace roles. Authorized Plug personnel may access records to operate the service, address support requests or investigate abuse.

Providers process information under their applicable terms, data agreements and retention settings. This draft does not promise that every provider has identical retention or model-training practices. Avoid submitting sensitive information that is unnecessary for your creative task.

Information may also be disclosed when legally required, to address fraud or security incidents, or in connection with a business transfer subject to applicable protections and notice requirements.

6. Optional Meta connection

If you connect Meta, Plug receives and stores access tokens, permitted ad-account and Page identifiers, names and Page tokens. Requested permissions support reading ad accounts and performance, managing ad creatives, listing Pages and publishing Page posts.

When you request an export or publication, Plug sends selected video content, captions or ad text, headlines, destination links and relevant account/Page identifiers to Meta. Meta can retrieve a media URL for this purpose. Plug may retrieve ad performance information such as impressions, spend and click-through rates. Published material is subject to Meta’s platform settings and policies.

Disconnecting Meta in Plug removes the stored connection. You can also revoke access through Meta’s business integration settings. Disconnecting does not remove videos, ads or posts already delivered to Meta; manage those in Meta separately.

7. Cookies and browser storage

Plug uses a session cookie to keep you signed in and a short-lived cookie to secure the Google sign-in flow. The sign-in session cookie is issued with a 30-day lifetime; OAuth verification uses a short-lived cookie. Local browser storage remembers interface preferences such as your theme and sidebar state.

You can clear cookies and local storage through your browser. Doing so may sign you out or reset preferences. Google, Stripe and Meta may use their own cookies when you visit their services.

8. Retention, security and international processing

Account records, media and job history remain available for service operation; the current app does not apply a single automatic deletion period to all records. Billing, consent, security and audit records may need to be retained for legitimate operational or legal reasons. Deletion requests require review, and backup or provider-held copies may follow separate retention schedules.

We use access controls and authenticated workspace access, but no storage or transmission system is completely secure. Relevant media may be made accessible through storage or provider URLs so generation and export services can process it; treat links to private content with care.

Our infrastructure and providers may process information outside your country, including in the United States. Applicable transfer arrangements, retention periods and provider agreements must be confirmed by PLUG AI INC before this draft is finalized.

9. Your choices and requests

You may request access to, correction of or deletion of your personal information, or ask about other rights available under the laws that apply to you. Contact the Plug team at studio@alphagroup.ai with your account email and the nature of your request. Do not send passwords, payment-card numbers or API keys. We may need to verify your identity and workspace authority.

There is currently no complete self-service account-deletion workflow. Deleting an item in the interface or disconnecting an integration should not be assumed to erase all historical logs, backups or copies held by another service. The team will explain the scope and any retention exceptions when handling your request.

10. Age and policy changes

Plug is intended for adult business users, not children. Do not submit children’s personal information for generation. If you believe a child’s personal information has been provided, contact us.

We will update this page when our practices change and provide additional notice or seek consent where required before materially changing how Google user data is used.