Privacy policy
Template policy prepared for launch. Complete the placeholders and have it reviewed before going live.
Controller
LEGAL_ENTITY_NAME, NIF LEGAL_TAX_ID, LEGAL_ADDRESS, Spain. Contact: diego@plugstaff.com.
What we collect and why
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Account and subscription data via Stripe: name, email, billing country, tax ID, plan, trial and renewal dates (card details stay with Stripe) | Run your trial and subscription, invoices, trial-ending reminders, access to downloads, support | Contract; legal obligations (art. 6(1)(b),(c)) | For the subscription, then as tax law requires |
| Email from the “trial opens soon” form | Tell you once when the trial opens | Consent / your request (art. 6(1)(a),(b)) | Until the trial opens, then deleted unless you subscribe |
| Email from the free starter form | Deliver the download | Your request (art. 6(1)(b)) | Up to 24 months of inactivity |
| Email for the newsletter (only if you tick the box and confirm via the link we email you) | Product and guide updates | Consent (art. 6(1)(a)); withdraw anytime | Until you unsubscribe |
| Messages you send us | Reply to you | Legitimate interest (art. 6(1)(f)) | Up to 24 months |
Processors
Payments, subscriptions and the customer portal: Stripe (Stripe Payments Europe, Ltd.). Email delivery and the newsletter list: Resend. Hosting and form storage: Vercel (form submissions are stored in Vercel Blob, EU region, together with a one-way hash of your IP address used only to limit spam). Some processors may be outside the EU; transfers rely on adequacy decisions or Standard Contractual Clauses.
Cookies and analytics
This site sets no tracking cookies. The setup checklists remember your ticks in your own browser (localStorage) and send nothing. If we add analytics, we'll use a cookieless tool and update this page.
AI employees and your data
AI employees run in your own accounts (n8n, Google, OpenAI, etc.). We do not receive the leads, emails, CVs or invoices you process with them. You are the controller of that data.
Your rights
You can request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time, by emailing diego@plugstaff.com. You can also complain to the Spanish Data Protection Agency (AEPD, aepd.es) or your local authority.
Last updated 22 October 2026.