Política de privacidad

PLUGO, S.A. de C.V. ("Plugo"), with its address at Mariano Escobedo 510, Int. 801, Col. Anzures, C.P. 11590, Alcaldía Miguel Hidalgo, Ciudad de México, México, is responsible for processing your personal data. For anything about this policy, your rights or your consent, write to Plugo's Personal Data Department at contact@plugo.lat.

• Identity and contact: name, email address, profile photo (if you upload one or it comes from your Google account), language and time zone. Your password and second factor are managed by our sign-in provider; for recovery codes we keep only a hash.
• plugo.lat forms: name, email, company and the message you send when you request a demo or contact us.
• Your business and brand: business name, website, industry, description, logo, colors, tone, products, locations, prices, margins and advertising targets, plus the public information we read from your website and Instagram profile to build your brand context.
• Your advertising accounts: from the Meta (Facebook and Instagram) and Google Ads accounts you connect, we read account structure, campaigns, ad sets and ad groups, ads and creatives, audiences (name and approximate size), the Facebook Page you choose, performance metrics and, on Google Ads, the search terms that led people to your ads. Those search terms were typed by members of the public who are not Plugo users; we process them only to analyze your campaigns. We store the access credentials those platforms give us in encrypted form.
• Your use of Plugo: your conversations with your agents, the instructions and preferences you give them, what they remember from those conversations, your approvals, the recommendations and documents generated for you, and the files you upload.
• Payments and billing: your Stripe customer ID, subscription, invoices, payment history, balance, usage and coupons, and for your payment method only the brand, last four digits and expiry date.
• Technical data: IP address and request data used for security, rate limits and technical logs, and session identifiers.

We do not collect sensitive personal data (such as health, ethnic origin, beliefs, sexual orientation or biometric data). Please do not include it in your conversations or uploads.

We use your information for these primary purposes, which are necessary to provide the service:

• Creating and managing your account, verifying your identity and protecting access.
• Connecting your advertising accounts and reading them to give you diagnoses, recommendations, strategies and the work of your agent team.
• Building your brand and competitor context, using public information about the businesses you follow.
• Generating and storing the documents, creatives and proposals you request.
• Billing, managing your balance and preventing fraud.
• Providing support and notifying you of account or security changes.
• Answering demo or contact requests sent from plugo.lat.
• Complying with legal obligations and requests from authorities.

We do not use your data to train AI models, and we do not combine one customer's data with another's.

Unless you object, we also use your information for these secondary purposes: sending you Plugo news and marketing communications; inviting you to surveys or interviews about your experience; and analyzing how Plugo is used to improve it.

You can opt out at any time by turning off email communications in Settings › Privacy (Ajustes › Privacidad) in the app, or by writing to contact@plugo.lat with the subject "Finalidades secundarias". Opting out does not affect your service.

Today Plugo only reads your advertising accounts. It does not create, change, pause or publish anything in them, and it does not move your budget. Recommendations that could spend money or change a campaign are presented to you so you decide and carry them out.

When you connect Meta we request read-only permissions. Google Ads offers no read-only permission, so the access you grant would technically allow changes; Plugo only reads. If we ever offer actions that change your campaigns, they will run only with your explicit approval each time, and we will update this policy first.

You can disconnect any account at any time from the app or from your Meta or Google settings; from then on we stop reading it.

To support you, a small number of people on the Plugo team can view your account in read-only mode (your recommendations, your agent team, your context, competitors, studio and results). They cannot change anything or act in your Meta or Google accounts, and every access is logged.

Plugo uses AI agents to analyze your information and draft diagnoses, recommendations and content. To do so, it sends the necessary excerpts of that information to model providers through OpenRouter. Every request carries zero data retention with training data collection turned off; if a provider does not offer those terms, the request is not sent. AI output can be wrong, which is why you always decide on recommendations that change your campaigns or spend.

Our observability tool runs in our own cloud. For customer accounts it receives only technical data (timing, cost, errors) tied to a pseudonym, never your email or the content of your conversations.

We share your information with providers that process it on Plugo's behalf and only on our instructions:

We also connect to the platforms you link (Meta and Google; Shopify or Klaviyo if you connect them) to read your information, and to public sources (Meta, Google Places, YouTube and TikTok) for public information about the competitors you choose to follow. Several providers operate outside Mexico, mainly in the United States, so your data may be processed there under the protections of this policy.

We do not sell your personal data or transfer it to third parties for their own purposes, except where the law allows it without your consent, such as a request from a competent authority.

If you connect tools that hold data about your own customers (such as Shopify, Klaviyo or an imported orders file), Plugo processes that data as a processor on your business's behalf, only to provide the service. Your business is responsible for informing its customers and obtaining consent where the law requires it. If you are a customer of a business that uses Plugo, contact that business first; you can also write to us and we will pass your request on.

On plugo.lat we use Google Analytics and the Google Ads tag, which set cookies to measure visits, understand how the site is used and measure our ads. They collect data such as pages visited, visit time, browser and device type, approximate location and referral source.

In the Plugo app we use no analytics or advertising tools. We keep in your browser's local storage what is needed for your session and language, and our sign-in provider uses its own cookies so you can sign in.

You can block or delete cookies in your browser, install the Google Analytics opt-out add-on or adjust your Google ad settings. Blocking sign-in cookies prevents you from signing in to the app.

You have the right to access your data, rectify it, have it cancelled (deleted) and object to its processing for specific purposes. To exercise them, write to contact@plugo.lat with the subject "Derechos ARCO", including your name and account email (or how you want to receive the answer), a valid official ID (and proof of representation if you act for someone else), the right you want to exercise and the data concerned, and anything that helps us locate it.

We answer within 20 business days of receiving a complete request and, if it applies, carry it out within the following 15 business days. Each period can be extended once for the same length when justified, and we will tell you. The process is free of charge. If you believe we did not handle your request lawfully, you can go to Mexico's Secretaría Anticorrupción y Buen Gobierno, the data protection authority.

You can withdraw your consent at any time through the same channel and with the same requirements as an ARCO request. Withdrawing consent for primary purposes means we can no longer provide the service. To limit the use of your data, turn off email communications in the app, ask us to add you to our exclusion list, disconnect the accounts you no longer want us to read, or register with Mexico's REPEP (Registro Público para Evitar Publicidad).

We keep your data while you have an account and afterwards only as long as needed to meet legal (for example, tax) obligations; after that we block and delete it.

In Settings › Privacy you can delete your account: it is deactivated and all your sessions are closed. To have your data deleted as well, request cancellation by writing to contact@plugo.lat; we handle it within the legal time limits above. See our Data Deletion Instructions.

We protect your data with administrative, technical and physical measures: encrypted connections, encrypted credentials for the accounts you connect, two-factor authentication, per-account access controls and staff access limited to those who need it.

We may update this policy because of changes in the law, our services or our providers. The current Spanish Aviso de privacidad and this translation are always published on this site with their update date, and we will also notify you by email or in the app of relevant changes.