Privacy policy

How Plugix processes data on plugix.ai, in the crm.plugix.ai dashboard and in the service. Version of 23 October 2026.

1. General

1.1. This policy describes how the sole proprietor (FOP) S.V. Poludniev (tax ID 3386205992, admin@plugix.ai; “Plugix”) processes personal data under the Law of Ukraine “On Personal Data Protection”. It is part of the offer agreement, which prevails where they differ.

1.2. By using the site, leaving a request, registering or signing in to the dashboard, you agree to this policy and to the processing it describes.

1.3. Plugix is the controller of the data of site visitors, people who leave a request, Plugix’s clients and the users of their dashboards. The data a business keeps in Plugix CRM about its own customers and staff belongs to that business: it is their controller and is responsible for processing them, and Plugix processes them only on its instructions to run the service. Ask the business about such data.

2. What data and why

2.1. A request: your name, phone or Telegram, email, website, industry, business size and the page you wrote from — to contact you and set Plugix up.

2.2. Registration and the dashboard: first and last name, phone (confirmed in Telegram), business name, website, Instagram; Telegram ID, name and @username, or the email and name from Google (openid, email, profile only); businesses and roles, sign-in times, the activity log; hashes of sessions and IP addresses against break-ins — to provide the service, protect sign-in and perform the contract.

2.3. Payment: you enter your card on monobank’s page; Plugix only sees the payment status and the card’s last digits. Plugix never sees clients’ bank accounts or statements: their buyers pay through the clients’ own payment services, and the service only receives an invoice’s payment status.

2.4. Conversations with the AI on the site and in the service are processed by OpenAI to answer; so are photos a customer sends in a chat and products (description and photos) a business runs through AI features: AI characteristics and Clean background. Plugix may use de-identified conversations and statistics to improve the service.

2.5. Ads and analytics on the site: click and utm marks, IP address, browser type, Google, Meta and Microsoft Clarity cookies; after a request Google Ads and Meta receive the click mark and the hashed email and phone. For visitors from Ukraine this is on from the start; from other countries, only with their consent in the cookie notice.

2.6. Cookies: the necessary ones always work; analytics and advertising ones as described above, and you can switch them off or on at any time in «Cookie settings» at the bottom of the site. The dashboard uses only the necessary ones.

2.7. Plugix does not verify the data given and may block an account if it is false. The client warrants that it has consent or another lawful basis for the data of its users, customers and staff it puts into the service, and is responsible for them.

2.8. Information received from Google APIs is used in line with the Google API Services User Data Policy, including the Limited Use requirements: for sign-in only, never passed on for ads or model training.

3. Who receives the data

3.1. To providers working for Plugix: Cloudflare (site, service, databases), OpenAI (AI), monobank (payments), Telegram and Google (sign-in and notifications), Meta and Microsoft (the site’s ads and analytics), Resend (email), LiveKit (voice and calls) and others as needed. Their servers may be outside Ukraine, including in the EU and the US; by using the site and the service you agree to such transfer.

3.2. To services the client connects itself (messengers, social networks, store platforms, payment and email services), on its instructions. They process data under their own rules; Plugix is not responsible for them or for sites that links lead to.

3.3. To AI chats and apps you connect to your dashboard yourself (ChatGPT, Claude, Perplexity, Gemini and others, through Plugix sign-in or a key): they receive the data of your business you ask them for, within your role — bookings, orders, clients, products, statistics and messages — and process it under their own rules. Plugix neither sees nor keeps your conversations with them; changes made through them go into the activity log. You can end the access at any time in «Sign-in security» → «Sessions and devices».

3.4. To authorities on a lawful request; to protect the rights of Plugix and third parties, including in case of a breach of contract or fraud; to Plugix’s successor, including a company founded by S.V. Poludniev.

3.5. Plugix may publish reviews a client left about it with the name and business, until the client asks to remove them. Plugix does not sell data.

4. Your rights

4.1. You have the rights under Article 8 of the Law: to know what data about you is processed, access it, correct or delete it, object to the processing, withdraw consent and complain to the Ukrainian Parliament Commissioner for Human Rights.

4.2. Send requests to admin@plugix.ai; Plugix may ask you to confirm your identity. A client can edit and export its data in the dashboard itself.

4.3. Plugix may keep, or limit the deletion of, data needed to perform the contract, account for payments, comply with the law or protect its rights. Deleting account data may make the service unavailable.

5. Security

5.1. Plugix takes reasonable measures to protect data; no system guarantees full security.

5.2. Plugix is not responsible for a leak or loss of data on the side of third-party services, through a client or users giving their access, API tokens or devices to others, or through cyber attacks or other circumstances beyond its control.

5.3. Plugix tells a business about an incident with its data; telling the people and the authorities is the business’s duty as the controller of that data.

6. Retention and changes

6.1. Requests — while Plugix works with you and 3 years after the last contact; contacts in the ads bot — up to 90 days; Clarity session recordings — up to 30 days; account data — while you use the service and within the terms of the contract; payment documents and logs — as long as the law requires or Plugix needs them to protect its rights.

6.2. Plugix may change the policy unilaterally; a new version applies from its publication at plugix.ai/privacy/. Check the policy from time to time. Using the site or the service after a change means you agree to it.