Privacy

Who we are

The Plugin Studio is a brand of PLUGINMAKER.AI sp. z o.o., os. Piastowskie 94/26, 61-162 Poznań, Poland (KRS 0001238740, NIP 7822969104). The company is the controller of the personal data described here. Write to us at office@pluginmaker.ai about anything on this page.

This page covers thepluginstudio.com and its Book a meeting form. pluginmaker, the engine we build plugins with, has its own privacy policy ↗.

The Book a meeting form

What you send

Who you are (artist, creator, brand, label or other), your name, your email address, up to five links and what you tell us about you and your project. We also record which page you sent it from and when you ticked the consent box.

Why

To reply to you and set up a call about your plugin. The form is optional, but without it we can't reply.

Legal basis

Your consent, given with the checkbox (GDPR Article 6(1)(a)), and the steps you ask us to take before we might work together (Article 6(1)(b)). You can withdraw your consent at any time; that doesn't affect what we did before.

Where it goes

Your request is stored in our database (Neon, Frankfurt, Germany) through our servers at OVHcloud (EU). An email with your request goes to our team through Resend (US) and arrives in a founder's mailbox (Google Workspace).

How long

We keep your request for 12 months after our last contact with you, then delete it. You can ask us to delete it sooner.

When we talk

Once we reply to your request, or you write to us, you appear in our customer-relationship (CRM) tool. It syncs our founders' Google mailboxes and calendars and keeps a contact record for everyone who emails a founder or shares a calendar event with them: your name, email address and company, your first and last email and calendar interaction with us, a relationship-strength score and which of us knows you best. We use these records to manage our business relationships and for individual business outreach, on our legitimate interest in running and developing our business (GDPR Article 6(1)(f)). Our CRM provider also adds details to company records from its own sources, for example a description, categories, employee range, estimated revenue, founding date, social-media handles and follower counts, location and logo, through providers that work as its sub-processors, a third-party logo service among them. Where a company record stands for a sole trader, those details are about a person. We don't switch this on for individual people.

Our CRM provider is in the UK, covered by the EU adequacy decision for the United Kingdom. Our workspace is hosted on Google Cloud in Dublin, EU, and the provider's US sub-processors work under its data processing addendum, which includes the EU Standard Contractual Clauses. We keep your contact record while our relationship lasts and for 3 years after the last interaction, then delete or anonymise it; if you never replied to our outreach, we keep it for 12 months from our last contact. If you object, we keep only a hashed copy of your email address on a suppression list, so that we don't contact you again.

Our servers' request log

The form sends your request to our servers at api.pluginmaker.ai (OVHcloud, EU). Like every request to them, it is written to a standard request log for security, abuse prevention and troubleshooting: the time, the requested path and the response status, the network IP address it came from and your browser's user-agent string. This log is kept for 30 days, on our legitimate interest in keeping the service secure and working (GDPR Article 6(1)(f)). It is never used for advertising or profiling.

This website

• No cookies, no tracking across sites. The site stores nothing in your browser.
• Analytics. Plausible (EU) gives us cookieless, aggregated web analytics on our pages. It processes your IP address transiently for counting and doesn't store it.
• Hosting. Vercel (US provider, global network) serves the site. Like any web server, it processes your IP address and the details of each request to deliver the pages.
• Fonts. The site loads its fonts from Google Fonts, so your browser connects to Google's servers, which receive your IP address.
• Links. The stores and sites we link to (our partners' shops, pluginmaker.ai) have their own privacy policies.

Vercel, Resend and Google are US providers, so your data may be transferred outside the EU/EEA.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to object to its use (including what we do on our legitimate interest), or to get it in a portable format. Write to office@pluginmaker.ai. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl ↗).