Privacy
What we keep about you and your company, where it lives, who processes it, and how a client workspace is erased.
Last reviewed 2026-10-14
What we keep
- The start form
- Your email, company, website, budget band, the services you ticked and your note. We use them to reply to you and, if you become a client, to set up your workspace.
- Your sign-in
- You sign in with a Plunge AI account. The agency keeps your user id, your email and your role in each workspace you belong to.
- Your workspace
- Brand profile versions, your claims library, requests and briefs, deliverables and their files, reviews, comments and decisions, publishing records, performance numbers, your plan and its ledger, the timeline of what happened, and the notifications we sent.
- Leads from your landing pages
- When a visitor sends the form on one of your landing pages: their name, email and message, the campaign tags of the visit, and a one-way hash of their IP address (never the address itself). We keep them for you, show them to your approvers, and erase them with your workspace.
- Connected accounts
- When you connect an account such as Google Ads, the credential is held by the Plunge AI platform in its encrypted credential store under your workspace's id, not in the agency's databases. The agency keeps only whether it is connected.
- Payments
- Stripe processes cards and invoices. We never see or store your card number; we keep the Stripe ids of your customer record, subscription and invoices.
Where it lives
The agency has its own databases and file storage, separate from other Plunge AI products: one database for workspaces and work, one for billing, one for the timeline and notifications, plus file storage for images and pages. All of it runs on Cloudflare, with the primary copies of the databases in western North America.
Each client sees only its own workspace. People at the agency see the workspaces of the agency's clients.
Who processes it
- Cloudflare hosts the site, the apps, the databases and the files.
- AI model providers (Google and Anthropic today) process your brief, brand profile and claims to produce and check the work. Each deliverable's manifest names the models used.
- Stripe handles payments, subscriptions and invoices.
- Resend delivers the emails we send you.
- Google, Slack and other services you connect receive what we publish or post there, and only because you connected them.
The full list, with each processor's region and the data it sees, is at Security · Subprocessors.
We do not sell your data and we do not use it for advertising.
Erasure
A client workspace can be erased in one step by the agency's owner, after typing the workspace's short name to confirm. The erase:
- cancels any active subscription at once, rather than at the end of the period;
- removes the accounts the Plunge AI platform holds connected for the workspace, the saved production workflows and the brand profile our agents read;
- deletes every record of the workspace in all three agency databases: requests, deliverables, reviews, publishing records, performance, landing-page leads, plan and ledger, timeline, notifications, brand profile, claims, the people who had access, and the start-form request it came from;
- deletes every file in the workspace's storage folder and every cached copy.
Afterwards the workspace answers "not found" everywhere. Our audit log keeps one line about the erase: the workspace's id and short name, when and by whom, and how many records and files went. None of the workspace's content stays in it.
Not part of the erase: invoices and payment records held by Stripe, which are kept for tax and accounting; the Plunge AI platform's own records of each model run (that it ran, its cost and its trace), which follow the platform's retention; and anything already published into ad or analytics accounts you own, which stays under your control there.
A start-form request that never became a client workspace is erased by the agency owner in one step too, after typing its email address to confirm: the request, its terms acceptance, its timeline lines and its mails go at once.
There is no automatic deletion today: we keep a workspace while you are a client and until you ask us to erase it.
Your requests
To get a copy of your data, correct it, or have your workspace erased, write to legal@plungeai.com from the address you use with us. To have a start-form request deleted, write to the same address and we delete it by hand and confirm when it is done.
See also AI disclosure and Rights.