Security & trust

Is Pluggzy safe?

Straight answers about your data, your passwords and the risk to your accounts. If anything here is unclear, write to us and a person will answer.

What we keep, and what we don't

We keep

  • Your email and name, to sign you in
  • Which accounts you connected: an ID, the name and the picture
  • How many actions each account made per day, to enforce the limits
  • The posts you schedule or publish through Pluggzy, for your calendar
  • Your plan status from Stripe

We don't keep

  • Your passwords: sent encrypted to log you in, never stored
  • Your messages, chats or contacts: fetched when your AI asks, never copied
  • Your card number: it goes straight to Stripe
  • Attachments: their links expire after 24 hours
  • Images you upload: deleted after 24 hours, unless a scheduled post needs them

Everything travels encrypted (HTTPS). API keys are stored as hashes. We never sell your data or use it to train AI.

How each channel connects

Two kinds of connection, with different risks. We'd rather you know which one you're using.

Official access
  • Threads
  • TikTok
  • YouTube
  • Pinterest
  • Google Business Profile
  • WordPress
  • Instagram Business

You sign in on the network's own screen and approve what Pluggzy may do. No password shared, within the network's rules, and you can revoke access from its settings too.

Through our provider Zernio
Login access
  • LinkedIn
  • WhatsApp
  • Telegram
  • Instagram
  • Facebook
  • Messenger

These apps have no official API for personal inboxes. You log in on our page or scan a QR code, the way you'd add a new device; the login goes encrypted to our provider Unipile, which keeps the session. It works well, but the app could restrict an account that acts like a bot, so no one can honestly promise zero risk.

Through our provider Unipile
What lowers the risk
  • Random gaps between actions: about a minute on LinkedIn, 10 to 20 seconds elsewhere
  • Daily limits, e.g. 25 LinkedIn invitations or 10 new WhatsApp chats a day
  • An automatic pause, from 5 minutes up, if an app pushes back
  • Reading and answering your own messages is the safest use

Your AI only does what you allow

Read-only to start

Every AI app and API key starts read-only. Sending and publishing stay off until you turn them on, app by app.

Revoke anytime

Turn sending off again or remove an app's access in one click, from Connected apps.

Disconnect in one click

Disconnecting an account ends the connection at our provider too.

Delete everything

Delete your Pluggzy account from your profile: subscriptions are cancelled and your workspace is deleted.

Who handles your data

A few providers help us run Pluggzy. Each one only gets what it needs for its job.

Cloudflare
Hosting, database and storage
Unipile
Logs in to LinkedIn, WhatsApp, Telegram, Instagram and Facebook and carries out what your AI asks
Zernio
Connects the official-access networks and publishes your posts there
Stripe
Payments, only if you add a card or subscribe
Your AI app
Gets what it asks for, under its own privacy policy
Full details in our privacy policy →

Questions, answered

Is it official? Could my accounts get banned?

It depends on the channel. Threads, TikTok, YouTube, Pinterest, Google Business Profile, WordPress, and Instagram Business connect through each network's official API: you sign in on its own screen and never share a password. LinkedIn, WhatsApp, Telegram, personal Instagram accounts and Facebook profiles have no official API for personal inboxes, so they connect the way a new device or browser login does, through our provider Unipile. That carries some risk no tool can honestly rule out. Pluggzy keeps it low with random gaps between actions, daily limits kept to what is recommended for each app, and an automatic pause if an app pushes back.

What do you store? Who can see my messages?

We don't keep a copy of your inbox. Messages are fetched from the app only when your AI asks, and handed straight back to it. We store what's needed to run your account: your email, which accounts are connected (an ID, name and picture), how many actions each one made, and the posts you schedule or publish through Pluggzy. Your password goes over an encrypted connection to our provider Unipile, which keeps you logged in, and is never stored by us. Links to attachments expire after 24 hours. We never sell your data or use it to train AI. What your AI app does with what it reads follows that app's own privacy policy.

Is it free? Will I be charged automatically?

Every account starts with a 3-day free trial, with every tool. There's no free-forever plan. If you start without a card, nothing is ever charged: when the trial ends, your accounts disconnect unless you pick a plan. If you're asked for a card when you start, it's $0 today, we email you the day before the trial ends, and you can cancel in one click before then.

Still unsure? Ask us.

Reply to any of our emails or write to support. A person reads every message.