Privacy Policy
Last updated: June 2, 2026
Overview
Plumefy ("we", "us") provides a tool to schedule and cross-post content to social platforms. This policy explains what we collect, why, and your choices. Questions? Email support@plumefy.com.
Information we collect
- Account data — your name, email, and password hash (managed by our auth provider).
- Connected social accounts— when you connect a platform (e.g. Instagram, Pinterest), our posting provider stores the authorization needed to publish on your behalf. We store the account's handle, display name, and avatar for display.
- Content you create — captions, media you upload, and scheduling details, so we can publish them.
- Billing data — handled by our payment processor; we store your plan, subscription status, and a customer reference, not your card details.
- Usage & device data — basic analytics (pages, performance) collected only with your consent.
How we use it
- To operate the service — publishing, scheduling, and analytics.
- To process subscriptions and send transactional email.
- To secure accounts and prevent abuse.
- To improve the product (aggregated, consented analytics).
Service providers we share data with
We rely on trusted processors strictly to run Plumefy:
- Supabase — database, authentication, file storage.
- Vercel — hosting and (consented) analytics.
- Upload-Post — the social-posting aggregator that publishes to platforms on your behalf.
- Dodo Payments — subscription billing.
- Resend — transactional email delivery.
- Cloudflare — DNS, email routing, and bot protection (Turnstile).
- Google (Gemini API) — AI caption generation when you use that feature.
Cookies & analytics
Essential cookies keep you signed in. Analytics and performance tracking load only after you accept via our consent banner; you can decline and the app works normally.
Data retention & deletion
We keep your data while your account is active. You can export or delete your account and all associated data at any time from Settings → Account, or by emailing support@plumefy.com. Deletion removes your workspaces, posts, connected-account records, and profile.
Your rights
Depending on your region (e.g. GDPR/CCPA), you may have rights to access, correct, export, or delete your data, and to withdraw consent. We honor these — contact us to exercise them.
Changes
We'll update this page and the date above when this policy changes.