Privacy Policy

1. Who we are

Plupen is operated by Sindarin Machines Ltd. This Privacy Policy explains how we collect, use, store, share, retain, and delete personal data when you use Plupen, including when you sign in with Google.

2. Google user data we access

When you choose to sign in with Google, Plupen requests access only to non-sensitive Google OAuth scopes: openid, userinfo.email, and userinfo.profile.

This may allow us to access your Google account identifier, email address, email verification status, name, and profile picture. We do not request access to your Gmail, Google Drive, Google Calendar, contacts, payments, or other sensitive Google data.

3. How we use Google user data

We use Google user data only to authenticate you, create or connect your Plupen account, identify your account in our systems, communicate with you about your account, prevent abuse, and protect the security of Plupen.

4. Data sharing

We do not sell, rent, trade, or otherwise share Google user data with third parties for their own purposes. Google user data is used only within the secure systems required to provide Plupen authentication and account functionality.

We do not link Google user data to your KYC data. If disclosure is ever required by a binding legal obligation, we review the request, limit disclosure to the minimum required, and prioritize the security and privacy of our users.

5. Data storage and protection

We store personal data in secure systems with administrative, technical, and organizational safeguards designed to protect it from unauthorized access, loss, misuse, alteration, or disclosure.

We use measures such as encrypted connections, access controls, least-privilege permissions, monitoring, and secure infrastructure practices. No method of transmission or storage is completely secure, but we work to protect your data using appropriate safeguards.

6. Data retention and deletion

We retain Google user data and other account data for as long as needed to provide Plupen, maintain your account, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce our agreements.

You may request deletion of your account or personal data by using the “Delete Account” functionality within the app. After you submit the request, your data associated with your account will be automatically deleted, except information we need to retain certain information for legal, security, fraud prevention, or financial compliance reasons.

7. Your choices and rights

You can choose not to sign in with Google where alternative sign-in methods are available. You can also revoke Plupen's access to your Google account from your Google Account permissions page.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data. To exercise these rights, contact us at [email protected].

8. Contact us

If you have questions about this Privacy Policy or how we handle Google user data, contact Sindarin Machines Ltd at [email protected].