Privacy Policy

This Privacy Policy describes how PlugMate ("we", "us", or "our") collects, uses, stores, and shares information when you use PlugMate at https://www.myplugmate.com and related services (the "Services").

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

Questions or concerns? Contact us at support@myplugmate.com.

We collect information you provide (such as account credentials and CV content), information generated through your use of the Services (such as usage and security logs), and limited payment-related metadata from our payment partners.

We use your information to provide and improve the Services, secure accounts, process subscriptions, communicate with you, and comply with law.

We may share information with service providers that help us operate the Services (for example hosting, email delivery, payments, and AI processing when you request AI features).

We apply organisational and technical safeguards, but no online service can guarantee absolute security.

Depending on where you live, you may have rights to access, correct, or delete certain personal information. Contact us to exercise those rights.

Account information: email address, password (stored in hashed form on our servers), and authentication-related data.

CV and profile content: names, contact details, employment history, education, skills, summaries, and other fields you enter in the CV builder, including generated PDFs and draft versions.

Subscription and billing: plan selection, subscription status, and payment references. Card details are handled by PayFast; we do not store full payment card numbers on our servers.

Usage and technical data: IP address, browser or device type, request metadata (such as client identifiers sent with API requests), and logs needed for security, analytics, and troubleshooting.

Communications: messages you send to support and transactional emails (such as password reset messages).

To create and manage your account and authenticate you.

To save, display, and export your CV content and provide subscription features you request.

To process payments and manage subscriptions, including renewals and cancellations.

To send service-related communications, including security alerts and password reset emails.

To provide AI-assisted drafting when you explicitly request those features.

To protect the Services, detect abuse, enforce our terms, and comply with legal obligations.

To understand usage trends and improve reliability and product experience.

When you use AI-assisted features (such as professional summary or employment duties suggestions), we send relevant CV context to our API and third-party AI providers to generate responses.

We use AI to assist you, not to make automated decisions about your employment prospects. You choose whether to accept or edit AI suggestions.

We do not sell your personal data to AI vendors. Prompts and responses are processed only to deliver the feature you requested and to operate the Service.

Service providers: hosting infrastructure, email delivery, payment processing (PayFast), and AI providers that support features you use.

Legal and safety: when required by law, court order, or to protect rights, safety, and security of users and the public.

Business transfers: in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

We do not sell your personal information to third parties for their independent marketing purposes.

We retain personal information for as long as your account is active or as needed to provide the Services.

We may retain certain records after account closure where required for legal, tax, audit, fraud prevention, or dispute resolution purposes.

You may request deletion of your account or certain data by contacting us. Some information may be retained where we have a lawful basis to do so.

We use administrative, technical, and organisational measures designed to protect personal information, including encrypted transport (HTTPS), access controls, and hashed passwords.

No method of transmission or storage is completely secure. We cannot guarantee that unauthorised parties will never defeat our safeguards.

You are responsible for keeping your password confidential and notifying us if you suspect unauthorised access to your account.

Depending on your location, you may have the right to request access to, correction of, or deletion of personal information we hold about you.

You may object to or restrict certain processing, or request portability of data you provided, where applicable law provides those rights.

To exercise your rights, contact support@myplugmate.com. We will respond in line with applicable law.

If you are in a region with a data protection authority, you may also have the right to lodge a complaint with that authority.

We may process and store information in countries other than where you live. Those countries may have different data protection laws.

Where required, we take steps designed to ensure appropriate safeguards for cross-border transfers.

The Services are not directed to children under 13. We do not knowingly collect personal information from children under that age without appropriate parental consent.

If you believe we have collected information from a child under 13, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision.

If changes are material, we will provide notice where appropriate. Continued use after changes take effect means you accept the updated policy.

For privacy questions or requests, email support@myplugmate.com.