Privacy policy

Last updated 12 November 2026

Plugsight (plugsight.app) is operated by Nexgen Ventures LLC FZ (“we”, “us”), in the United Arab Emirates. This policy explains what we collect when you use Plugsight, how we use it and the choices you have. Questions: info@plugsight.app.

What Plugsight does

Plugsight lets you connect your own accounts (email, helpdesk, and marketing and analytics accounts) and make them available to AI assistants you choose, such as Claude or ChatGPT, through private endpoints (“MCP servers”) that you create and control.

Information we collect

• Your account: name, email address, a hashed password if you set one, and the identity you sign in with (Google or Microsoft).
• Connected accounts: for each account you connect, its email or login name, a label, and the credentials needed to reach it (OAuth refresh tokens, app passwords or API tokens). Credentials are encrypted at rest with AES-256-GCM.
• Settings: your MCP servers, which connections each includes, write-access switches, and which sites or ad accounts you hid.
• Activity records: a log of actions (sign-ins, settings changes, connections added or removed, and each AI tool call with its name and arguments) and, for emails you send through Plugsight, the recipients and subject. These records never include email bodies, attachments or report contents.
• Technical data: IP address and browser user agent for security, rate limiting and the activity log.

Data from your connected accounts

When you or your AI assistant ask, Plugsight reads data from your connected accounts and returns it to that assistant: for example emails from Gmail or Outlook, tickets from Zendesk, or reports from Google Ads, Microsoft Advertising, Google Search Console and Google Analytics. This data is fetched live and is not stored by Plugsight; we keep short-lived caches (up to an hour) of lists such as which sites and ad accounts a connection reaches. Marketing connections are read-only: Plugsight never creates, edits or pauses campaigns, bids or budgets. Email sending and helpdesk changes happen only when you have switched write access on and approved the specific action.

Google user data

Plugsight's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access Gmail, Google Ads, Search Console and Google Analytics data only to provide the features you use: showing it to you and the AI assistants you connect, at your request.
• We do not use Google user data for advertising, sell it, or use it to train or improve AI or machine-learning models.
• We do not allow humans to read Google user data, except with your explicit consent for a specific item, where needed for security or to comply with law, or in aggregated, anonymised form for operations.
• We transfer Google user data only to the AI assistants you connect, as needed to answer your requests, and as required by law.

AI assistants you connect

Data returned to an AI assistant is processed by that assistant's provider (for example Anthropic or OpenAI) under its own terms and privacy policy. You decide which assistants to connect and which accounts each can reach, and you can revoke access at any time.

How we use information

• To run Plugsight: sign-in, connecting accounts and answering your assistants' requests.
• To keep it secure: rate limits, fraud and abuse prevention, and the activity log shown to you.
• To send service emails such as sign-in links and password resets.

We do not sell personal data and do not use it for advertising.

Service providers

We use providers that process data on our behalf: Railway (hosting and database) and Resend (service emails). Google, Microsoft, Zendesk and the other services you connect provide the data you ask for, under your own agreements with them.

Retention and deletion

• Removing a connection deletes its stored credentials immediately.
• Deleting your account deletes your profile, connections, credentials, MCP servers and sessions.
• Activity records are kept for one year, then deleted automatically; after an account is deleted they keep only the email address it had, for security.
• You can also revoke Plugsight's access at any time in your Google account (myaccount.google.com/permissions) or Microsoft account.

Security

All traffic is encrypted with TLS. Stored credentials are encrypted with AES-256-GCM. Passwords and access keys are stored only as hashes. Access to production systems is restricted.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that apply to you, you can ask to access, correct, delete or receive a copy of your personal data, and to object to or restrict its processing. Most of this you can do yourself in the app; otherwise contact info@plugsight.app. We reply within 30 days.

Children

Plugsight is a business tool and is not intended for anyone under 18.

Changes

If we change this policy materially, we'll tell you by email or in the app before the change takes effect.

Contact

Nexgen Ventures LLC FZ, United Arab Emirates. Email: info@plugsight.app.