Privacy Policy

Matterz Studio — a SASU registered with the Paris trade register under no. B 943108688, registered office 6 rue d'Armaillé, 75017 Paris, France — operates Plume (plumeos.app) and is the data controller for the information described here. Contact: hello@plumeos.app.

Account details (name, email) via our authentication provider; the brand information and content you create; billing details, including your company’s name and its SIREN, VAT or registration number; and technical logs (e.g. errors, usage). If you connect them, we also receive data from LinkedIn, Meta or Google (see Connected platforms below).

We share data only with the providers required to run Plume: Vercel (application hosting), Clerk (authentication), Supabase (database & file storage), Stripe (payments), Anthropic (AI text generation), Resend (transactional email), Microlink (site preview during onboarding), Sentry (error monitoring), PostHog (audience measurement, hosted in the European Union), and Google (Tag Manager and Analytics, on our public website only and after consent). Each processes data on our behalf under its own terms. Where these providers process data outside the European Union, the transfer relies on the EU–US Data Privacy Framework where they are certified under it, or on the European Commission’s standard contractual clauses.

fal.ai (Features & Labels, Inc., United States) generates and edits the Studio’s visuals. It passes the images on to the provider of the model used, Google in particular. The product photos and the instructions needed for each visual are sent to it, without your account data. This transfer outside the European Union relies on the European Commission’s standard contractual clauses, provided for in fal’s data processing addendum. Under its terms, fal uses your images only to provide the service; it may produce anonymised or aggregated usage data, which it may use to improve its services and models.

When a member of your organization connects a platform in Settings, Integrations, Plume receives only what that connection needs. LinkedIn: an access token and your member identifier and name, used to publish the posts you approve on your behalf. Meta (Facebook Pages and Instagram): an access token for each Page you manage, the Page's name and identifier, and the Instagram business account linked to it, used to publish, update or remove the posts you choose. Google Search Console (read-only, Plume can never change anything in it): an access token, the list of your verified properties, and daily figures for your site's pages (page address, clicks, impressions, average position), used to show how your content performs. When Plume publishes a post, it keeps the post's identifier and link so that you can update or remove it later. When post statistics become available, Plume will read aggregate figures (such as impressions, reactions, comments and shares) for the posts published through Plume, never the identity of the people who reacted. Tokens are encrypted at rest, and all of this data is stored in our database, hosted by Supabase in the European Union. It is used only to provide these features to your organization: it is never sold, never used for advertising, and never used to train AI models. Plume's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. How long we keep it: for as long as the platform stays connected. When you disconnect it, everything received from it is deleted at once: tokens, account details, post identifiers and links, statistics and Search Console figures. Post statistics are never kept more than 12 months.

To provide and improve the service, generate content in your brand voice, process payments, send service emails, and keep the platform secure. We do not sell your personal data.

We retain your data while your account is active and as long as needed to meet our legal obligations. Under the GDPR you may access, correct, export, delete, or object to the processing of your data — including via in-app account deletion. Email hello@plumeos.app to exercise these rights, or lodge a complaint with the CNIL.

You can have the data Plume holds from LinkedIn, Meta or Google deleted at any time, in three ways. 1. In Plume: Settings, Integrations, Disconnect. Everything received from that platform is deleted from our database at once: tokens, account details, post identifiers and links, statistics and Search Console figures. Deleting your organization (Settings, Delete organization) deletes all of its data. 2. On the platform: you can revoke Plume's access from your LinkedIn settings (Data privacy, Permitted services), your Facebook settings (Business integrations) or your Google Account (Third-party apps and services). The token stops working at once; to erase the copy we hold, disconnect in Plume or write to us. 3. By email, including if you can no longer sign in to Plume: write to hello@plumeos.app from the address linked to your account, naming the platform concerned. We delete everything received from that platform, post identifiers and statistics included, within 30 days, and confirm by email. Deleting data in Plume does not remove posts already published on the platform: remove them from Plume before disconnecting, or directly on the platform.

A public authority may ask us for data about you. We handle every such request under four rules, without exception. We first check that it is lawful: its legal basis, the authority of whoever issued it, and its form. We challenge, through the legal means available to us, any request we consider unlawful, excessive or insufficiently grounded. Where we must comply, we disclose only the strict minimum required, never broader than the request itself. And we record every request in an internal register: who issued it, when, on what legal basis, what we answered, and who decided. Unless the law forbids us, we tell you when an authority has asked for your data.

The free trial is limited to one per person. To enforce this we store, at the moment a trial is granted, your account identifier together with a cryptographic fingerprint (SHA-256) of your email address — never the address itself. The fingerprint cannot be turned back into your address: it only answers whether a trial has already been granted. This record is kept beyond the deletion of your account, since otherwise the limit could be bypassed by deleting and recreating one. Legal basis: legitimate interest in preventing fraud (GDPR art. 6(1)(f)). Email hello@plumeos.app with any question about it.

Plume uses strictly necessary cookies for authentication (Clerk) and payments (Stripe), plus audience-measurement cookies (PostHog, hosted in the European Union, and Google Analytics on our public website) which are only set after you consent. No advertising cookie is set today. Every tracker is listed, and your choice can be changed, in our Cookie Policy.

Questions about privacy: hello@plumeos.app.