1. Who is responsible
Pliget operates Pliget and is responsible for the processing described in this policy where we determine the purposes and means of processing. Contact: [email protected]. Full legal operator details should be read together with our Imprint.
2. Information we process
Depending on how you use the service, we may process account information such as your name and email address; authentication and security information; workspace, website and widget configuration; subscription and entitlement information; support communications; technical information such as IP address, browser, device, request logs and timestamps; and usage or analytics events needed to operate and improve the service.
If you configure a widget with customer content, reviews, submissions or data from an external service, that content may also be processed so the widget can be stored, synchronized, rendered and delivered.
A Comments widget may let visitors sign in with Google or Facebook. If a visitor chooses this option, Pliget verifies the provider account and receives its display name, plus the email address only when the widget requires it and the provider returns it. The provider account identifier is not stored with comments. This verifies a comment author without creating a Pliget account; the provider handles its own authentication under its privacy terms.
3. Why we process information
We process information to create and secure accounts, provide the dashboard and widgets, save configuration, deliver embeds, prevent abuse, troubleshoot errors, provide support, administer subscriptions, understand product performance and comply with legal obligations. Where GDPR applies, the legal basis may include performance of a contract, legitimate interests, consent where required, and compliance with legal obligations.
4. Embedded widgets and customer responsibility
When a customer places a Pliget widget on their website, the customer controls why that widget is used and what customer-provided content is displayed. Depending on the feature and the data involved, the customer may be a controller and Pliget may act as a processor or service provider. Customers are responsible for providing appropriate notices and obtaining any consent required for their own website and widget configuration. The Audio Player stores the current track, listening position, volume/mute state and playback speed in browser storage on the embedding site so it can restore a paused session; this playback state is not sent to Pliget.
5. Cookies and authentication
We may use cookies or similar browser storage that are necessary for authentication, session continuity, security, language preferences and core service functionality. Optional analytics or marketing technologies, if introduced, should only be used in accordance with applicable consent requirements and this policy will be updated accordingly.
6. Service providers
We may use infrastructure, database, content-delivery, authentication, payment, email, monitoring and support providers to operate the service. They receive information only as needed to perform their services and are subject to appropriate contractual and security obligations. Payment providers may process payment information under their own privacy terms; we do not need to store complete payment-card details ourselves.
7. International transfers
Some providers may process information outside your country. Where required, we use recognized transfer mechanisms and safeguards, such as adequacy decisions or standard contractual clauses.
8. Retention
We keep information for as long as needed to provide the service, maintain security, resolve disputes and meet legal or accounting obligations. Retention periods vary by data category. Account and widget data may be deleted or anonymized after an account is closed, subject to backups and legally required retention.
Customer operational history is retained according to the selected plan and the limits published on the Pricing page. A downgrade that reduces covered history starts a 60-day grace period and produces a dashboard warning with the deletion deadline before eligible history is permanently deleted. Upgrading during the grace period can cancel pending deletion for data covered again; physically deleted data is not restored by a later upgrade. Temporary technical records may have shorter server-level retention, while account, billing, Credit, security, fraud-prevention, legal and audit records can be retained separately where required.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of certain information, and withdraw consent where processing relies on consent. You may also have the right to complain to a competent data-protection authority. Requests can be sent to [email protected]; we may need to verify your identity.
10. Security
We use technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure and loss. No online service can guarantee absolute security.
11. Children
The service is intended for businesses and people able to enter into a binding agreement. It is not designed for children to create accounts independently.
12. Changes
We may update this policy as the product, providers or legal requirements change. The current version and its update date will be published on this page.