Privacy Policy

Last updated 28 October 2026

Plink is operated by Plinkgrid, Inc. (in formation), of 1114 Cadillac Ct, Milpitas, CA 95035, USA ("Plink," "we," "us," or "our"). This policy explains how we collect, use, disclose, and keep personal information when you visit plink.email, use our messaging service, receive an email sent through Plink, contact us, or connect an application or AI assistant to Plink.

For privacy questions or requests, contact privacy@plink.email.

1. What this policy covers

This policy covers our website, accounts, messaging platform, APIs, and integrations that link to it. Features vary by plan. References to a feature describe processing when that feature is used.

We distinguish between information we use to run our own business and information we process for customers:

• Our own business information: account, billing, website, support, security, and business contact information. We decide the purposes for this processing and act as a controller or business where those terms apply.
• Customer messaging information: contact lists, message content, replies, and related records supplied by or collected for a customer. We process this information on that customer's instructions, as a processor or service provider. Customers are responsible for their own privacy notices and lawful instructions. Where we use information for our own security, fraud prevention, or legal obligations, our role depends on that processing and the applicable law.

If a customer sends you an email through Plink, that customer decides why you were contacted and what information is used. Their privacy notice applies to their activities. This policy explains Plink's processing and does not replace that notice.

2. Information we collect

We receive information directly from you, from your organization, from people who reply to or email a Plink address, from connected services, and from service providers. We also derive information from messages and events, such as a reply's apparent intent or a suggested send time. These inferences can be wrong.

3. How we use information

We use information to provide and run the service; sign users in; carry out authorized messaging work; take payment; provide support; keep the service reliable; investigate misuse; protect users and recipients; comply with legal obligations; and enforce our agreements.

Messaging work can include writing emails, scheduling, delivery, organizing replies, classifying replies, honoring opt-outs, and reporting. We also use account contact information to send service notices and, where permitted, information about Plink. You can opt out of our marketing email without stopping essential account or security notices.

We do not sell customer message content, use it for advertising, or use it to train AI models.

4. AI processing and connected assistants

Plink uses AI to write emails from a customer's brief, classify replies, draft replies for a person to approve, summarize conversations, and tag documents. To do this, the relevant content is sent to an AI provider. Depending on the task, this can include the brief, message text, recipient names and attributes, replies, and passages from the customer's documents.

We use these AI providers:

• MiniMax and Anthropic, for writing and classification.
• Voyage AI, to index the documents a customer uploads so Plink can find relevant passages.

A customer can instead connect its own AI provider account. Content for that customer then goes to the provider it chose, under its own agreement with that provider.

Model training. Plink does not train or fine-tune AI models on customer content. We send content to our providers under their standard API terms. AI results are suggestions and estimates, not verified facts.

Connected assistants. A customer can connect an AI assistant to Plink through our MCP integration. The assistant can then request information or actions within the access the customer granted, and results, such as message previews, recipient details, status, or replies, are returned to it. Information already returned to that assistant is governed by its provider's terms and privacy practices; disconnecting does not retrieve copies already shared. An assistant cannot send a campaign to real recipients without a person approving it in Plink.

5. Email tracking, cookies and analytics

Open and click tracking. Emails sent through Plink include a small image that records when the email is opened, and links pass through our servers to record clicks. This is on for every customer, and customers cannot turn it off. When the image or a link is loaded, our mail server records the IP address, browser and device details, and the time. We keep these open and click details for 60 days.

Opens and clicks do not reliably show that a person read an email. Some mail apps load images automatically or through a proxy, and security scanners follow links. To stop receiving marketing email from a sender, use the unsubscribe link in that email.

Cookies. Plink's website and dashboard do not set cookies. The dashboard keeps your sign-in session and some display settings in your browser's local storage. The session is removed when you sign out; the display settings stay until you clear your browser data.

Analytics. Our public website uses Vercel Web Analytics, which counts page visits without cookies and without identifying you. The signed-in dashboard does not use it.

Browser privacy signals. We do not sell or share personal information, so we do not change our behavior in response to Do Not Track or Global Privacy Control signals.

6. When we disclose information

We disclose information only as needed to:

• Service providers: companies that host, store, deliver, or process information for us, listed below. They receive the information relevant to their work.
• Your organization: administrators and authorized users can access information according to account permissions.
• Recipients and connected services: sending a message discloses its content and sender details to the recipient and the systems that deliver it. Integrations a customer connects receive the information needed for the requested work.
• Legal and security purposes: where required by law or reasonably necessary to respond to valid legal process, protect rights and safety, investigate fraud, or prevent abuse.
• Business transactions: in a merger, acquisition, financing, reorganization, or sale of assets, subject to confidentiality and legal safeguards.
• Your direction: when you ask us to disclose information.

Sale and sharing. Plink does not sell personal information and does not share it for cross-context behavioral advertising.

Service providers we use:

We update this list when it changes.

7. How long we keep information

Closed accounts. When an account is closed, we delete the organization's data from our active systems within 7 days. Copies in mail server logs and backups expire within 60 days.

Opt-out records. When someone unsubscribes, we keep a record of the address so we do not email it again. When someone's data is erased, we keep only a one-way code derived from the address, so we can block it from being added again without keeping the address itself.

8. Security

We protect information with these measures:

• Connections to our website, dashboard, and API use HTTPS.
• Passwords and API keys are stored only as one-way hashes.
• AI provider keys that customers connect are encrypted.
• Access inside an organization is controlled by roles.
• Webhook deliveries to customers are signed so customers can check they came from Plink.

No transmission or storage method is completely secure. If you suspect unauthorized access to your account, or you find a security problem, contact security@plink.email. We give legally required notice of security incidents.

9. Where information is processed

Plink's servers, database, and mail servers are in the United States. Some of our AI providers may process information outside the United States. Privacy protections differ between countries. Where the law requires it, we use legally recognized safeguards for international transfers. A data processing agreement may describe further protections for customer information.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; to restrict or object to processing; to withdraw consent; to opt out of certain processing; or to appeal a decision about your request. These rights have legal conditions and exceptions.

Send requests to privacy@plink.email. You do not need an account to make a request. We may ask for information to verify your identity, or an authorized agent's authority. We respond within 30 days of verifying a request, or sooner where the law requires. We do not discriminate against anyone for exercising privacy rights.

If you received an email sent through Plink. The organization that emailed you controls that information, so you can ask it directly. You can also ask us. When a person's data is erased, we delete their replies and engagement records, and we remove their address, subject lines, and message text from the emails we keep for statistics. We keep the one-way code described in section 7.

To stop receiving a customer's marketing email, use the unsubscribe link in that email. Unsubscribing is not the same as erasure: we keep a record of the address so the opt-out is honored.

California residents

Where the California Consumer Privacy Act applies, you have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and to opt out of its sale or sharing. An authorized agent may make a request for you.

In the past 12 months we have collected these categories of personal information: identifiers (such as names, email addresses, and IP addresses); commercial information (such as plans and billing records); internet activity (such as website visits and email opens and clicks); and inferences (such as a reply's apparent intent). The sources, purposes, and recipients are described in sections 2, 3, and 6. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about anyone.

European Economic Area, United Kingdom, and Switzerland

Where these data protection laws apply, our legal basis depends on the purpose. For your account, it is performing our contract with you. For security, fraud prevention, and improving the service, it is our legitimate interest in running and protecting the business. For legal records, it is compliance with a legal obligation. For our marketing email, it is your consent where the law requires it. Customer messaging information is processed on the customer's instructions, under the customer's own legal basis.

You may complain to your data protection authority. You can withdraw consent at any time, without affecting processing that took place before.

11. Children

Plink is intended for adults and organizations. We do not knowingly collect personal information directly from children under 13. If you believe a child has given us information, contact privacy@plink.email.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. We publish the updated version and change the date at the top. For material changes, we give additional notice and obtain consent where required.

13. Contact us

Plinkgrid, Inc. (in formation)
1114 Cadillac Ct, Milpitas, CA 95035, USA

• Privacy: privacy@plink.email
• Support: support@plink.email
• Security: security@plink.email

See also our Terms of Service.