Privacy Policy
Last updated: 9 November 2026
This policy explains how MATRY LABS ("we", "us") handles personal data when you use Plum Sender (the "Service"). MATRY LABS is the data controller for your account data. For the contacts you import and email, you are the controller and we act as your processor. This policy should be read with our Terms of Service.
1. Data we collect
- Account data: your name, email address and profile picture from Google sign-in, and profile details you add.
- Google data you authorise: rows from the spreadsheet tab you select, the Gmail send-as addresses you can use, and messages in the threads of emails sent through the Service (to detect replies).
- Your content: contacts, custom fields, sequences, email copy and settings.
- Activity data: send logs, delivery errors and reply status.
- Billing data: plan and payment status. Card details are handled by Stripe and never stored by us.
- Technical data: basic logs such as IP address, browser type and error reports, used for security and reliability.
2. How we use data
- To run the Service: import leads, send your sequences from your Gmail, stop sequences on reply, and show your dashboard.
- To manage subscriptions, billing and support.
- To keep the Service secure, prevent abuse and fix problems.
- To meet legal obligations.
3. Google API data and Limited Use
Plum Sender's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google user data is used only to provide and improve the user-facing features you request.
- We do not sell Google user data or transfer it to third parties, except as needed to run the Service, to comply with law, or as part of a merger with your notice.
- We do not use Google user data for advertising, and we do not use it to train artificial intelligence or machine learning models.
- No person reads your Google data unless you ask us to (for support), it is needed for security or legal reasons, or it is anonymised.
4. Legal bases (GDPR)
We process account and billing data to perform our contract with you, security and service-improvement data on our legitimate interests, and legal records to comply with the law. Where we rely on consent, you can withdraw it at any time.
5. Who processes data for us
- Cloud hosting and database (Lovable Cloud and its infrastructure providers) to store and run the Service.
- Google to sign you in and to read Sheets and send Gmail on your behalf.
- Stripe to process payments and taxes.
6. International transfers
Some providers may process data outside the European Economic Area. Where they do, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses.
7. Retention
We keep your data while your account is active. When you delete your account, we delete your content and Google data within 30 days, except billing records we must keep by law (usually up to 10 years) and limited security logs.
8. Security
Data is encrypted in transit, access is limited to each account's own records, and Google access can be revoked by you at any time from your Google Account settings.
9. Your rights
You can access, correct, export or delete your data, object to or restrict processing, and complain to your data protection authority (in France, the CNIL). Contacts you have emailed who want to exercise their rights should contact you as the sender; we will help you respond.
10. Cookies
We use only essential storage needed to keep you signed in and the Service working. We do not use advertising cookies.
11. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data.
12. Changes and contact
We will notify you of material changes to this policy. Questions or requests: MATRY LABS, info@matrylabs.com.