Privacy Policy

Last updated on February 14th, 2019

The Plug Privacy Policy explains how The Plug and parent company Real Labs Technology, Inc collects, uses, shares, and protects your information in relation to The Plug mobile and web services (“Service”). By using The Plug Service, you understand and agree to the terms and conditions of The Plug Privacy Policy and our Terms of Use (https://plugco.in/terms).

Information Collection

We may collect and use the following types of information:

Account, Profile, and Contact information

When you create a The Plug account, we store the username, phone_number, and e-mail address you registered with the account. We also encourage our users to provide us with additional information such as a first and last name. This optional information allows us to better respond to your requests, and makes it easier for other users of our Service to connect with you on The Plug. Any profile information that you provide us with may be updated or modified at any time - please contact us to do so.

We may use the contact information you provide us with to help connect you with other The Plug users.

Please note that all personal information retrieved is stored primarily in a cloud format via Amazon Web Services please visit their Privacy Policy here: https://aws.amazon.com/privacy/ and maintained with the utmost of care and security protocols.

Device information

We may access, collect, and/or remotely store miscellaneous device information, such as your device’s unique identifier, operating system, and mobile network information, in order to help us to provide better support for you.

Log data

When you use our Services, we automatically record log data created by your use of the Services. This data may include your Internet Protocol (IP) address, operating system and browser type, your web request, number of clicks, pages and links visited, search terms, cookie information, and other such information regarding how you interact with our Services.

The Plug uses log data in order to measure and improve its Services.

Information Usage and Sharing

We use information that you provide us with to:

We may disclose your information to such third parties if we are under a duty to do so in order to comply with any legal obligation (such as a search warrant, court order, or a subpoena). In case a part of or the whole set of The Plug assets is sold or transferred to another organization, your information may be among the items sold or transferred. In addition, we may engage third party service providers to facilitate normal operation of our Services, and we may share some of your information with them, subject to the confidentiality obligations consistent in this Policy.

The information provided to us can be modified by you through tools and settings available as part of our Services. You can also permanently delete your The Plug account by contacting us.

You can contact our Privacy Officer with any questions or concerns via email: hi@plugco.in

Data Retention

If you'd like us to delete Content that you have provided via Services, please contact us and we will respond in a reasonable time and process the request in accordance with our Terms of Use.

Certain information pertaining to your use of our Services may be used and disclosed, during and after the term of the Services, in aggregate. We also may use this information internally to conduct benchmark analysis or industry-based results pertaining to our Services. This aggregate information cannot be used to personally identify you, your business, or your computer.

Children’s Privacy

The Plug Services and content are not directed at persons under the age of 13, and we knowingly do not allow such persons to register for the Service. If you become aware that your child has provided us with personal information without your consent, please contact us, and we will take steps to remove such information and terminate the child’s account.

General Data Protection Regulations

Any customers that are citizens of the European Union should note that we seek to adhere to the General Data Protection Regulations [GDPR] as determined by the European Union Legislator and the Court of Justice of the European Union through EU Directive 95/46/EC. These regulations are applicable to you whether or not you are currently living in an EU Member State. The guidelines of the GDPR require the following:

  1. That we maintain any personally identifiable information retrieved by you in a secure manner and hosted with the utmost standard of care.
  2. We reasonably deem that our servers and those of third parties maintain a high standard of care with storage of your personally identifiable information.
  3. We have procedures in place to triage in case of a breach whereby you and authorities are notified within a 48 hour period.
  4. You have the authority to request that we modify the amount of your personally identifiable information in our custody.
  5. You have the ability to audit and/or visit our facilities with or without legal representation under reasonable notice to our offices.

Changes to our Policy

We may modify or update this Privacy Policy from time to time. Even though we will provide forms of notice as appropriate under the circumstances, please review the Policy directly periodically.

Your continued use of The Plug or the Service after any modification to this Privacy Policy will constitute your acceptance of such modification. The most current version of the policy will always be available at https://plugco.in/privacy.

Once again, any questions or concerns can be directed to our Privacy Officer via email at: hi@plugco.in

Definitions

The following terms shall have the meanings set out below: “Affiliate” means any entity which is controlled by, controls or is in common control with a Party. “Control,” for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.

“Data Controller” means the entity which determines the purposes and means of the Processing of Personal Data.

“Data Processor” means the entity which Processes Personal Data on behalf of the Data Controller.

“Data Protection Laws” means the laws and regulations of the European Union which are applicable to the Processing of Personal Data under the Agreement.

“Data Subject” means the individual to whom Personal Data relates.

“Personal Data” means any information relating to an identified or identifiable person.

“Processing” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction (“Process”, “Processes” and “Processed” shall have the same meaning).

“Security Breach” has the meaning set forth in Section 7 of this DPA.

“Services” means The Plug’s ad network enabling the purchase and sale of mobile advertising.

“Sub-processor” means any Data Processor engaged by Processor.

Processing of User Persona Data

  1. The Parties agree that with regard to the Processing of Personal Data, User is the Data Controller and The Plug is the Data Processor.
  2. User shall, in its use or receipt of the Services, process Personal Data in accordance with the requirements of the Data Protection Laws and User will ensure that its instructions for the Processing of Personal Data comply with the Data Protection Laws. User shall ensure that it has received valid consent from Data Subjects as required by Data Protection Laws and, upon The Plug’s request, will provide The Plug with written evidence of such consent, including without limitation, the date of the consent and the consent language presented to the Data Subject. User shall have sole responsibility for the accuracy, quality, and legality of Personal Data and the means by which User obtained the Personal Data.
  3. During the term of the Agreement, The Plug shall only Process Personal Data on behalf of and in accordance with the Agreement and User’s instructions. User instructs The Plug to Process Personal Data for the following purposes: (i) Processing in accordance with the Agreement; and (ii) Processing to comply with other reasonable instructions provided by User where such instructions are consistent with the terms of the Agreement.
  4. The subject matter of the Processing is the performance of the Services and the Processing shall be carried out for the duration of the Agreement. The types of Personal Data and categories of Data Subjects Processed under this DPA may include the following: - Types of Personal Data: (a) end-user information consisting of identifier for advertise consent except to confirm that the request relates to User. The Plug shall provide User with commercially reasonable cooperation and assistance in relation to the handling of a Data Subject’s request, to the extent legally permitted and to the extent User does not have access to such Personal Data through its use or receipt of the Services.

Processor Personnel

The Plug shall ensure that its personnel engaged in the Processing of Personal Data are informed of the confidential nature of the Personal Data and are subject to obligations of confidentiality.

The Plug shall ensure that access to Personal Data is limited to those personnel who require such access to perform the Services.

The Plug will appoint a data protection officer where such appointment is required by Data Protection Laws.

Sub-processors

User acknowledges and agrees that (i) The Plug Affiliates may be retained as Sub-processors; and (ii) The Plug may engage third-party Sub-processors in connection with the Services. Any such Sub-processors will be permitted to obtain Personal Data only to deliver the services The Plug has retained them to provide, and are prohibited from using Personal Data for any other purpose. The Plug agrees that any agreement with a Sub-processor will include substantially the same data protection obligations as set out in this DPA.

The Plug may continue to use those Sub-processors already engaged by The Plug or any The Plug Affiliate as at the date of this DPA.

The Plug shall give User notice of the appointment of any new Sub-processor via The Plug’s platform, via email or as otherwise generally made available to The Plug’s advertisers and publishers, including applicable details of the Processing to be undertaken by the Sub-processor. If, within 10 days of receipt of that notice, User notifies The Plug in writing of any objections (on reasonable grounds) to the proposed appointment, The Plug shall not appoint that proposed Sub-processor until reasonable steps have been taken to address the objections raised by the User and the User has been provided with a reasonable written explanation of the steps taken.

Security; Audit Rights; Privacy Impact Assessments

To request an audit a user must submit a detailed audit plan at least four (4) weeks in advance of the proposed audit date describing the proposed scope, duration, and start date of the audit. Audit requests must be sent to legal@reallabs.io with a copy to dataprotection@reallabs.io. The audit must be conducted during regular business hours, subject to obligations of confidentiality and The Plug’s policies, and may not unreasonably interfere with The Plug’s business activities. Any audits are at the User's expense.

Any request for The Plug to provide assistance with an audit is considered a separate service if such audit assistance requires the use of resources different from or in addition to those required by law. Before the commencement of any such audit, User and The Plug shall mutually agree upon the scope, timing, and duration of the audit in addition to the reimbursement rate for which User shall be responsible. All reimbursement rates shall be reasonable, taking into account the resources expended by The Plug. User shall promptly notify The Plug with information regarding any non-compliance discovered during the course of an audit.

The Plug will reasonably cooperate with User, at User’s expense, where User is conducting a privacy impact assessment.

Security Breach Management and Notification

If The Plug becomes aware of any unlawful access to any Personal Data stored on The Plug’s equipment or in The Plug’s facilities, or unauthorized access to such equipment or facilities resulting in material loss, disclosure, or alteration of Personal Data (“Security Breach”), The Plug will promptly: (i) notify User of the Security Breach; (ii) investigate the Security Breach and provide User with information about the Security Breach; and (iii) take reasonable steps to mitigate the effects and to minimize any damage resulting from the Security Breach.

User agrees that an unsuccessful Security Breach attempt will not be subject to this Section. An unsuccessful Security Breach attempt is one that results in no unauthorized access to Personal Data or to any of The Plug’s equipment or facilities storing Personal Data, and may include, without limitation, pings and other broadcast attacks on firewalls or edge servers, port scans, unsuccessful log-on attempts, denial of service attacks, or similar incidents.

Notification(s) of Security Breaches, if any, will be delivered to one or more of User’s business, technical or administrative contacts by any means The Plug selects, including via email. It is User’s sole responsibility to ensure it maintains accurate contact information on The Plug’s support systems at all times.

Return and Deletion of Personal Data

The Plug shall return Personal Data to User, to the extent possible, and/or delete Personal Data in accordance with The Plug’s data retention policies which adhere to requirements of Data Protection Laws, and in a manner consistent with the terms of the Agreement.