Plastorium

Privacy Policy

Last Updated: June 19, 2026

This privacy policy describes how we collect, use, and protect your personal information when you use Plastorium's AI visibility service.

Information We Collect

Information You Provide

When you use our service, we collect:

  • Email Address: When you submit a scan request or sign up for services
  • Website URL: The domain you want analyzed
  • Business Information: Company name, location, category (for our visibility services)
  • Contact Details: Name, phone number (optional)
  • Marketing Information: Budget, notes, preferences

Automatically Collected Information

We automatically collect:

  • Analytics Data: Page views, clicks, session duration
  • Device Information: Browser type, device type, screen resolution
  • Location Data: Approximate location (city-level, derived from IP)
  • Referral Information: How you arrived at our site
  • Client ID: Anonymous identifier stored in your browser

Data Retention

We retain different types of data for varying periods:

Email Address, Business Information: Retained until service completion or upon request for deletion. Deleted within 30 days of verified deletion request.
Website URLs Submitted for Analysis: Processed for analysis and not stored long-term. Temporary processing logs deleted within 90 days.
Analytics Data (Google Analytics): Retained for 26 months as per Google Analytics default policy. Automatically deleted after this period.
Device, Location, Referral Information: Anonymized and retained in aggregate form for analytics purposes. Individual session data deleted after 26 months.
Client ID (Browser): Stored in your browser until you clear browser data. Under your control at all times.
Server Logs & Backups: System logs retained for 90 days for security and debugging purposes. Backup copies retained for 30 days.

Retention Triggers: Data may be deleted earlier based on:

  • Your explicit deletion request
  • Account inactivity (no interaction for 36 months)
  • Legal requirements for data minimization
  • Service termination or cancellation

To request deletion of your data, contact privacy@plastorium.com with "Data Deletion Request" in the subject line.

Cookies and Tracking Technologies

Types of Cookies We Use

Essential Cookies (Always Active)

Required for the website to function: session management, security features, basic functionality. These cannot be disabled.

Analytics Cookies (Optional)

You can reject these at any time using our cookie banner. Yandex Metrica (including its session recording, Webvisor) is opt-in — it loads only after you explicitly accept analytics, and never if you reject or ignore the banner. Google Analytics and the Meta Pixel load by default in a consent-limited mode and stop collecting once you reject:

  • Google Analytics 4: _ga, _ga_* cookies (2 years)
  • Purpose: Track page views, user behavior, conversions
  • Privacy Configuration: Google Analytics 4 is configured with IP anonymization enabled. We do not send personally identifiable information (PII) such as email addresses, names, phone numbers, or company names to Google Analytics.
  • Yandex Metrica: _ym_uid, _ym_d, _ym_isad and related cookies (up to 1 year). Used to measure page views, traffic sources, and on-site behavior. Loaded only after you accept analytics in the cookie banner (opt-in); related cookies are cleared if you reject.
  • Meta (Facebook) Pixel: _fbp cookie (up to 90 days). Used to measure ad performance and conversions. If you reject analytics cookies it runs in a limited data mode; you can opt out fully via our cookie banner.

Note: While we collect PII through forms for service delivery, this information is stored separately and is not shared with Google Analytics.

Managing Cookies

You can control cookies through:

  • Our Cookie Banner: Accept or reject analytics cookies
  • Browser Settings: Block all cookies (may affect functionality)
  • Privacy Extensions: Use browser extensions to manage tracking

Third-Party Services

Google Analytics 4

Purpose: Web analytics and conversion tracking
Privacy Policy: https://policies.google.com/privacy

Airtable

Purpose: Data storage for leads and analytics
Privacy Policy: https://www.airtable.com/privacy

Yandex Metrica

Purpose: Web analytics — traffic sources, page views, and on-site behavior
Privacy Policy: https://yandex.com/legal/confidential/

Meta (Facebook) Pixel

Purpose: Advertising measurement and conversion tracking
Privacy Policy: https://www.facebook.com/privacy/policy/

Vercel Analytics

Purpose: Performance monitoring and analytics
Privacy Policy: https://vercel.com/legal/privacy-policy

Your Rights

GDPR Rights (EU)

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Portability: Export your data in a structured format
  • Right to Withdraw Consent: Revoke analytics consent anytime

CCPA Rights (California)

  • Right to Know: What personal information we collect
  • Right to Delete: Request deletion of your information
  • Right to Opt-Out: Opt-out of data "sales" (we don't sell data)

Data Security

We implement industry-standard security measures:

  • HTTPS encryption for all data transmission
  • API keys stored securely in environment variables
  • Regular security audits
  • Input validation on all forms

Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes may be communicated via email or a prominent notice on our website.

Contact Us

For privacy-related questions or to exercise your rights under GDPR/CCPA, please contact us through one of the following methods:

Privacy Contact Information

Subject Line: Include "Privacy Request" or "Data Request" in your email subject

What to Include in Your Request

  • Your full name and email address associated with our service
  • Specific request type (access, deletion, correction, opt-out, etc.)
  • Any relevant account information or identifiers
  • Verification: We may request additional information to verify your identity before processing requests

Response Time: We aim to respond within 48 hours for privacy inquiries and will fulfill verified requests within 30 days as required by GDPR/CCPA regulations.

Summary

  • What we collect: Email, website URL, analytics data
  • Why: To provide services and improve our platform
  • Your control: Accept/reject analytics, request data deletion
  • Security: Industry-standard encryption and protection

Your privacy matters to us. We only collect what we need and protect what we collect.