Plug-In We designed Plug-In with AI so that each user's data stays their own. This page describes the safeguards currently in place.
Data isolation
Every record in our database is tied to the account that created it and protected by row-level access rules enforced by the database itself, so one customer's learning progress, assistant configuration, and knowledge sources are never readable by another.
Authentication
- Email/password sign-in with hashed passwords, plus Google sign-in.
- Passwords are checked against known breach lists at sign-up and on change.
- Password reset links are single-use and time-limited.
Transport and keys
- All traffic is encrypted in transit with TLS.
- AI model calls are made from our servers; API keys are never sent to the browser.
Your controls
You can export or permanently delete all of your data from Settings at any time.
Reporting a vulnerability
If you believe you have found a security issue, please contact the site operator using the details published on this site. We appreciate responsible disclosure and will respond as quickly as we can.