Privacy policy

DB Events BV, Zeedijk 133 bus 00.02, 8400 Ostend, Belgium, VAT BE 0891.225.112, is the controller for personal data on ploffo.com.

Questions about your data: marketing@defyandbrandevents.be, or by post to the address above.

Contact form. Name, email, company (if given) and your message, so we can reply. Legal basis: our legitimate interest in answering questions, or steps prior to a contract if you ask about Ploffo.

App account. Name, email, company and billing details, and the data you put into Ploffo, so we can deliver the service. Legal basis: performance of the contract.

Approval links. Anyone who opens an approval link leaves an approval or a change request. We keep that approval with its date and time, and the name or email the approver provides. Legal basis: performance of the contract with our customer.

The reply agent. Comments and messages that arrive on your channels go to an AI model to prepare one reply, and nowhere else. We do not use them to train a model. If you use your own OpenAI or Anthropic key, no message passes through us to an AI model: the processing happens on your account, under your terms. Legal basis: performance of the contract.

Analytics. Only if you allow it in the cookie banner: anonymous visit counts. Legal basis: your consent.

Technical logs. IP address, time and requested page, for security and debugging. Legal basis: our legitimate interest.

To make Ploffo work we rely on service providers. They process data solely on our instructions, and a data processing agreement is in place with each of them.

• Hosting and infrastructure — the website, the app, and storage for images and documents
• Email — the messages Ploffo sends, such as a sign-off request or an alert
• Payments and invoicing
• Error reporting — technical alerts when something fails
• The AI model behind the reply agent, unless you use your own key; then nothing passes through us
• The social platforms themselves (LinkedIn, Meta, TikTok and the rest), for what you publish there — under their own terms

Our providers are located in the European Economic Area, or process data under safeguards recognised by the European Commission.

Are you a customer? The full list, with name and location, is in the data processing agreement, along with our commitment to notify you in advance when one is added.

We don’t sell data or share it for advertising.

• Account and workspace data: the term of the agreement, plus 30 days.
• Scheduled and published posts: the term of the agreement, plus 12 months.
• Proof of publication: the term of the agreement, plus 12 months.
• Approval files and PDFs: the term of the agreement, plus 12 months.
• Incoming comments and messages: 12 months.
• Contact form messages: up to 2 years after our last contact.
• Invoices and accounting: 7 years, as Belgian law requires.
• Technical logs and error reports: 90 days.

If you delete your account, we wait 30 days before everything is gone for good. That isn’t a legal trick but a courtesy: cancelling by mistake doesn’t cost you everything.

You can access, correct or delete your data, restrict or object to its processing, and receive it in a common format. Where you gave consent, you can withdraw it at any time.

Email marketing@defyandbrandevents.be. We reply within a month.

You can also complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.

Connections to ploffo.com and the app are encrypted. Access to data is limited to people who need it for their work.

If we change this policy, the new date appears at the top of this page. We notify customers of significant changes by email.