Privacy & terms
How we look after your family's information
Short version: we ask for as little as possible, we never sell anything, and you can delete everything whenever you like.
Who we are
Plushigo is a storytelling service. The account holder creates and manages the adventure; the named recipient never logs in and never interacts with us directly.
What we collect
For adventures we use the account holder's name and email address, the recipient's first name, the explorer and destination you chose, delivery preferences and order records. If you contact customer service, we also store the adult email, message and any order reference you provide. Destination suggestions store the place you submit and any selected geographic match.
What we never collect
We do not collect the recipient's email address, physical location, school or class information, birth date, photographs or voice. We do not use advertising trackers, and we never sell personal data.
How your data is used
The recipient's first name is used to address the letters. Your email is used to deliver postcards, send your private access link, and respond when you contact us. Delivery preferences control when postcards arrive.
Privacy and consent
By purchasing an adventure you confirm you have permission to use the recipient's first name, and you consent to it being used to personalise the letters. You can withdraw consent at any time from account settings.
Storybook content
Every photograph, letter and journey is fictional, created for the story. Locations, coordinates and educational facts are real and validated against a curated reference library. Nothing on the site is live tracking of any person.
Payments
Payments are processed by Stripe. We never see or store your card details. Order records are retained for accounting and tax purposes.
Your rights
You can access, correct, export or delete your family's data at any time from account settings. Deletion requests stop all deliveries immediately and are confirmed by our team, normally within 30 days.
Data retention
Adventure content and photographs are retained while your account is active. On deletion we remove personal data and generated content, keeping only the minimum records required for tax and fraud prevention.
Terms of use
Adventures are licensed for personal family use. Generated photographs may be downloaded, printed and shared within your family, but may not be resold or used commercially. We may pause an adventure that breaches these terms and will refund any undelivered days.
Changes
If we change this policy in a way that affects your family, we will email you before the change takes effect.
Security in practice
- • Payments are verified server-side before any content is generated.
- • Family data is reached only through a long random access link, never a guessable identifier.
- • Internal records are restricted to administrators; you can confirm this in the database rules.
- • Content generation runs on the server. Keys are never exposed to the browser.
Questions about any of this? Contact customer service.