Privacy policy

Effective October 26, 2026. This policy covers the Pluug MCP server at mcp.pluugai.com used by AI assistants.

What we receive

When an AI assistant calls a tool, we receive the tool's parameters: a place name or coordinates, a product category or search words, filters such as price or strain, and product or store identifiers. We do not receive your name, account, email, conversation history, or anything you typed other than what the assistant chose to pass as search parameters.

What we store

We log each tool call with the name of the calling platform (for example "claude" or "openai"), the tool used, a timestamp, and, for product lookups, the product id. We do not store search coordinates or query text in those logs. Standard web server logs (IP address of the calling platform, timestamp, request path) are kept for up to 30 days for security and abuse prevention.

What we do not do

We do not build profiles of individuals, do not sell or share request data with third parties, do not use cookies or tracking on this endpoint, and do not store payment information. We never see a purchase: buying happens on the dispensary's own website.

Data we return

Responses contain product and store information published by licensed dispensaries (prices, discounts, product details, store address, phone and hours) and links to the store's online menu and to product pages on pluug.io or a partner site.

Retention and security

Tool-call records are kept for analytics for up to 24 months in aggregate form. Access to the endpoint requires a platform credential issued by Pluug; traffic is encrypted in transit (TLS).

Contact

Pluug · [email protected]. See also the pluug.io privacy policy.