Privacy policy.

Plov Index turns public Google Maps data about a venue into AI insights and suggested actions for food & beverage owners in Baku. This policy explains what we process, why, and the choices you have. We keep it short and specific — if anything is unclear, email us at [email protected].

Plov Index is a SaaS product operated from Baku, Azerbaijan. We are the data controller for the personal data described here. For any privacy or data-protection question, contact [email protected]. Transactional emails are sent from [email protected].

• Public venue data. The core of the product is public Google Maps data — place details and reviews for the venues you track. This data is already public on Google Maps; we did not collect it from you, and we process it to generate the insights and drafts you came here for.
• Account data. The information you give us when you sign up and use the product: your name, email, a hashed password (we store only a hash and cannot read your password), the venues you claim, your plan, your reply-tone and alert preferences, and any team or manager assignments. We use this to run your account and deliver the service.
• Usage and security data. Log data, IP address, request IDs, login attempts, and cookies. We use this to keep the service secure, prevent abuse, debug problems, and — only with your consent — understand how the product is used.

We process account and venue data to perform our contract with you (providing the service you signed up for). We process security and log data on the basis of our legitimate interest in keeping the service safe and reliable. We load optional analytics only with your consent. Public Google Maps data is processed as part of delivering the product to the venue owner.

The reviews and place details we show you were already publicly visible on Google Maps. We do not collect anything about a venue that was not already public, and we don't add hidden data about the people who wrote those reviews. We layer analysis — sentiment, themes, suggested replies — on top of the public text.

To generate review analysis, reply drafts, and briefs, we send relevant text — including public review text — to AI providers for processing. We use trusted sub-processors and share only what each one needs to do its job:

• Third-party AI / LLM providers — AI text generation for review analysis, reply drafts, and briefs. Review text may be sent to these providers for processing.
• An email delivery provider — sends our transactional email (verification, password reset, alerts). Receives the recipient address and message body.
• A bot-protection provider — protects our forms from automated abuse.
• Google Analytics — loaded only if you consent to analytics cookies.
• EU-based cloud hosting and backups — our service runs on EU infrastructure, with encrypted database backups stored in EU-based cloud storage.

We do not sell your data and we don't share it with advertisers.

We set a strictly-necessary session cookie to keep you signed in, and — only with your consent — an optional analytics cookie. We set no advertising or cross-site tracking cookies. Full detail is in our cookie policy.

We keep account and venue data for as long as your account is active. When you delete your account, we remove your account data and the venue claims tied to it. Security and log data are kept only as long as needed for the purpose above. Encrypted database backups roll off on a rolling schedule.

Passwords are stored only as hashes. Data is encrypted in transit, and database backups are encrypted at rest. Our infrastructure is hosted in the EU, with encrypted backups in EU-based cloud storage. We rate-limit login attempts and use a bot-protection service to keep automated abuse off our forms.

Your data is hosted in the EU. Some sub-processors (for example, our AI providers) may process data outside the EU; where that happens, we rely on appropriate safeguards and share only the data needed for that processing.

You can ask us to access, correct, delete, export, or object to the processing of your personal data by emailing [email protected]. You can also request removal of an account or venue from within the product through the removal-requests flow. We'll respond within a reasonable time.

Plov Index is a tool for business owners and is not intended for anyone under 18. We don't knowingly collect data from children.

When we make a meaningful change, we'll update the date at the top of this page and, where appropriate, notify signed-in users before it takes effect.

Questions about privacy or your data? Email [email protected].