Security & privacy
Private by design, hosted in the EU.
Your visitors trust your page. Plugbox is built so that trust is deserved.
Hosted in Germany
Application and database run on servers in Germany (EU). Built for GDPR and Turkey's KVKK.
No tracking cookies
Public pages set no cookies and load no ad pixels. Analytics are anonymous aggregates.
Strict page security
Every public page runs under a strict Content Security Policy: only Plugbox's own, fingerprinted script can run.
Clean images
Uploads are re-encoded; location and camera data are removed before anything is published.
Consent you can prove
Sign-up forms use double opt-in, keep a consent record and include one-click unsubscribe.
Protected accounts
Passwords are hashed; staff access requires two-factor authentication and every action is audited.
Abuse reporting
Every page has a report link; harmful links are scanned and quarantined automatically.
Isolated integrations
The AI voice agent runs in its own sandboxed frame and loads only when a visitor taps.