Privacy Policy
Last updated: May 2026
1. Information We Collect
We collect information you provide when creating an account, including your name, email address, and company name. We also collect planning data you create within the Service — goals, objectives, initiatives, tactics, and related content. We collect usage data such as feature interactions and audit log events to operate and improve the Service.
2. How We Use Your Information
We use your information to create and manage your account, operate the Service, send invitation and approval notification emails, process payments through Paddle, respond to support requests, and improve the Service over time. We do not use your planning data to train machine learning models or for any purpose beyond operating the Service.
3. Company Data Isolation
All planning data in PlanAligned is scoped to your company workspace. By default, other organizations using the Service cannot access your data. Plan administrators may explicitly invite users from external organizations to collaborate on specific plans; those guests will have access only to the plans they are invited to and no other data within your workspace. Our Firestore security rules enforce this isolation at the database level. Employees of PlanAligned may access company data only when necessary to provide support, and only with appropriate authorization.
4. Information Sharing
We do not sell your personal information. We share data only with service providers who help us operate the Service: Firebase (Google) for authentication and data storage, Paddle for payment processing, Resend for transactional email delivery, and similar infrastructure providers. Each provider is bound by appropriate data processing agreements. We may disclose information if required by law or legal process.
5. Authentication and Security
Authentication is handled through Firebase Auth using email and password. We do not store passwords directly — Firebase manages credential storage using industry-standard practices. We implement reasonable technical measures to protect your data, including encrypted data transmission and access controls, but no system is 100% secure.
6. Email Communications
The Service sends transactional emails for account invitations, approval workflow notifications, and account-related updates. These emails are sent via Resend from notifications@notifications.planaligned.com. You cannot opt out of transactional emails while your account is active, as they are integral to the Service's workflow functionality.
7. Cookies and Analytics
We use cookies and similar technologies to maintain your session and operate the Service. We may use basic analytics to understand how the Service is used in aggregate. We do not use third-party advertising cookies or sell behavioral data to advertisers.
8. Data Retention
We retain your account and planning data for as long as your account is active. If you cancel your subscription and close your account, your data is retained for 30 days before permanent deletion, during which time you may request an export. You may also request deletion of your data at any time by contacting us.
9. Your Rights
You may access, update, or request deletion of your personal information at any time by contacting us or through your account settings. California residents may have additional rights under the CCPA. If you are located in the European Economic Area, you may have rights under the GDPR, including the right to access, correct, or delete your data, and to lodge a complaint with a supervisory authority.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active account holders of material changes via email before they take effect. Continued use of the Service after changes constitutes acceptance of the updated Policy.
11. Contact
For privacy-related questions, data requests, or to exercise your rights, contact us at support@planaligned.com.