Privacy notice

What Financial Planning records about you, why, and what you can do about it.

Last updated: 19 Oct 2026

Who is responsible

The company you work for decides what is recorded about its employees in this app and answers your requests first. Contact your company's owner.

The app is operated by [Operator name]. For questions your company cannot answer, write to privacy@example.com.

What we record and why

We keep only what the app needs to work and to make money decisions traceable.

Your account

What: Your email address and your password. The password is stored only as a one-way hash, so nobody can read it.
Why: To let you sign in. Needed to provide the service.
Who can see it: You. Employees who manage your company's staff see your email.
How long: Until your account is deleted. It is deleted when an owner removes you from your last company.

Your employee profile

What: Your last and first name, position, roles, permissions and whether your system access is on, in each company you belong to.
Why: So your company can organise who may do what. Needed to provide the service.
Who can see it: Employees of that company who may view or manage employees.
How long: While you belong to that company.

History of business actions

What: Who changed the status of a plan; who created, changed, approved, deferred, rejected, closed or paid an allocation request; who created and last changed a payout; who changed an employee's profile, access, roles or permissions, changed a role, or regenerated the invite link — each with the time.
Why: Money decisions must be traceable: to show who approved what, catch mistakes and fraud, settle disputes and keep accounting records. This is your company's legitimate interest and, where the law requires accounting records, a legal duty.
Who can see it: Employees who may see the record it belongs to. Company owners and employees allowed to view the activity log see it there, except entries about funds hidden from them.
How long: As long as the record it belongs to exists. When a record is deleted, its history goes with it.

What people type into records

What: Names, recipients, comments and descriptions entered into plans, requests and payouts.
Why: It is the content of your company's work.
Who can see it: Employees who may see that record.
How long: As long as the record exists.

Sign-in protection

What: The number of failed sign-in attempts and, after five, the time your account stays locked (15 minutes). A session version that signs you out everywhere when your access changes.
Why: To protect your account from password guessing. Legitimate interest in security.
Who can see it: Nobody sees it in the app; it works automatically.
How long: Failed attempts are cleared when you sign in successfully.

History cannot be changed

Nobody can edit or delete a line of history, not even the company owner. That is what makes it trustworthy. If you ask for your data to be erased, or are removed from a company, history lines stay without your name; the line recording the removal keeps it.

Cookies and browser storage

The app stores only what it needs to work:

Session — keeps you signed in; ends after 8 hours or when you sign out.
Language — remembers the language you chose, for a year.
Sidebar — remembers whether the sidebar is open, for a week.

There are no advertising or tracking cookies, so the app does not ask for consent.

Anonymous visit statistics

Our hosting provider, Vercel, counts visits to pages without cookies: the page address without what you searched for, the page you came from, your country, browser, operating system and device type. These counts are not linked to your account or to you, and we cannot see who visited.

What we do not record

Your IP address — it is not stored.
Your precise location (visit statistics know only your country).
Which pages you open or what you click, linked to you or your account.
Advertising, or tracking by other companies across websites.

We do not sell your data or use it for marketing.

Your rights

You can ask:

to see the data held about you and get a copy;
to have wrong data corrected;
to have your data deleted, unless the law requires it to be kept;
to limit how your data is used while a question is settled;
to object to a use based on legitimate interest;
to receive your data in a common, machine-readable format.

To use these rights, contact your company's owner first, or the operator named above.

You can also complain to the data protection authority in your country.