Your financial life is yours. We just help you see it.

We try to collect as little as possible. What we do collect falls into four groups:

• Account information — your email address, and a password stored only as a secure one-way hash. If you sign in with Google, we receive your email and name, never your Google password.
• Planning information you enter — ages, income, savings balances, debts, goals, insurance and estate details, and any other figures you type into the tools. This is what makes your projections yours.
• Connected account data (optional) — if you choose to link a financial institution, our provider returns balances, holdings, and transactions to your account. We never see or store your bank login credentials.
• Basic usage information — pages viewed, features used, device and browser type, and error reports, so we can fix problems and improve the product.

• To run the service: build your dashboard, calculate projections, and save your plan across devices.
• To operate your account: authentication, billing for paid plans, and account-related email.
• To provide support when you ask for help.
• To improve Plentitude, using aggregated and de-identified usage patterns.
• To meet legal, tax, and security obligations.

We do not sell, rent, or trade your personal information. We do not run an advertising business, and we do not share your financial details with advertisers, data brokers, or lead-generation services. We are not paid to steer you toward any product, fund, lender, or adviser.

Plentitude is funded by subscriptions. That is deliberate: our only incentive is to make the software good enough that you want to keep it.

We share information only in these limited situations:

• Service providers who operate the product on our behalf — hosting and database infrastructure, payment processing, financial data aggregation, email delivery, and error monitoring. They may only use the data to provide their service to us.
• People you invite — if you add a spouse, partner, or collaborator to your household, they can see the plan data you share with them.
• Legal requirements — when we are required by valid legal process, or to protect the rights and safety of our users.
• Business transfer — if Plentitude is ever acquired, your data may transfer with the service. We would notify you first, and this privacy commitment would carry over.

Linking accounts is entirely optional. When you do link one, you authenticate directly with your institution through our aggregation provider. Your username and password are never transmitted to or stored by Plentitude. We receive read-only information — balances, holdings, and transactions.

We cannot move money. Plentitude has no ability to transfer funds, place trades, or change anything at your financial institution. You can disconnect any institution at any time from Settings, which stops future syncing and lets you delete the imported data.

• Encryption in transit with TLS (256-bit SSL) and encryption at rest for stored data.
• Row-level database security so your records are only readable by your own authenticated account.
• Passwords stored as salted one-way hashes — no one at Plentitude can read your password.
• Least-privilege internal access, with administrative access limited to what is needed to operate the service.
• Regular dependency and security scanning of our codebase.

We keep your information for as long as your account is active. You can delete individual records at any time, or delete your whole account from Settings — that removes your plan data from our live systems, with encrypted backups aging out shortly after. We may retain limited billing records where tax or accounting law requires it.

Want a copy of your information? Email us at privacy@plentitudeplanning.com and we will export it for you.

We use cookies and similar browser storage to keep you signed in, remember your theme preference, and measure basic product usage. We do not use third-party advertising or cross-site tracking cookies. You can clear or block cookies in your browser, though signing in will stop working if you block them entirely.

Depending on where you live — including California under the CCPA/CPRA, and other US states with comparable laws — you may have the right to access, correct, delete, or receive a portable copy of your personal information, and to be free from discrimination for exercising those rights.

Because we do not sell or share personal information for cross-context behavioral advertising, there is nothing to opt out of on that front. To exercise any right, email privacy@plentitudeplanning.com.

Plentitude is intended for adults. The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Plentitude is operated from the United States and your information is stored and processed there. If you access the service from outside the US, you understand that your information will be transferred to and handled in the United States, where privacy laws may differ from those in your country.

If we make a material change to this policy, we will update the date at the top of this page and, for significant changes, notify you by email or in the app before the change takes effect.

Questions about privacy? Email privacy@plentitudeplanning.com and a person will answer.

Placeholder to confirm: legal entity name and mailing address for formal privacy notices.

See also our Terms of Service and what we're building and why.