Privacy Policy

Plainhub is a web app that turns money events you record into a live financial model: runway, burn, revenue and a cash projection, alongside an AI finance agent. This policy explains what we collect, how we use it, and the choices you have. It applies to plainhub.app and the Plainhub application.

Plainhub needs an account, and your workspace is stored securely with it. We never connect to your bank. We run no advertising trackers. The only third parties that touch your data are the infrastructure we need to run the product, and each one is named below.

Plainhub never asks for your bank logins and does not connect to your bank, card, or accounting software. There are no statement uploads and no financial integrations. You decide exactly what to record, by typing money events yourself.

Plainhub requires an account. Your workspace (money events, team, customers, plans, tasks) is saved to our database so it follows you across devices and can be shared with teammates you invite. For speed, the app also keeps a working copy in your browser while you use it; clearing your browser does not delete your synced workspace.

Account. Your email address, authentication data, and optional profile details such as a display name, company name and profile picture.

Your model. The figures you enter: money events, team costs, customers, plans, tasks and task comments. We use them only to compute the numbers and insights you ask for.

Workspace sharing. If you invite teammates, we store the invite link settings you choose (sections and role) and, for members who join, their email, role, and basic presence (whether they are online and when they were last seen), which is visible to others in the workspace.

Billing. Your subscription plan and status, received from our payment processor. We never see or store your card details.

Technical. Standard server and security logs from our hosting providers (such as IP address and browser type) used to keep the service reliable and secure, plus the aggregate usage statistics described under Analytics below. We run no advertising or cross-site tracking scripts.

When you ask the agent a question, your message and a numeric summary of your model (for example cash, revenue, burn, top costs and currency) are sent to our backend and processed by a third-party large-language-model provider solely to generate the reply. Conversations are not used by us for advertising and are not shared for training our own models. Please do not include information in a chat that you would not want processed this way.

Parts of your model describe other people: your team members' names, roles and costs, your customers' names and expected payments, and comments your teammates write. For that content, your organisation decides what is recorded and why, and remains the data controller; we act as a processor and handle it only on your instructions to run your workspace. Please only record information about others that you have the right to record.

We share data only with the service providers that operate the product for us: authentication and database infrastructure, website hosting and delivery, backend hosting, an AI model provider that generates agent replies, and a payment processor that handles billing as merchant of record. Each receives only what it needs for its role, under a data processing agreement. We do not sell your data, ever.

You can request the current list of our providers at any time by writing to us.

These providers may process data in countries outside your own. Where required, transfers are protected by recognised safeguards such as standard contractual clauses.

Analytics. We use Google Analytics 4 to understand, in aggregate, how people find and use the site: pages visited, the channel that brought the visit, and events such as signing up or starting a checkout. Google Analytics sets its own cookies (such as _ga) and processes data under Google's privacy policy; IP addresses are not logged or stored in reports by design in GA4. We do not use analytics data for advertising, and we never send your financial model data to analytics. You can block it with any content blocker or Google's own opt-out add-on, and the product works exactly the same.

Cookies and local storage. We use no advertising cookies. Beyond the analytics cookies above, the app stores a small set of functional values in your browser's local storage: your workspace model (when signed out), your theme choice, which notifications you have read, and whether you have seen the intro. Authentication uses the session storage our auth provider requires.

We send messages that are part of the service: billing receipts (from our payment processor), security notices, and account emails such as password resets. We may occasionally send product updates; every non-essential email includes an unsubscribe link, and opting out never affects service emails.

The AI agent generates suggestions, but Plainhub makes no automated decisions about you that have legal or similarly significant effects. Every action in your workspace is taken by you or your team.

Where the GDPR applies, we process your data to perform our contract with you (running Plainhub), for our legitimate interests (keeping the service secure and reliable), and with your consent where we ask for it. You can withdraw consent at any time.

You can access, correct, or delete your account information at any time. You can request a full export or deletion of your data by contacting us, and we will respond within 30 days.

If you are in the European Union or the United Kingdom, you additionally have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority.

Your workspace data is kept while your account is active. If you delete your account, we remove your data from our active systems within 30 days; encrypted backups roll off on a fixed schedule after that. Billing records are retained as long as tax and accounting law requires.

Data is encrypted in transit and at rest. Access to production systems is limited and authenticated. No method of storage is perfectly secure, but if we learn of a breach affecting your personal data we will notify you as the law requires.

Plainhub is a business tool and is not directed at children under 16. We do not knowingly collect personal data from them.

We may update this policy as Plainhub evolves. If we make significant changes, we will let you know by email or in the app before they take effect.

Plainhub is the data controller for the personal data described here. Questions and privacy requests can be sent to support (at) plainhub.app.