Last updated: January 2026
Planra ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered idea-to-execution planning service.
Data Controller: Planra
Contact: privacy@planra.co
Authentication and payment processing are handled by Clerk. We receive only: Clerk user ID, plan tier, and billing status. We never receive or store your credit card numbers.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and operate the Service | Contract performance |
| Process AI requests and generate outputs | Contract performance |
| Process payments and subscriptions | Contract performance |
| Send transactional emails (receipts, updates) | Contract performance |
| Prevent fraud and ensure security | Legitimate interest |
| Improve the Service (aggregate analytics) | Legitimate interest |
| Comply with legal obligations | Legal obligation |
When you use our AI features, your content is sent to third-party AI providers for processing:
Data Handling by AI Providers:
We share your information only with service providers necessary to operate the Service:
Purpose: User authentication, subscription billing
Data: Account information, payment information, billing address
Safeguards: SOC 2 Type 2 certified, PCI DSS compliant
Purpose: Application data storage
Data: Projects, tasks, workspaces, usage data
Safeguards: Standard Contractual Clauses, SOC 2 certified
Purpose: Generate project plans, content, and audio transcription
Data: Text and audio content submitted for processing
Retention: Transient only (not stored after processing)
We may also disclose your information: (a) to comply with legal obligations; (b) to protect our rights or safety; (c) in connection with a merger, acquisition, or sale of assets.
We do not sell or share your personal information for cross-context behavioral advertising.
| Data Type | Retention Period |
|---|---|
| Account information | Account lifetime + 30 days after deletion |
| Project content and outputs | Account lifetime + 30 days after deletion |
| Audio files | Not stored (streamed and deleted) |
| Security logs (IP addresses) | 24 hours (in-memory only) |
| Payment records | 7 years (legal requirement) |
Depending on your location, you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete data via your account settings.
Delete your account and all associated data via account settings or by contacting us.
Export your projects and data in a machine-readable format.
Object to processing based on legitimate interests.
To exercise your rights: Contact us at privacy@planra.co or use the account deletion feature in your dashboard settings. We will respond within 30 days.
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, request deletion, and opt-out of sale. We do not sell personal information.
We use only essential cookies required for the Service to function:
| Cookie | Purpose | Type |
|---|---|---|
| sb-*-auth-token | Authentication session | Essential |
| sb-*-auth-token-code-verifier | PKCE security | Essential |
We do not use analytics cookies, marketing cookies, or third-party tracking. If this changes, we will update this policy and implement appropriate consent mechanisms.
We implement appropriate technical and organizational measures to protect your data:
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Your data may be transferred to and processed in countries other than your own, including the United States. These transfers are protected by Standard Contractual Clauses (SCCs) and the data protection frameworks of our service providers. By using the Service, you consent to these transfers.
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us at privacy@planra.co.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send you an email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related questions, data requests, or concerns, please contact us at:
Privacy Contact: privacy@planra.co
We will respond to all privacy requests within 30 days.