Privacy Policy

Information We Collect

When you use Plan to Compound, we may collect basic account information such as your username, email address, and usage data to provide our educational services.

How We Use Your Information

• To provide and maintain our educational platform
• To communicate with you about our services
• To improve our educational tools and content
• To ensure platform security and prevent misuse

Data Protection

We implement appropriate security measures to protect your personal information. However, no method of transmission over the internet is 100% secure.

Third-Party Services

Our platform may integrate with third-party services for payment processing and analytics. These services have their own privacy policies.

Your Rights

You have the right to access, update, or delete your personal information. Contact us at support@plantocompound.com for any privacy-related requests.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

Cookies

We use essential cookies only. These are small files stored on your device solely to keep you signed in and the platform working correctly during your session. We do not use advertising, tracking, or analytics cookies. Essential cookies cannot be disabled as they are required for authentication. You can clear them at any time through your browser settings, which will sign you out of your account.

Plaid Bank Sync (Premium)

If you choose to connect a bank or brokerage account using our optional Premium bank-sync feature, the connection is established through Plaid Inc. Plaid acts as an independent data processor.

• What we receive: read-only account metadata (institution, account name/type, balances), recurring-transaction streams (merchant, amount, frequency, category), recurring-income streams, liabilities (e.g. credit-card balances), and — for brokerage accounts — investment holdings (ticker, quantity, value).
• What we do not receive: your bank login credentials. Plaid handles authentication directly with your institution.
• What we cannot do: initiate transfers, payments, or any movement of money. Our access is read-only.
• How tokens are stored: Plaid access tokens are encrypted at rest using AES-128 (Fernet) before being written to our database. Encryption keys are stored separately as environment secrets and rotatable.
• Your control: Disconnect any institution at any time from your dashboard. We immediately revoke the Plaid item, stop all syncing, and you may request deletion of synced records by emailing us.
• Plaid's own privacy notice: see plaid.com/legal/#consumers.