Privacy Policy

What ClanPlan is

ClanPlan is a household financial-planning platform: one login per household, shared by the people you choose to invite. This policy explains what data the app collects to make that work, how it's protected, and who can see it.

What we collect

• Account details — the name, email, and billing address you provide when signing up, used to identify you and, in the future, for billing.
• Financial data you enter — net worth, assets, liabilities, budgets, and loan details across the app's modules (For My Loved Ones, Foresight, Money Matters, PayOff Path). This is the core purpose of the app: it exists to help you track and plan around this data, so it's stored to make the app useful to you, not analyzed or sold.
• Vault-protected data — PAN, Aadhaar, bank credentials, your trading account API keys/secrets (Zerodha, Upstox, Angel One, or Groww), and anything you save in For Your Eyes Only. This category is encrypted at rest with AES-256-GCM, gated behind your own Vault passcode, and readable in plaintext only during an active session where you've unlocked it (auto re-locks after 20 minutes idle). To be precise: ClanPlan's screens never show Vault data without your passcode, and the administration tools have no screen that can display it. The encryption key is held by the service itself (so the app can open your data for you once you unlock), which means the service is technically able to decrypt Vault data. We commit not to, and we do not.
• Session data — a single httpOnly cookie identifying your logged-in session, and a server-side record of when it was created and last active (used only to expire idle sessions and support "remember this device"). Not used for tracking or advertising.
• Usage patterns — to understand which parts of ClanPlan are useful, we track how often each module and sub-module is visited, as a simple hit count per household per day, without ever looking at your data. The counts are kept for 12 months and then deleted.
• Issue reports — if you report a problem, the title, description and any screenshots you attach are visible to the ClanPlan admin and used only to look into that problem. Please don't include passwords or sensitive details in screenshots. Screenshots are deleted automatically 30 days after your report is closed, and in any case 90 days after upload. You can delete a report yourself at any time, and reports are deleted with your account.
• Resume/CV content — if you use NextRole's CV Enhancer or job search, the resume text you upload and the job criteria you search on, used only to power that feature.

How it's protected

• Vault contents (PAN, Aadhaar, bank/broker credentials, For Your Eyes Only entries) are encrypted at rest, AES-256-GCM, and shown only after you enter your own passcode. The encryption key is held by the service, not derived from your passcode (see above).
• Every request to your household's data is scoped to your own account and household — no cross-household access exists in the app's design.
• Sessions expire automatically after 45 minutes of inactivity (90 days if you choose "remember this device"), and the Vault re-locks after 20 minutes idle even within an active session.
• Passwords are never stored in plaintext; login uses email-based one-time codes for two-factor verification.

Third parties we use

• Your trading account — if you connect a broker account (Foresight — Zerodha, Upstox, Angel One, or Groww are supported), your own API key/secret (stored in the Vault, as above) is used to read holdings and, if you choose, place orders through your own account. We never see your broker login password.
• AI providers (Groq, and others depending on the feature) — used to power recommendation and analysis features (stock signals, job matching, CV tailoring). Only the specific data a feature needs is sent for that request; nothing is used to train third-party models on our behalf.
• Resend — sends transactional email only (verification codes, password resets, login OTPs). No marketing email is sent through this without your explicit newsletter opt-in.
• Payment provider (Razorpay, when paid plans open) — processes payments for plans on our behalf. See "Payments and invoices" below.
• Vercel — hosts the app and provides Vercel Web Analytics, which is cookieless and does not perform cross-site tracking. See the cookie notice below for what that means in practice.

Payments and invoices

Paid plans are not open yet. When they open, payments are handled by a payment provider (Razorpay) acting as a processor on our behalf. You enter your card, UPI or bank details on the provider's own payment screen; ClanPlan never sees or stores them. We receive only the outcome of the payment, the amount and a payment reference. We issue invoices to the billing address you give us (a name and address, and a GST number if you provide one), and we keep invoices and payment records for as long as Indian tax and accounting law requires them to be kept, even if you later delete your account.

Your plan and AI usage records

To apply your plan we keep which plan you are on, your trial and plan dates, and counts of AI use (the number of tokens each AI request used and which module it was for). We use these counts to apply your plan's limits and to work out what to bill. They show how much AI was used, never what you entered or what came back. Usage counts follow the retention periods above.

Cookies

ClanPlan sets exactly one cookie: a session identifier (httpOnly, so no script — ours or anyone else's — can read it) used solely to keep you signed in. Vercel Web Analytics, used to see aggregate visit counts, does not use cookies. There is no advertising or cross-site tracking on this site.

What we don't do

• We don't sell your data to anyone, for any reason.
• We don't share your financial data across households.
• We don't use your data for advertising, ours or anyone else's.

Deleting your data

You can disconnect a broker account or delete individual entries (loans, Vault items, budget lines) at any time from within the app. From Settings → Your data you can also clear everything stored in one module, or in all modules, and keep using your account.

You can delete your account there as well. That erases your data in every module (including uploaded documents), your family members, saved credentials, API keys and broker connections, and your login. When an account is deleted we keep the sign-up and billing details you gave us and your agreement to our terms, for legal, taxation and audit purposes. We also keep usage counts (tokens used and which modules were opened) linked to your household name for 180 days, after which they are deleted.

Grievance Officer (DPDP Act, 2023)

Not yet designated. Until this is filled in, use the contact below for any data-related complaint or request — it will be handled the same way.

Contact

Not yet assigned.