Data Planabes processes
- Account data: display name, email address, user code, password hash, preferred base currency, and essential session records.
- Financial workspace data: imported statement rows, normalized transactions, accounts, categories, learned classification rules, goals, and recurring baselines.
- Investment data: holdings entered by the user or synchronized through an explicitly configured Interactive Brokers Flex connection.
- Technical data: security and operational logs produced by the hosting and database infrastructure.
How data is used
Data is processed to authenticate users, isolate private ledgers, import and deduplicate statements, provide classifications and summaries, synchronize configured providers, maintain security, and diagnose service failures. Planabes does not sell personal data or use financial records for advertising.
Cookies and sessions
Planabes uses an essential HTTP-only session cookie to keep users signed in. The application does not require advertising cookies. Session tokens are stored as hashes in the database.
Infrastructure and providers
Vercel hosts the web application and Supabase provides PostgreSQL database infrastructure. SEC Company Facts, Yahoo Finance, European Central Bank rates, and Interactive Brokers Flex may be contacted for the features described on the About page. Each provider processes requests under its own terms.
Security and retention
Connections use HTTPS. Passwords are one-way hashed, provider credentials supported by Planabes are encrypted before database storage, and application queries enforce ledger-level isolation. Data is retained while the associated workspace remains active or as operationally necessary for security and recovery.
Your choices
Users can correct data through the application and can request workspace or account deletion through the verified contact route. Requests may require account verification. See Contact and Security.