Privacy notice

01Who we are

InPlan runs inplan.io and the InPlan API. In this notice, "we" means InPlan. You can reach us at [email protected].

02What we collect

We collect account data only:

• Account details: your name, work email, company and use case.
• Sign-in records: when you sign in to the dashboard.
• API call records: request ID, endpoint, time, status and the key prefix, for each call made with your keys.
• Billing records: your plan and invoices. Our payment provider holds your card details.
• Messages: what you send us by email or through our forms.

03No patient data

The API never needs information about patients, and we do not collect it. Please do not send it. If it reaches us by mistake, we delete it.

04How we use it

To run your account and the API, to show your usage, to bill you, to answer your questions, and to keep the service secure. We email you about your account, and about product updates only if you choose to receive them.

05Who we share it with

Service providers that host the service, send email and process payments, under contract and only for those jobs. We share data when the law requires it. We do not sell personal data.

06How long we keep it

We keep account data while your account is open and delete it within 30 days after you close the account. We keep API request logs for 90 days.

07Security

Traffic is encrypted with TLS 1.2 or later. API keys are stored as one-way hashes. Read more on our Security page.

08Cookies

We use two kinds of cookies. The dashboard sets a session cookie to keep you signed in. Our website uses Google Analytics cookies to measure how people use it.

09Your choices

You can ask to see, correct, export or delete your data. Email [email protected] from the address on your account. You can turn off product update emails in your dashboard settings.

10Changes to this notice

We post changes on this page with a new date. We email workspace owners about important changes.

11Contact

Questions about privacy: [email protected].