Privacy Policy
Last updated: not yet published (Draft 1)
1. Who we are
Clearplano is a website offering business tools, starting with the Invoice Organizer. It was founded by Sushant Chatke. The service is operated by [Founder to provide: legal name and type of the operator (company, LLP, partnership or individual)], of [Founder to provide: registered or principal address in India].
Contact for privacy requests: [Founder to provide: contact email address].
2. Information we collect
If you create an account
- Your email address and password. Sign-up and login are handled by our authentication provider, Supabase. Our own code passes your password to Supabase and does not store it.
- Session cookies set by Supabase so you stay signed in (see section 8).
Invoices you save
When you confirm an invoice, we save these details to your account: vendor name, invoice number, invoice date, due date, total amount, amount paid, amount remaining, payment status, currency, any notes, which fields the system was unsure about, and the original file's name, size and last-modified time, plus the time the record was created and last changed. Invoices you add by hand are saved in the same way. Each record is tied to your account.
We do not save the uploaded file itself. The Invoice Organizer does not store the PDF or image in our database or file storage. The file is read by our server only to extract these details and is then discarded by our application. (Our hosting provider may keep technical request logs; see section 10.)
Documents you upload for reading
To read a document, the file is sent from your browser to our server and from there to Google's Gemini API, which returns the extracted details. Everything on the document can be seen by that service, including any personal information on it, such as names, addresses, tax or bank details.
If you use Clearplano without an account (guest mode)
- You can organize up to 3 documents (up to 5 MB each). The documents are processed the same way as above, but nothing is saved to our database.
- A signed, HTTP-only cookie named
cp_guestrecords how many documents this browser has used. It lasts 24 hours. - Your IP address is held in our server's memory to enforce usage limits (a short rolling window of about 10 minutes). The code does not write it to our database.
- Your reviewed (unsaved) results are kept in your browser's storage for up to 6 hours so they survive signing up. They contain the extracted details and the file's name, size and date, never the file. They are cleared when restored, discarded, expired or when you log out.
If you chat with Glitch
Glitch is our on-site helper. When you ask him a question, we send your message, up to your last 8 messages in the conversation, and the name of the page you are on to our server, and from there to the Gemini API to write the reply. We do not save chat messages in our database. Your IP address is used in server memory to limit how often the chat can be used. Do not type confidential or personal details into the chat.
Information stored on your device
We use your browser's local storage and session storage for interface preferences and short-term convenience, not for advertising. They hold your Dark/Light choice, sidebar settings, Glitch's position, sound and tip settings, which intro animations you have seen, and the temporary guest results described above.
We did not find any analytics, advertising, or cross-site tracking tools in Clearplano's code.
3. How we use information
- To create and secure your account and keep you signed in.
- To read your documents, show you the results and save the invoices you confirm.
- To show your dashboard, due dates and payment status.
- To answer your questions through Glitch.
- To prevent abuse and keep free usage fair (guest limits, rate limits).
- To find and fix errors. Our server logs error messages; we do not intend them to contain document contents.
Our hosting provider and database provider keep their own logs and backups. What they record and for how long has not been confirmed (see section 10).
5. Google Gemini and your documents
Documents you upload and messages you send to Glitch are processed by Google's Gemini API (model gemini-3.1-flash-lite at the time of writing).
Google publishes two sets of terms for the Gemini API. Under its unpaid terms, Google says it may use submitted content and responses to provide, improve and develop its products and machine learning technologies, and that human reviewers may read and process it (after it is disconnected from the account), and it advises against submitting sensitive, confidential or personal information. Under its paid terms, Google says it does not use prompts or responses to improve its products, and logs them for a limited period to detect misuse and meet legal requirements.
Which of these applies to Clearplano's account has not been confirmed. Until it is, please assume the unpaid terms may apply and avoid uploading documents or writing messages that contain information you would not want handled that way. [Founder to provide: whether the Gemini API key is on Paid or Unpaid terms (Google AI Studio / Cloud billing)]
Google's terms also say data may be stored transiently or cached in any country. Source: Google's Gemini API Additional Terms of Service (ai.google.dev/gemini-api/terms), version effective 23 March 2026, which can change.
6. How long we keep information, and deleting it
- Saved invoices stay in your account until you delete them. You can edit or delete any saved invoice yourself in All invoices.
- Your account: the database is set up so that deleting an account also deletes its invoices. The app does not yet have a self-service "delete my account" button. To have your account and data erased, contact us at [Founder to provide: contact email address].
- Guest data expires as described in section 2.
How long deleted data remains in database backups or provider logs, and how quickly an account-deletion request is completed, have not been confirmed. [Founder to provide: account-deletion process and timeframe; backup retention at Supabase and the host]
7. Security
Saved invoices are protected in the database by per-account access rules (row-level security) intended to let each account read and change only its own records. The site is served over HTTPS, and the guest cookie is marked secure in production. No system is completely secure, and we cannot guarantee absolute security.
We have not independently verified encryption of stored data at our providers, nor completed a security audit, and we make no claim of any security certification. [Founder to provide: confirmation that the access rules in sql/invoices.sql are applied to the live database]
9. Your choices and rights
You can view, edit and delete your saved invoices in the app. You can ask us to correct or erase your information, or to explain what we hold, by contacting us. India's Digital Personal Data Protection Act, 2023 gives individuals rights over their personal data, and its Rules (notified in November 2025) bring most of its notice, consent, rights and security provisions into force in stages, with most due around May 2027. We will update this policy as those provisions apply to us.
10. Children, transfers and other points we are still confirming
- Clearplano is intended for people running businesses and is not directed at children. [Founder to provide: founder to approve this statement]
- Our providers may process data outside India (Google states data may be stored in any country). The countries involved have not been confirmed.
- What our hosting provider records in its request logs, and for how long, has not been confirmed.
11. Contact and grievances
To raise a concern about how your information is handled, contact our grievance officer: [Founder to provide: grievance officer name and designation], [Founder to provide: grievance officer email]. [Founder to provide: timeframe in which complaints will be acknowledged and resolved]
12. Changes
We will update this page when our practices change and show the new effective date. See also our Terms of Service.