Privacy policy
Last updated November 11, 2026
PlanSigned is run by Furlong Entrepreneurs LLC (“we”, “us”). This policy explains what information we collect when you use plansigned.com, why, who we share it with, and the choices you have. We sell software to businesses. We don't sell personal information, and we don't use it for advertising.
What we collect
From business owners
- Your email address, which is how you sign in. We email you a one-time link instead of using a password.
- Your business's name and your answers to the questionnaire. These describe how your business protects information: who is responsible, which systems you use, and which safeguards are in place. The questionnaire doesn't ask for your own clients' personal or financial information, and you shouldn't enter any.
- People you invite: the name, email address and job title of each IT provider or staff member you send a link to.
- Your signature record: the name and title you sign with, the date and time, your IP address and browser type, and a fingerprint (a SHA-256 hash) of the signed PDF. This record shows when and how the plan was adopted.
- Billing information from Stripe: your Stripe customer and subscription identifiers and whether payment went through. Stripe handles your card. We never see or store card numbers.
From people you invite and share with
- IT providers: the technical answers they give.
- Staff: the name they acknowledge with, the date and time, IP address and browser type.
- People who open a share link: the date and time of each view, with IP address and browser type, so the business owner can see that the plan was opened.
Automatically
- One cookie, which keeps you signed in for up to 30 days. We use no advertising or analytics cookies and no tracking pixels. Fonts and all other parts of the site are served from our own servers.
- Server and security logs, which record IP addresses, pages requested and errors. We use them to keep the site running and to stop abuse.
How we use it
- To create, store and deliver your plan, and to let the people you choose take part.
- To send emails you need: sign-in links, invitations, staff reminders, renewal notices and yearly review reminders. We don't send marketing emails without asking first.
- To bill you through Stripe.
- To keep the service secure, prevent fraud and fix problems.
- To meet legal obligations and enforce our Terms of Service.
We don't use your answers or plans to train AI models, and we don't look at them except to provide support you ask for, keep the service secure, or comply with the law.
Who we share it with
Only these service providers, and only what each needs to do its job for us:
- Fly.io runs our servers and database in the United States.
- Cloudflare protects and delivers the website, and stores our encrypted backups.
- Postmark sends our emails.
- Stripe processes payments.
We also share information with the people you choose: IT providers and staff you invite, and anyone you send a share link to. We may disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy would continue to apply to it.
How we protect it
- Your questionnaire answers and signed plans are encrypted in our database (AES-256).
- All connections use HTTPS.
- Sign-in, invitation and share links are stored only in a scrambled (hashed) form, and they expire.
- Nightly backups are encrypted before they leave our servers, with a key that isn't stored on any server.
No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.
How long we keep it
We keep your account and plans while your account is open, so you can download your signed plans even after you stop paying. If you ask us to delete your account, we delete it within 30 days, and it disappears from our backups within 90 days after that. Billing records may be kept longer where tax law requires it.
Your choices and rights
Email [email protected] to see, correct, download or delete your information. If you were invited by a business, you can contact that business or us. We'll answer within 30 days and won't treat you differently for asking.
California residents have the right to know what personal information we collect and how we use it, to ask us to delete or correct it, and to opt out of its sale or sharing. We don't sell or share personal information as California law defines those terms.
Children
PlanSigned is for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children.
Changes
If we make a significant change to this policy, we'll email account owners before it takes effect and update the date at the top.
Contact
Furlong Entrepreneurs LLC
[email protected]