Privacy Policy

What this policy covers

PeterPlan provides automated reviews of product plans. This policy explains how we handle the information you provide when you buy an audit, submit a plan, or receive a report.

Who is responsible for your information

PeterPlan.co is a trading name of WXY Studio Ltd, a company registered in England and Wales (company number 17428191). Registered office: 82a James Carter Road, Bury St. Edmunds, England, IP28 7DE. Contact: contact@peterplan.co.

For questions about this policy or your information, contact us at the email address above.

Information we collect

• Contact information: your email address, used to deliver audit codes and reports and to help with a purchase-related support request.
• Plan content: the text in the document you upload for review. Uploaded document bytes are converted to text in memory; we do not keep uploaded files in object storage.
• Plan fingerprint: a one-way code calculated from your plan's text, kept with your report so an identical resubmission receives the same report. It cannot be turned back into your plan.
• Structured audit: the findings for each section of your report, the short passages of your plan they are based on, and one-way fingerprints of your plan's paragraphs. It is kept with your report so a revision of your plan can keep results for unchanged sections.
• Purchase information: the audit package you choose, a payment reference, and the audit codes issued for that purchase. Card payment details are handled by Stripe, not PeterPlan.
• Lifetime account information: if you buy the Lifetime offer, we keep your email address to create and secure your account, send a one-time sign-in link, and calculate your monthly included-audit allowance.
• Saved API-key metadata: if you choose to use your own API key, we store it encrypted and display only its final four characters. We also keep the provider you chose and, for Anthropic, the workspace ID needed to send an audit to that workspace.
• Visit and referral information: on our public pages (home, sample report, terms, privacy), Cloudflare Web Analytics counts page views and records the page, referring site, country, browser and device type. It uses no cookies and does not track you across sites. If you arrive through a tagged link (for example one containing utm_source or ref), that tag is added to your purchase record in Stripe so we can tell which referral led to a sale. Neither is used on the submit page or on report links.
• Operational information: audit status, timestamps, token-usage counts, and package tier. These support delivery, reliability checks, and aggregate service metrics; they do not contain your original plan text.

How we use it

We use your information to take payment, issue audit codes, review the submitted plan, email the report, provide a time-limited report link, and operate and support PeterPlan. We do not sell your plan content or use it to build a public catalogue of ideas.

Who processes information

PeterPlan uses Stripe to process payments, Cloudflare for privacy-focused page-view analytics on public pages, Postmark to deliver transactional email, Anthropic or OpenAI to generate an audit, and a managed PostgreSQL database to operate the service. Each provider processes only the information needed to provide its part of the service.

When you save your own API key, it is encrypted at rest and used only to send your audit to the provider you selected. Your submitted plan text is sent to that provider for that audit; it is never shown back to your browser or used for any other customer's audit.

How long we keep it

Your submitted plan text is deleted as soon as the audit job reaches a terminal state: when a report is generated or when generation fails. There is no additional retention window for the original submitted text.

Your report text is kept for 30 days, then purged. This keeps the report link useful for a short period after delivery. We retain the non-content operational records described above as needed to run the service and maintain aggregate metrics.

A one-way fingerprint of your plan is kept with your report. It is a short code calculated from your plan's text and cannot be turned back into your plan. If you resubmit exactly the same plan from the same email address while your report is still kept, we use it to recognise that and send you the same report again rather than re-auditing identical text. It is deleted together with your report.

The structured audit behind your report is kept with it. It holds the findings for each section, the short passages of your plan each finding is based on, and one-way fingerprints of your plan's paragraphs, which cannot be turned back into text. If you submit a revised plan from the same email and mark it as a revision, we use it to keep the results for sections you haven't changed and to show you what changed. It is deleted together with your report.

If you rate your report, we keep the rating and any comment. Feedback is optional and is sent from your report's own page. The comment is deleted together with your report (after 30 days, or earlier if you delete the report); the rating alone is kept to measure how useful reports are, and says nothing about your plan.

You can request early deletion of a report at any time before the 30-day window closes — verify your email and purchase reference or audit code on the order lookup page and choose "Delete my report." This also deletes the plan fingerprint and structured audit kept with it, is permanent, and cannot be undone.

An important note about reports

Deleting the original plan text does not make a retained report a completely separate copy. A report can quote or closely paraphrase relevant parts of the plan in order to explain a finding. For that reason, report text may still contain fragments of submitted content during its 30-day retention period.

Security

We use access controls and service-provider security measures appropriate to the product. No online service can guarantee absolute security, so please avoid including information in a plan that you would not want processed for the purpose of this review.

Cookies

PeterPlan does not use tracking or advertising cookies. Lifetime account holders receive one essential, secure session cookie after using a one-time email sign-in link. It keeps the account signed in and is not used for analytics or advertising.

Changes to this policy

If PeterPlan changes how it handles submitted plans, reports, or personal information, this policy will be updated to reflect the new practice.