Privacy Policy
Your money is your business. We built Plot so the only person who can see your finances is you.
What we store
- Account · your email and a one-way Argon2id hash of your password (never the password itself).
- Financial data you enter · accounts, transactions, budgets, targets, and mortgage details.
- Optional demographics · only if you opt into Benchmarks. We keep your birth year (not full date) and region (not exact address).
How it's protected
- Passwords are hashed with Argon2id; sensitive secrets (like your 2FA seed) are AES-256 encrypted at rest.
- Sessions use opaque, hashed tokens in
HttpOnly,SameSitecookies · a database leak can't be replayed. - Every account's data is isolated; one user can never query another's.
We use your data for nothing but serving you
By default, your financial data is used for one thing only: running your account. We don't sell or rent your information, we don't run ads, and we don't mine it for analytics.
Benchmarks are an optional addendum
The single exception is opt-in: if you choose to join Benchmarks, you accept a separate Benchmark Data Addendum that permits limited use of your anonymized data, only in aggregate, to power comparisons for members. We only ever show aggregates of 5 or more people, and you can leave anytime · your contribution is then removed. Outside of that addendum, this policy's "we use nothing" promise holds.
Your control
You can change your data, opt out of Benchmarks, or delete your account at any time. Deleting your account removes your financial data. Questions? Contact us.