Security for your work and your data.

Decide who can access your projects and shared links. Manage connections and check what happens to your data before deleting the account.

Authentication
After your password, a code from an authenticator app confirms access, and the account also accepts a passkey. The organization can require two-factor authentication from every member.
Roles and permissions
Each person joins as a member, manager, administrator or owner, and each role’s permissions can be adjusted feature by feature. Changes are kept in the organization’s activity log.
External links
An external link can have an access code, an expiration date and a view limit, and you revoke it whenever you want. Repeated attempts with the wrong code lock access for a while.
Connection credentials
Each person connects their own accounts, and access follows the permissions granted in the provider. Website passwords and integration tokens are encrypted on the server with AES-256-GCM and a key specific to each person.

Data use and protection

No personal data is sold. See the privacy policy for legal bases, storage locations and retention periods.

Privacy policy
Model training
Training with identifiable personal data requires specific consent. Anonymized data may improve the services. Google and Microsoft calendar data is excluded from training, even when anonymized. AI providers follow their own policies.
Services that process your content
Messages and files go through the providers needed for the request: language models, meeting transcription and recording, web search, image, audio and video generation, translation and file conversion. Payments, email delivery, the database and storage use specialized vendors.
Where the data lives
The database and files use cloud providers. Processing may occur in vendors’ countries, such as the United States and the European Union, with standard contractual clauses where applicable.
History and saved materials
Conversations, files and consulted content stay in the history until you delete them. Disconnecting integrations does not delete saved materials.
Your rights over personal data
You can request access, correction, portability or deletion of your data even if you cannot sign in. The policy explains legal bases and retention under Brazil’s General Data Protection Law (LGPD). The response period is 15 days, extendable by another 15 with justification.

Account deletion

Request it in Profile and Settings, under Security. Before confirming, review the impact and choose who takes over the projects and organization.

Delete my account
  1. Before you confirm

    You confirm your identity

    Use your password or a code sent to your account email. The code also works for people who sign in without a password.

  2. You review the impact of deletion

    Plannk shows the organizations, projects, automations and credits involved. For the projects and organizations you manage, you choose who takes over or confirm the suggested person. If you want, download a copy of your data first.

  3. On confirming · reversible

    Account access ends when you confirm

    Access ends on every device. Public links you created go offline, and automations and schedules are paused.

  4. For 30 days · reversible

    You can cancel within 30 days

    Cancel through the link sent by email or by signing in with your password or a code. Your account, links and automations return as they were.

  5. When the period ends · final

    Plannk completes deletion after the waiting period

    When the period ends, the deletion is carried out and you receive a confirmation by email.

What is deleted

  • Your account name, email, phone number and photo.
  • Passwords, codes, sessions, passkeys and two-factor authentication.
  • Connections to other services, which are also revoked with the provider.
  • The personal memory Plannk kept about you.
  • Files you uploaded and recordings with voice or images. Only technical data remains, such as type, size and date.

What remains, without identifying you

  • Work done in the organization, such as projects, files and shared meetings, stays with the team without your name.
  • Conversations and results, with names, emails, phone numbers and documents removed from the text.
  • Usage, consumption and billing history, which supports reports, invoicing and tax obligations.
  • Audit and security records. IP addresses are removed after 180 days.

Your identity is replaced by a random code with no link to your account record. Organization administrators can remove you from the organization, which ends your access without deleting data. An account is only deleted at your request or by decision of the Plannk team in response to a court order or a violation of the terms, always with notice by email.

Frequently asked questions

Where do I enable two-factor authentication?

In Profile and Settings, open the Security tab. Use an authenticator app to scan the QR code, then confirm the generated code to complete activation.

Does revoking a link delete the shared material?

Revoking a link stops access through that link. It does not delete the original material or copies someone has already downloaded. Files and conversations are managed where they were saved.

Can I change my mind after requesting deletion?

Yes, for 30 days. Use the link sent by email, or sign in with your password or a code and choose to cancel. If the Plannk team started the deletion, contact support.

What happens to the projects and organization I manage?

Before you confirm, you choose who takes over each project and the organization, or confirm the suggested person. The team keeps access to its work. If you are the only member, the organization is closed and its billing is canceled.

Do I lose credits or time I already paid for?

Credits paid by the organization return to it. What you paid individually, in credits or a subscription, is not refunded, and the amount is shown before you confirm.

I can no longer sign in. How do I request deletion?

Use the privacy channel on the support page. We confirm the request through a link sent to your account email.

Report vulnerabilities and incidents

Tell us the affected feature, what happened, the time, and the steps to reproduce it, without sending passwords, codes, or access keys.