Privacy

Writing a goal and getting three steps stores nothing. Your goal is sent to an AI model, the plan comes back, it is shown to you, and that is the end of it — there is no row in a database unless you press Save.

No advertising, no analytics profiling, no data sold or shared with brokers, and nothing used to train AI models.

Conjora Limited, registered in Ireland, is the data controller. Reach us at hello@conjora.ie. There is a group-level policy at conjora.ie/privacy covering matters common to all Conjora sites; where it differs from this page about Three Point Plan, this page applies.

• Nothing, when you just generate a plan. The goal is processed in the request and not written down.
• If you save a plan — the goal you wrote, the plan produced, and two random tokens: one that forms the link, one that proves the plan is yours to edit.
• An email address, only if you give one, so you can find your plans again from another device.
• A sign-in code, briefly, if you use email sign-in. It expires.
• Payment records for a Deep Plan — what was bought and when. Card details go to Stripe directly and never reach us.
• An IP-derived key for rate-limiting abusive traffic, deleted automatically about two hours later.

Please do not put things in the goal box that you would not want stored at all — full medical detail, other people’s private information, or anything identifying beyond what the plan actually needs. A useful goal rarely requires it.

Plans are written by Claude, made by Anthropic, reached through Vercel’s AI Gateway. Your goal text is sent to that model as part of the request — there is no way to have a plan written about your goal without the goal being sent.

Your goals and plans are not used to train any model, and we do not permit our providers to use them for that either.

Saved plans are stored in the European Union, in Ireland (Amazon Web Services eu-west-1, via Supabase). The processors are Supabase (database), Vercel (hosting and AI gateway), Anthropic (the model), Stripe (payments) and Google Workspace (sending sign-in codes and links). Some are US-headquartered; those transfers rely on the European Commission’s standard contractual clauses or an equivalent mechanism.

• To provide what you asked for (contract) — writing the plan, saving it, taking payment.
• Legitimate interests — keeping the service secure and preventing abuse.
• Legal obligation — keeping transaction records for the period Irish tax law requires.

A saved plan is kept until you delete it. Ask us to show you what we hold, correct it, delete it, or send it to you in a portable form at hello@conjora.ie and we will respond within a month.

If you are unhappy with how we have handled it you can complain to the Irish Data Protection Commission at dataprotection.ie.