Before you trust us with your data, check for yourself

SECURITY

Before you trust us with your data, check for yourself

The security measures and data policies PlanQ actually has in place. What we don't have yet is listed too.

Three promises

Download anytime

Owners and admins download the workspace as a single ZIP from Settings > Data export. Records such as tasks, chats, clients and invoices come as CSV that opens in Excel, so you can move them to another tool.

Cancelling doesn't delete your data

If you cancel your subscription, your data stays, and you can pick up where you left off when you pay again.

Deleting really deletes

Permanently deleting from the trash removes it at once. If you ask us to delete your account or workspace, we delete everything within 60 days (records we must keep by law are kept only for that period).

What the backup ZIP includes

What it doesn't include

Security measures

Only what can be verified in our code and configuration.

Encrypted in transit

Every connection is encrypted with HTTPS.

Login protection

Passwords are stored only as bcrypt hashes, never in plain text, and login tokens rotate every 15 minutes. Eight failed logins from the same place within 15 minutes are temporarily blocked, and resetting your password signs you out of every device.

Workspaces fully separated

Every query is scoped to one workspace. An automated check runs every night to confirm no data reaches another workspace.

Sensitive data encrypted at rest

Mail app passwords, connection tokens, payment integration secrets and refund accounts are encrypted with AES-256 and never sent back to the screen or in responses.

Visibility and security level per item

Each document, file, task, event and Q info item has a visibility (only me, project, team, everyone) and a level (general, internal, confidential). «Only me» stays closed even to the owner, and clients see only what is linked to them.

Share links under control

Share links can carry a password (10 tries per 15 minutes), and narrowing visibility cuts links already sent. Internal and confidential items never go out through external links.

Audit trail and instant revocation

Changes are kept in an audit log (90 days to 7 years depending on plan). Removing a member or suspending an account drops their open live connections at once.

AI doesn't train on your data

Cue, meeting transcription and business-card reading run on the OpenAI and Deepgram APIs, whose API terms don't use submitted content for model training. External AI apps such as ChatGPT or Claude work only through tokens bound to a person, a workspace and the scopes you allowed, and deleting, billing and sending are never handed to AI.

Backups and retention

The production database is backed up daily (kept 7 days) and weekly (kept 4 weeks), with a copy on another server. Trash is kept 30–365 days depending on plan, then deleted permanently.

Payment information

Card details are handled directly by our payment processor Stripe; PlanQ never stores card numbers.

What we don't have yet

Two-factor authentication (2FA), SSO and external certifications such as ISMS are not in place yet. If one of these is a must for you, let us know.

Let's start by moving your data together

In a free «30-minute kickoff» we plan your workflow and the order to move your data.

Book the 30-minute kickoff

Where your data lives

Service data is stored on IONOS SE cloud servers in Germany, with a daily database backup copy on a separate server. This overseas transfer is listed in Section 3 of our Privacy Policy.

Before you trust us with your data, check for yourself