The short version: the files, spreadsheets, and data you analyze are processed entirely in your browser and are never uploaded to or stored on our servers in readable form. Optional AI features send only anonymized summary figures, and the optional device-handoff feature relays only a copy encrypted on your device with a key we never receive. We don't sell your data. Close the tab and your analysis is gone.
PlainSight — Insightful Actions ("PlainSight — Insightful Actions," "we," "us," or "our") operates the web application at plainsightai.app (the "Service"), which helps individuals and businesses turn their own spreadsheets and transaction data into plain-language insights, benchmarks, and reports. PlainSight — Insightful Actions is not affiliated with, endorsed by, or related to any other company using the name "PlainSight." This Privacy Policy explains what information the Service handles and how. If you have questions, contact us at ps.insightfulactions@gmail.com.
When you upload a file, paste data, or open a spreadsheet, the Service parses and analyzes it locally in your web browser. Your raw rows — transactions, client or customer names, amounts, trade logs, and file contents — are not transmitted to our servers and are not stored by us. When you close or refresh the tab, that working data is cleared from memory.
Two clearly labeled exceptions:
If you choose the optional "read a ledger photo" feature, the image you select is sent to our AI vision provider so the numbers in it can be transcribed for you. This is entirely opt-in, used only to perform that one-time read, and the image is not retained by us afterward.
If you choose the optional "Send to my phone" feature to move a report between your own devices, your browser first compresses and encrypts the report on your device, and only that encrypted result is relayed through our server. The decryption key is generated in your browser and travels solely inside the link or QR code shown on your screen (in the URL "fragment," which browsers do not send to servers) — so we relay data we are unable to read. The encrypted copy can be retrieved exactly once, only by your signed-in account, is deleted the moment your other device retrieves it, and expires and is deleted automatically after 15 minutes in any case.
| Category | What it includes | Why |
|---|---|---|
| Account information | Your email address, and name if you provide it, managed through our authentication provider (Clerk). | To create and secure your account and remember your plan. |
| Billing information | Subscription status and payment records handled by our payment processor (Stripe). We never receive or store your full card number. | To process Pro subscriptions and Report-pack purchases. |
| Anonymized AI inputs | When you use an AI feature, we send summary figures only — e.g. monthly totals and "Client A: 34%"-style shares — to our AI provider (Anthropic). Never your raw rows, real names, or files (except an opt-in ledger photo as described above). | To generate benchmarks, narratives, and recommendations. |
| On-device preferences | Settings such as your favorite industries, unlocked session state, and interface choices stored in your browser's local storage. | To remember your preferences between visits on that device. |
| Saved reports (optional) | If you choose "Save report," the analyzed data is stored in your own browser's local database (IndexedDB) on that device only. It is never transmitted to us or anyone else, and you can delete it in the app at any time or by clearing your browser data. | So you can reopen a dataset later and keep working with it. |
| Device handoff (optional) | If you choose "Send to my phone," an encrypted copy of the report — encrypted in your browser with a key we never receive — is held on our server for up to 15 minutes so your other device can retrieve it once, after which it is deleted. We cannot decrypt it. | So you can move a report between your own devices without re-uploading files. |
| Basic technical data | Standard server and usage logs from our hosting provider (Vercel), such as IP address, browser type, and pages requested, in aggregate. | Security, reliability, and understanding overall usage. |
We use the limited information above to provide and secure the Service, to authenticate your account, to process payments and manage subscriptions, to generate the AI insights you request, to remember your preferences, to communicate with you about your account or important changes, and to maintain and improve reliability and safety. We do not use your content to train AI models.
We share the minimum information necessary with trusted providers who act on our behalf:
| Provider | Purpose | Information involved |
|---|---|---|
| Clerk | Account sign-up, sign-in, and session management | Email, name, authentication data |
| Stripe | Payment processing and subscription billing | Payment details you enter directly with Stripe; we receive only subscription status |
| Anthropic | AI insights, benchmarks, and narratives | Anonymized summary figures (and opt-in ledger photos) |
| Vercel | Application hosting and delivery | Standard technical/usage logs |
| Upstash | Short-lived data store | Support requests you submit (name, email, message); short-lived operational caches; encrypted device-handoff copies we cannot read, deleted within 15 minutes; a push delivery address for your device, only if you asked for notifications (see 6a) |
| Optional "Sign in with Google" | If you choose it, your Google email and basic profile |
Each provider processes data under its own privacy terms. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
The Service uses your browser's local storage to remember preferences (such as your favorite industry) and session state, and our authentication and payment providers use cookies or similar technologies needed to keep you signed in and to process a purchase securely. We do not use third-party advertising trackers.
You can ask to be told when a new issue of The Circuit is published. This is off unless you switch it on, and we will only offer it at the bottom of an issue you have just read — never as a prompt when you arrive.
It is worth being straight about what this costs, because it is the only thing on this site that works this way. When you turn notifications on, your browser generates a delivery address for that specific device and hands it to us. That address is a persistent identifier for the device — the first one this product has ever stored. Everything else here is either kept in your own browser or tied to an account you chose to create.
What we hold against it is deliberately almost nothing:
No account, no name, no email, and no connection to anything you have bought. A subscription is a device asking to be told when something is published; it is not a person. The notifications we send carry no message content at all — they are an empty signal that wakes your browser, which then asks our server what to display. Nothing about you travels with them.
Switch it off with the same control that switched it on, or in your browser's site settings. Switching off deletes the record. If a device stops accepting delivery — you uninstall the browser, clear its data, or change phone — the address is removed automatically the next time we try it.
Because your analyzed data never leaves your browser in readable form, we have nothing to retain about it. If you use the optional "Save report" feature, that data is stored only in your own browser on that device — we hold no copy — and it remains until you delete it in the app or clear your browser data. If you use the optional "Send to my phone" feature, the encrypted copy (which we cannot decrypt) is deleted the moment your other device retrieves it, and automatically after 15 minutes in any case. Account and billing records are kept for as long as your account is active and as needed to meet legal, tax, and accounting obligations.
Full instructions, on a page you can reach without signing in: Delete your account.
You can delete your account yourself, from inside the app: open the account menu, choose Manage account, then Delete account. You do not need to ask us, and you do not need to give a reason. If you are locked out and cannot reach that button, email ps.insightfulactions@gmail.com and we will do it for you.
When an account is deleted, our systems immediately remove the live records tied to it: your entitlements, the list of material you licensed, and your usage counters. What we keep is deliberately narrow, and we would rather describe it plainly than let you discover it later:
If you would rather we erase the purchase record too, say so and we will. Email us from the address on the account before or after deleting it and we will remove the archived record as well — at which point signing up again starts genuinely from zero, and anything you previously paid for will not come back. We are telling you this because a deletion that quietly preserves something is only acceptable if you know about it.
Anything stored on your own device — saved reports, preferences — is not ours to delete and is not touched by any of the above. Clear your browser storage and it is gone.
Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you (your account and billing records), and to object to or restrict certain processing. Deletion you can do yourself at any time — see section 7a, which also sets out exactly what is removed and what is not. For anything else, email ps.insightfulactions@gmail.com and we'll respond within a reasonable time. You can also clear on-device data at any time by clearing your browser storage.
We use reputable providers and reasonable technical measures to protect the limited information we handle, including encryption in transit. Keeping your analyzed data in the browser is itself a privacy safeguard. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
The Service is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
The Service is operated from the United States, and information we process may be handled in the United States and other countries where our providers operate. By using the Service you understand your information may be transferred to and processed in these locations.
We may update this Privacy Policy as the Service evolves. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app. Continued use after changes take effect means you accept the revised policy.
Questions or requests about this policy or your data: ps.insightfulactions@gmail.com.