This Privacy Policy explains what PlanFlag collects, why, how long we keep it, and
your choices. PlanFlag is operated by Computer Services International, LLC, a
Missouri limited liability company and parent of the Highpass Studio brand
("PlanFlag," "we," "us").
This Policy covers the PlanFlag service, including its website, application, and
API. It does not cover third-party services you reach through links from PlanFlag.
Your use of the Service is also subject to our Terms of Service.
We collect only what we need to run the Service:
and the Terms version you accepted, with a timestamp.
review. We retain these for three months and delete them on account closure.
severity adjustments, confirmations, rejections, and comments you submit about
findings. This is separate from the content of your Customer Documents.
and subscription and billing records handled by our payment processor. We do not
store full payment-card numbers.
logs, used for security, rate-limiting, and abuse prevention.
We use a single session cookie to keep you signed in. We do not use advertising or
cross-site tracking cookies.
evaluate, calibrate, and train or validate our models, checklists, and rule
sets (see Section 5).
consented, about product updates.
We do not sell your personal information.
We use Customer Documents only to host, process, and deliver the review you
request, and to keep them available for your access. We retain them for three
months and delete them on account closure. We do not use the content of Customer
Documents to train machine-learning models. Cloud-tier reviews send document
content to AI service providers for processing (see Section 6); where local-mode
processing is offered, content stays on your device.
Feedback (your grades and corrections) is the core asset that lets PlanFlag
improve. We retain Feedback and may use it on an ongoing basis to train, validate,
and tune our models and rule sets, consistent with the Terms of Service. Feedback
used for model improvement is decoupled from your identity and from Customer
Document content to the extent that does not defeat its evaluative value. Because
Feedback is de-identified and incorporated into trained models and calibration
data, closing your account does not unwind models already improved from Feedback
you previously submitted.
We share data only with service providers that help us run PlanFlag, under
contract, in the following categories:
text to generate findings (cloud tier).
We may also disclose data where required by law or to protect rights and safety.
for tax, legal, or accounting purposes.
de-identified for model use.
We use commercially reasonable measures, including hashed passwords, hashed API
keys, session cookies, rate-limiting, account lockout, and audit logging. No
method of transmission or storage is perfectly secure.
You may access, correct, or delete your account data, and you may close your
account, which deletes your Customer Documents. Depending on where you live, you
may have additional rights under applicable privacy law; contact us to exercise
them. As described in Section 5, deleting your account does not unwind models
already improved from de-identified Feedback you previously submitted.
PlanFlag is a professional tool not directed to anyone under 18, and we do not
knowingly collect data from children.
The Service is intended for users in the United States, and data is processed in
the United States.
We may update this Policy; the current version is identified by the version string
above, and material changes will be notified. Continued use after an update
constitutes acceptance.
Computer Services International, LLC — support@planflag.com