How we handle your data
Your files are used for one thing: producing your forecasts and plans. Each customer's files are stored separately, every upload is checked before it is opened, we never use your data to train models for anyone else, and this website has no cookies or trackers. Below is what we do, in plain words, and what is still on our list.
What happens to a file you upload
- It travels encrypted. The website and the upload service only accept secure connections.
- It is checked before it is opened. We confirm the file really is the spreadsheet type it claims to be, reject oversized files and compressed files that would unpack into something huge, and never run macros or formulas inside it.
- It is stored apart from other customers' files. Every file and result is kept under your own customer area, and every request is checked against it. Asking for someone else's results returns "not found".
- Spreadsheets we send back are safe to open. Cells that could be read as formulas are neutralized, so a downloaded spreadsheet cannot run anything on your computer.
What we do not do
- We do not sell your data or share it with other customers.
- We do not train shared models on your data. The AI forecasting model we use was trained in advance on other data and is only applied to yours.
- We do not log the contents of your files. Logs record that a job ran and how long it took, not your numbers.
- We do not use cookies, advertising pixels or analytics trackers on this website.
The forms on this website
The upload and waitlist forms are built for a hostile internet: every field is checked, error messages never repeat what you typed, there are limits on how often one address can submit, and the free offer is capped. The waitlist gives the same answer whether or not your email is already on it, so nobody can use it to check who signed up.
When something goes wrong
If a job fails, the error details go to our private logs and you get a reference number, never a technical dump. To fix problems we keep a cleaned-up description of what failed: the shape of the data (column names and types) and made-up sample values, not your real numbers.
Checked on every change
Every change to 4castPlannr runs automated security checks: tests that try to break in through every input, a scan for unsafe code, and a check of the software we depend on for known vulnerabilities. A change that fails does not ship.
What is still on our list
We would rather tell you than have you find out:
- Files are encrypted at rest only to the extent our storage provider does it by default; we do not add our own layer yet.
- There is no self-service account area yet. To delete your data, email us and we will do it.
- We do not have a third-party certification such as SOC 2.
Questions or a vulnerability to report?
Email hello@4castplannr.com. Please do not include real customer data in a report. See also the privacy policy.