Privacy Policy

This Privacy Policy applies to the PlanScore website, advisor workspace, demonstration environment, and related services (collectively, the "Service"). PlanScore is operated by The Forever Company, LLC ("PlanScore," "we," "us," or "our").

When an advisory firm uses PlanScore for its clients, that firm generally determines the purposes and means of processing client information and acts as the data controller or business. PlanScore processes that information as the firm's service provider or processor, subject to the applicable agreement.

We collect information in the following categories:

• Account and firm information: name, business email, role, professional credentials, firm identity, contact information, logo, and required disclosures.
• Client planning information: household details, financial facts, goals, documents, notes, recommendations, assessments, plans, proposals, and advisor edits.
• Communications and content: messages, meeting transcripts, files, support requests, and feedback submitted through the Service.
• Technical and usage information: IP address, browser and device attributes, authentication events, timestamps, feature interactions, error records, and audit events.
• Demo-request information: work email, request and redemption timestamps, session status, and security telemetry used to prevent abuse.

Please do not submit Social Security numbers, bank credentials, or other information that is not reasonably necessary for the planning purpose configured by your firm.

We use information to:

• Provide, secure, maintain, and support the Service;
• Create and manage client profiles, assessments, plans, proposals, meetings, and reviewed deliverables;
• Authenticate users, enforce tenant boundaries, prevent fraud, and investigate security events;
• Process advisor-directed AI requests and return draft analysis or content for human review;
• Communicate service notices, support responses, and requested demo links;
• Monitor availability, diagnose errors, and improve Service performance; and
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use customer or client content to train general-purpose AI models without explicit written authorization.

Advisory firms and their authorized users are responsible for obtaining any notices, permissions, or consents required before entering client information into PlanScore. Firms control which information is collected, which users may access it, and how approved deliverables are used.

PlanScore processes client information only to provide the Service, follow authorized user instructions, protect the platform, or satisfy applicable law.

PlanScore uses AI-assisted capabilities to help organize facts, identify gaps, draft observations, and prepare plan or proposal content. AI output is a draft and remains subject to advisor review and approval.

• AI requests are routed through controlled, server-side provider integrations; provider credentials are not exposed to browsers.
• We select enterprise service configurations and data-handling controls appropriate to the requested capability.
• Customer content is not authorized for provider model training unless the customer separately agrees in writing.
• Request context is limited to information reasonably needed to perform the requested task.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include authenticated access, tenant-scoped authorization, encrypted transmission, encryption at rest for protected information, audit records, and advisor approval gates.

No security method is infallible. You must protect account credentials, use only authorized devices and networks, and promptly notify us of any suspected compromise. See our Security & Compliance page for more information about PlanScore's control environment.

Demo sessions expire after 60 minutes. Demo outputs are watermarked "For Demonstration Purposes Only" and must not be used for financial, investment, tax, legal, or client-service decisions. Please do not enter real personal, client, or confidential information into a demo.

We may disclose information to:

• Cloud, communications, document-processing, observability, security, and AI service providers acting under contractual restrictions;
• Your firm's authorized administrators and users, according to configured access;
• Professional advisors, auditors, insurers, or transaction participants subject to confidentiality duties;
• Government authorities or other parties when required by valid legal process or necessary to protect rights, safety, and security; and
• A successor in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law.

We require service providers to process information only for authorized purposes and to maintain appropriate protections.

We retain account and customer content for the period necessary to provide the Service, satisfy the customer's configuration and contractual instructions, maintain required audit records, resolve disputes, and meet legal obligations. Retention terms in an executed order form or data-processing agreement control if they differ from this general policy.

Expired demo tenant data is queued for permanent deletion after the session closes. Limited request metadata may be retained for security, fraud prevention, and aggregate operational reporting.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information. You may also have the right to appeal a denied request or withdraw consent where processing relies on consent.

If your information was submitted by an advisory firm, contact that firm first. We will support the firm in responding to verified requests. We may need to verify identity and authority before acting.

PlanScore uses essential cookies for authentication, session security, preferences, and abuse prevention. We may use limited analytics to understand Service performance. Where required, we will provide choices before using non-essential technologies.

The Service is intended for business users and is not directed to children under 18. Do not submit children's personal information unless authorized, necessary for a legitimate client-planning purpose, and permitted by applicable law.

Information may be processed in the United States and other approved jurisdictions where our providers operate. We use contractual and technical safeguards for cross-border transfers where required.

We may update this policy. We will post the revised version here, change the effective date, and provide additional notice when a material change requires it.

Questions or privacy requests may be sent to privacy@planscore.com. Please include enough detail for us to identify the relevant account and request without sending unnecessary sensitive information.