Privacy policy

Plenor is a service operated by Plenor SpA, domiciled in Viña del Mar, Chile ("Plenor"). Plenor SpA is the controller of your personal data.

For any question about this policy or about your data, write to us at contacto@plenor.cl.

Data you give us when you create your account: your email address, your name and your password, which we store only as a hash and never in plain text. If you sign in with Google, we receive your email address, your name and your profile picture from Google.

Financial data you enter or import: accounts, balances, transactions, categories, merchants, categorization rules, recurring transactions, goals and the transaction files you upload.

Data we obtain from your bank through Fintoc or Floid SpA, if you connect an account: accounts, account numbers, balances, transactions and credit card data, together with the response the provider returns for each request.

Payment data, if you subscribe to a paid plan: the customer and subscription identifiers that Flow gives us and the status of your plan. Your card details are processed by Flow and never reach Plenor.

Technical and security data: IP address, browser, sign-in records and other security events on your account.

Communications: the messages you send us by email.

To connect your bank and for each sync you enter your RUT and your online banking password. Plenor receives that information and transmits it to Floid SpA only to carry out that request.

Plenor does not store your bank password. That is why we ask for it every time you sync, and Plenor cannot start a new request to your bank unless you enter it again. The connection is read-only and cannot move money.

We use your data to create and manage your account; to provide the service, which includes showing your finances, categorizing transactions, generating reports and syncing your bank accounts when you ask; to process payments for your plan; to send you the emails the service needs, such as verification codes and password recovery; to protect your account and the service against unauthorized access and abuse; to answer your questions; and to comply with legal obligations.

The automatic categorization of your transactions uses rules, including the ones you define. We do not use your data to make decisions that have legal effects on you, such as granting or denying credit.

We do not sell your personal data or use it for advertising.

Under article 4 of Law 19.628, we process your data with your consent, which you give when you create your account and when you turn on specific features such as the bank connection, after being informed of their purposes in this policy.

We also process the data needed to provide the service you subscribed to under the Terms of service and to comply with the legal obligations that apply to us.

We only share data with the following providers, which process it on behalf of Plenor to provide the service:

Amazon Web Services (AWS): hosting of the application and the database, and sending of service emails through Amazon SES.

Floid SpA: connection with your bank, only if you connect an account. It receives your RUT and your bank password for each request and returns the information of your accounts to us.

Fintoc: connection with your bank, only if you connect an account through Fintoc. You enter your bank password in Fintoc's window, which does not share it with Plenor, and Fintoc returns the information of your accounts to us.

Flow: processing of payments for paid plans, only if you subscribe to one.

Google: sign-in, only if you choose to sign in with your Google account.

We do not sell, rent or transfer your personal data. Beyond these providers, we only disclose data when a law or a competent authority requires it.

Our infrastructure runs on Amazon Web Services in the us-east-1 region (Northern Virginia, United States). This means your data is stored and processed outside Chile.

AWS processes that data on behalf of Plenor under its services agreement, and we apply the security measures described in this policy wherever the data is processed. By using Plenor you consent to your data being stored in the United States.

We protect your data with connections encrypted over HTTPS, passwords stored as hashes, sessions in secure HttpOnly cookies signed by our server, a record of security events on accounts, and a read-only bank connection that does not store your password.

No system is completely secure. If a security incident affects your data, we will let you know. If you find a vulnerability, write to security@plenor.cl.

We keep your data while your account is active. Your bank password is never kept.

You can delete your account at any time from Settings › Account. When you do, we delete your personal and financial data right away, disconnect your banks at Fintoc and cancel your subscription at Flow. When the deletion is complete, we send you an email confirming it.

Your data is gone from our systems no later than 30 days after you delete your account, backups included.

After you delete your account, we only keep data for these reasons: to meet a legal or tax obligation, your payment records and receipts (boletas), for 6 years and outside the application, at Flow and in our accounting; to prove that we handled your request, a deletion record with its date and a code computed from your email with a secret key, which does not contain your email, for 4 years; and if there is a pending or unexpired claim or dispute, only the data needed for that claim, until it is resolved or expires. Data we keep for these reasons is used only for the purpose that required keeping it.

We also keep aggregate statistics, such as counts or monthly totals, that never identify a person.

Under Law 19.628 you have the right to access your personal data and know where it comes from, why it is stored and who it is disclosed to; to ask for it to be corrected if it is wrong, inaccurate, misleading or incomplete; to ask for it to be deleted or blocked; and to object to our continued processing of data you gave us voluntarily.

You can delete your account and your data directly from Settings › Account, under Delete account. To exercise the other rights, or to ask for deletion by email, write to contacto@plenor.cl from the email address on your account and tell us which right you want to exercise. We may ask for additional information to verify your identity. Exercising these rights is free of charge.

If we do not answer your request within two business days, or we refuse it for a reason the law does not allow, you can go to the civil court (juez de letras en lo civil) of the domicile of Plenor SpA, under article 16 of Law 19.628.

You can withdraw your consent at any time by writing to contacto@plenor.cl. Withdrawal is not retroactive, which means it does not affect processing carried out before.

If you withdraw your consent for the bank connection, we will disconnect your bank. If you withdraw it for the service as a whole, we will have to close your account.

Plenor is only for people over 18 and we do not knowingly collect data from minors. If you believe a minor has given us their data, write to contacto@plenor.cl and we will delete it.

Plenor only uses cookies it needs to work: a secure HttpOnly session cookie (session) that keeps you signed in for up to 7 days; temporary cookies that protect Google sign-in and expire within minutes; a cookie that remembers your language (NEXT_LOCALE); and a cookie that remembers whether the application side menu is open (sidebar_state). We also store preferences such as the light or dark theme in your browser.

We do not use advertising or analytics cookies or tools. If you block cookies in your browser, you will not be able to sign in.

We may update this policy. Each new version will be published on this page with its effective date and version number. If the changes are significant, we will let you know by email before they take effect.

Chilean Law 21.719, which amends Law 19.628, takes effect on December 1, 2026, and we will update this policy to comply with it.

For privacy questions or to exercise your rights, write to us at contacto@plenor.cl. To report a security issue, write to security@plenor.cl.