Effective date: July 26, 2026

1. Scope and contact

This policy applies to the Arrange website at witharrange.com, the editor at app.witharrange.com, and related support communications. In this policy, “Arrange,” “we,” and “us” mean the operator of the Arrange service.

For questions, privacy requests, or complaints, email hello@witharrange.com. If you use Arrange through an organization, that organization may also control how personal information is entered into and used within its plans.

2. Information we process

Account and identity information. When you sign in, we receive an account identifier, name, email address, and authentication details from WorkOS and the sign-in provider you choose.
Plan and collaboration content. If you enable sync, we store the plans you create, including roles, names, rates, costs, scenarios, funding requests, comments, decisions, plan history, membership, invitations, and sharing settings.
Local plan data. Arrange keeps a working copy of plans and view settings in your browser. Without signing in, plan content stays on that device and is not uploaded to Arrange.
Usage and technical information. We process page and feature usage, event times, analytics identifiers, browser and device information, and network information such as IP address. Explicit product analytics events describe actions, such as creating a plan or exporting a file, and are not designed to include plan names, people, rates, costs, comments, or plan structure.
Communications. We process the information you include when you contact us for support, feedback, or a security report.

3. How we use information

We use information to:

provide authentication, local editing, sync, sharing, review, and export;
keep plans consistent across authorized collaborators and devices;
secure the service, prevent abuse, investigate errors, and enforce access rules;
understand feature usage and improve the product;
respond to support, privacy, and security requests; and
comply with legal obligations and protect legal rights.

Where European Economic Area or United Kingdom data-protection law applies, we rely on performance of our agreement with you, our legitimate interests in operating and improving a secure service, consent where the law requires it, and compliance with legal obligations. You are responsible for having an appropriate basis to enter information about employees, candidates, contractors, or other people into a plan.

4. When information is disclosed

We disclose information only as needed for the following:

Service providers. WorkOS provides identity and authentication; Convex provides the synced application database; Vercel hosts the website and app; and PostHog provides product analytics. These providers process information to deliver their services to Arrange.
Sign-in providers. Google, Microsoft, or another provider you choose processes the authentication request under its own privacy terms.
People you authorize. Plan members, reviewers, and recipients of share links receive the information described in the sharing controls.
Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect people or the service, or investigate fraud and abuse.
Business changes. Information may be transferred as part of a financing, acquisition, reorganization, or sale, subject to this policy and applicable law.

We do not sell personal information, use plan content for targeted advertising, or use plan content to train machine-learning models.

5. Browser storage, cookies, and analytics

Arrange uses browser storage to keep local plans, recent-plan information, interface settings, and authentication state. WorkOS uses storage needed to maintain sign-in. PostHog uses analytics identifiers and may use cookies or similar browser storage to recognize a browser and connect activity across witharrange.com and app.witharrange.com.

You can clear or block this storage through your browser. Clearing local storage can permanently remove plans that have not been synced. Blocking authentication storage may prevent sign-in, while blocking analytics does not prevent local planning.

6. Collaboration and public links

Plan members can see content according to their owner, editor, or reviewer access. Review activity records the verified identity of the person taking the action.

A view-only share link can be opened by anyone who has the link and exposes the plan structure, names, and costs included in that view. It does not expose member lists, review requests, comments, or editing controls. Treat a share link like a document link and send it only to intended recipients.

7. Retention and deletion

Unsynced plans remain in your browser until you delete them or clear browser storage. Synced account information, plan content, membership, invitations, share records, and audit history are retained while needed to provide the service and until they are deleted or no longer reasonably necessary. Limited records may be kept longer when required for security, backups, dispute resolution, or law.

Deleting a plan from the current plan list deletes the browser copy. It does not yet delete an already-synced cloud copy. To request deletion of an account or synced plan, email hello@witharrange.com from the address associated with your account. We may need to verify the request and consider the rights of other plan members.

8. International processing

Arrange and its service providers may process information in countries other than where you live. Where required, transfers are handled using recognized legal safeguards or another lawful transfer mechanism.

9. Security

We use access controls, authenticated requests, server-side validation, and encrypted network connections designed to protect information. No online service can promise absolute security. Keep share links and account access secure, and report suspected problems to hello@witharrange.com.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data-protection authority. Email hello@witharrange.com to exercise a right. We will not discriminate against you for making a privacy request.

11. Children

Arrange is a business-planning service and is not directed to children. Do not use the service if you are not old enough to consent to the processing described here under the law where you live.

12. Changes to this policy

We may update this policy as Arrange changes. We will post the revised policy here and update its effective date. If a change materially affects how existing information is used, we will provide additional notice when reasonably possible.