USD

Privacy Policy

  • Effective date: 24 September 2026
  • This Policy explains how ResilePlans handles personal data, Client Input, AI processing, Token records and Custom Project information.

1. Introduction

  • 1.1. This Privacy Policy explains how MANAGEMENT RESILIENCE LTD ("ResilePlans", "we", "us", "our") collects, uses, stores and shares personal data when you use resileplans.co.uk and related services (the "Service"). It also explains your rights under applicable data protection law, including the UK GDPR and Data Protection Act 2018.
  • 1.2. Controller: MANAGEMENT RESILIENCE LTD, company number 15587224, registered office at 20 Wenlock Road, London, England, N1 7GU.
  • 1.3. Contact: info@resileplans.co.uk.
  • 1.4. This Policy applies to users of the Service, including individual entrepreneurs, company directors, employees, students and representatives of business customers.

2. Personal Data We Collect

  • 2.1. Data you provide directly may include:
  • Account & Identity Data: name, email address, telephone number, login credentials and Account preferences.
  • Business & Project Inputs: information entered or uploaded for a Business Plan, Financial Model, Pitch Deck or other Deliverable, including business facts, market information, biographies, ownership information and information about team members or stakeholders.
  • Financial Planning Data: projected revenues, costs, salaries, funding requirements and other figures entered into planning tools.
  • Billing Information: billing name, address, VAT or tax information and transaction details. We do not store full payment-card numbers where payment processing is handled by a payment provider.
  • Wallet & Tokens: your purchase history, Token balance and consumption records, including the Token Package purchased (Starter: 900 Tokens; Standard: 5,000 Tokens; Pro: 20,000 Tokens) and the Tokens spent on each generation.
  • Support & Custom Project Data: communications with support and information supplied for a Custom Project, including information required by an assigned specialist where specialist work is expressly included in the accepted written quote.
  • 2.2. Data collected automatically may include IP address, browser and device information, timezone, operating system, login and security logs, feature usage, generation activity and fraud-prevention signals.
  • 2.3. Data received from third parties may include payment confirmation, partial card details, fraud-risk information and, where you choose a supported third-party sign-in service, basic account information provided by that service.
  • 2.4. The Service does not require special category personal data for ordinary use. If you include sensitive information in Client Input, we will process it only as necessary to provide the requested Service and in accordance with applicable data protection law.

3. Why We Process Personal Data & Legal Bases

  • 3.1. Performance of a contract: to create and administer your Account; process Token purchases; maintain your Token balance; generate AI Outputs you request; supply agreed Custom Projects; provide support; and deliver purchased functionality.
  • 3.2. Legitimate interests: to secure the Service, prevent fraud and Token abuse, diagnose faults, understand use of the platform, improve functionality and quality, and communicate relevant service information to business users, where those interests are not overridden by your rights.
  • 3.3. Legal obligations: to maintain accounting and tax records, respond to lawful requests, comply with court orders and meet other legal or regulatory obligations.
  • 3.4. Consent: where consent is required, including for optional marketing communications, non-essential cookies or identifiable testimonials. You may withdraw consent where applicable without affecting processing carried out before withdrawal.

4. Automated Processing & AI

  • 4.1. Outputs requested through the Account dashboard are generated entirely by AI from the information you submit, in both the Standard and Extended output modes. No specialist writes, reviews, verifies or approves an individual Output.
  • 4.2. Client Input may be transmitted to AI and cloud service providers to perform generation and related technical processing. We use contractual, confidentiality and security measures appropriate to the relevant processing.
  • 4.3. Specialist involvement occurs only for a Custom Project where specialist work is expressly included in the accepted written quote.
  • 4.4. The AI generation features are drafting and planning tools. They do not make automated decisions that determine your legal rights, credit eligibility or access to a regulated financial product on behalf of ResilePlans.

5. Sharing, Service Providers & International Transfers

  • 5.1. We share personal data only where reasonably necessary to operate the Service, fulfil an Order, comply with law or protect legitimate interests. Recipients may include:
  • AI & Cloud Providers: providers used for hosting, infrastructure, AI processing, storage and related technical services.
  • Consultants and Custom Project specialists: if you purchase a Custom Project whose accepted written quote includes specialist work, we share only the information reasonably necessary for the tasks stated in that quote with the assigned specialist. Access is limited to the project, subject to confidentiality obligations and appropriate security controls. Specialists do not review individual AI Outputs generated through the Account dashboard.
  • Payment & Fraud-Prevention Providers: providers used to process Visa/Mastercard transactions, verify payments and detect fraud.
  • Professional Advisers: lawyers, accountants, insurers and other professional advisers where reasonably necessary.
  • Authorities or Other Recipients Required by Law: where disclosure is required by a lawful request, court order or legal obligation.
  • 5.2. Some service providers may process data outside the UK or EEA. Where required, we use an applicable adequacy mechanism, the UK International Data Transfer Agreement/Addendum, Standard Contractual Clauses or another lawful transfer safeguard.

6. Retention of Data

  • 6.1. Generated Documents: we may retain Business Plans, Financial Models, Pitch Decks and related Outputs in your dashboard while your Account remains active so that you can access or edit them. Where deletion controls are available, you may delete documents from your Account.
  • 6.2. Inactive Accounts: if an Account remains inactive for 24 months, we may delete or anonymise Account content and generated documents, subject to records we need to retain for legal, accounting, fraud-prevention or dispute purposes.
  • 6.3. Financial Records: transaction and accounting records relating to Token purchases and refunds may be retained for up to six years or another period required by applicable law.
  • 6.4. Custom Project Data: information used for a Custom Project may be retained for the duration of the project and afterwards where reasonably necessary for contractual records, disputes or legal claims.
  • 6.5. Security and Support Logs: technical, security and support records are retained only for as long as reasonably necessary for the purpose for which they were collected, subject to legal requirements.

7. Security & Confidentiality

  • 7.1. We use reasonable technical and organisational measures designed to protect personal and business data, including encrypted transmission, access controls and separation of payment-processing functions from business-plan content where practicable.
  • 7.2. Access to Client Input and Deliverables is limited to authorised personnel and service providers who need access for operation, support, security or an agreed Custom Project and who are subject to appropriate confidentiality and access obligations.
  • 7.3. No internet-based service can guarantee absolute security. You are responsible for protecting your password and for promptly notifying us if you suspect unauthorised Account access.

8. Your Data Protection Rights

  • 8.1. Depending on the circumstances and applicable law, you may have rights to request access, rectification, erasure, restriction, portability, objection to certain processing, and withdrawal of consent.
  • 8.2. Some rights are subject to exceptions, including where we must retain information for legal, accounting, fraud-prevention or dispute purposes.
  • 8.3. To exercise a right, contact info@resileplans.co.uk. We may need to verify your identity before acting on the request and will respond within the period required by applicable law.

9. Cookies & Similar Technologies

  • 9.1. We use cookies and similar technologies to maintain sessions, support Account and Token functionality, remember preferences, protect the Service and, where you consent, measure performance or marketing attribution.
  • 9.2. Further information, including how to manage non-essential cookies, is provided in our Cookies Policy.

10. Contact Details & Complaints

  • 10.1. MANAGEMENT RESILIENCE LTD
  • 10.2. Registered office: 20 Wenlock Road, London, England, N1 7GU
  • 10.3. Company number: 15587224
  • 10.4. Email: info@resileplans.co.uk
  • 10.5. Telephone: +44 7874 487210
  • 10.6. If you believe we have mishandled your personal data, you may complain to the Information Commissioner’s Office (ICO) in the United Kingdom. We would appreciate the opportunity to address your concern first, but this does not affect your right to complain to the ICO.