Privacy Policy

Version 1.6 · Effective October 7, 2026 · Terms of Service

The Plan is a private, secure website that helps condominiums, cooperatives, homeowners’ associations and other residential buildings prepare for the sudden loss of a key person. It is operated by TwoBros Digital LLC, a Maryland limited liability company. Each organization’s site is private and is not directed to the public. This policy explains, in plain terms, what we collect, why, who can see it and how we protect it.

What we collect

Information an organization adds: continuity plans; Building Facts; staff and board rosters with names, titles, work contact details and photographs; job descriptions; vendors and contract dates; documents such as governing documents, contracts, reports and manuals; and answers to worksheets and questionnaires.
Email sent to an organization's Inbox address: from the people the organization lists as its management, we keep the sender, subject, date, the email's text and its attachments until an administrator adds them to the organization's documents or declines them; declined emails and their files are deleted after 30 days. Email from anyone else is turned away: we keep only its sender, subject and the reason, for 30 days.
Account information: your name, email address, your role in the organization and your sign-in details (passwords are stored only in a scrambled, one-way form).
Emergency Vault entries: encrypted in your own browser before they reach us. We store only the encrypted form and cannot read it. The name of each system recorded (for example “BuildingLink, administrator”), who administers it and when it was last updated are not encrypted, so the organization can check that sign-ins are being kept.
Security and activity records: sign-ins, pages viewed, changes made, emails sent, the date and time of each, and the internet (IP) address used. These keep the site secure and let the organization’s administrators see who did what, and when.
Enquiries: the name, email, phone number and organization details you send through the form on our home page, and, if you choose to answer them, the follow-up questions that come after it: how many buildings and units, how the building is run and by which management company, which key jobs it has, where its records are kept, how soon you need help, and the name and work email of the person who will run your account and of your Board President; and the starter pack documents you choose to send through the private link we email you (for example governing documents, budget, staff list without pay or personal details, vendor contacts, management agreement and insurance summary). They are kept privately and, if we set up your organization, become its documents and are read by the AI service described below; if we don't, they are deleted on request or within a year.

We ask organizations not to add residents’ personal details, staff pay, benefits, birthdays or medical information, government identification numbers, or bank and card numbers, and not to store passwords anywhere except the Emergency Vault. If such material is sent by mistake, it is set aside and not used.

Cookies

We use only essential cookies, needed for signing in and staying signed in. They store no advertising or tracking information. We use no third-party analytics, no advertising cookies and no outside trackers. Because we set only necessary cookies, no cookie-consent banner is required.

Cookie	Purpose	How long it lasts
PLANSESS	Keeps you signed in as you move between pages.	Until you sign out, close the browser, or are inactive for 2 hours
PLANTRUST	Set only if you choose to trust a device after a two-step sign-in code, so you are not asked for a code every time on that device.	60 days, or until you choose “Forget all trusted devices” on your account page

If the site is installed on a phone or computer as an app, it keeps our logo, icons and a small “you are offline” page on the device so it can open without a connection. It never stores your organization’s pages or information there.

How we use information

Only to provide the Service to your organization: showing plans and records to the people your organization invites, sending the emails the Service needs (sign-in codes, invitations, reminders, and Emergency Vault notices), reading documents your organization chooses to add so that answers can be proposed for its approval, keeping the site secure, and answering your enquiries. Nothing more.

To show an organization who controls its website, domain and email, the Service looks up public records about the organization's own domain names (for example its registration record through the public RDAP service at rdap.org, its DNS settings, and its website's front page). Only the domain name is sent; no other information about you or the organization.

Artificial intelligence

Some features ask Anthropic’s Claude artificial-intelligence service to read an organization’s material: adding a document or information to be read, drafting a practice drill from a plan, suggesting compliance items, drafting a new board member briefing from Building Facts and current records, or answering a question asked of the Help assistant (which reads only the Help pages, never your organization’s records). Questions asked of the Help assistant are kept so the Help can be improved, and a question it cannot answer is emailed, with your name and email address, to The Plan’s support so a person can reply. Only the material that feature needs is sent, under business terms that do not allow it to be used to train their models. Nothing proposed is saved until a person in the organization approves it. Sensitive Building Facts answers, Board-only documents and Emergency Vault entries are never sent.

Who can see it

Only people your organization invites, at the level it chooses (administrator, editor, viewer, or vault only). Material can be marked Board only. Staff contact details are shown to editors and administrators only.
Each organization’s information is kept separate, and no other organization can reach it.
Not us, unless you let us in. While your organization is being set up, before your board approves using the Service, our support team has administrator access so it can help build your account (items marked private stay hidden). When a board officer records the board’s approval, that access ends, unless the officer chooses otherwise, and the date is kept. From then on our own staff have no access to your organization’s pages. If you want help, an administrator can give our support team Editor access for a few days; every administrator is emailed, every page we view is in your activity log, Board-only and private items stay hidden, and the access ends on its own or whenever an administrator ends it. Our technical staff, who run the servers, can reach stored data while maintaining them; they look at an organization’s information only to fix a problem it has reported, or when the law requires it. Emergency Vault entries are encrypted in your browser, so nobody here can read them.
Your board stays in control. At least two board officers are administrators. If they can’t be reached, a board member can ask to become one; the request records their email, name and reason, the other board members and the administrators are emailed, and it goes ahead only if board members agree and no administrator stops it.
Your Emergency Vault can be opened only by you, or in an emergency by your organization’s trustees following published rules, with everyone told at every step.
Service providers who help us run the Service, only as needed to do so: our hosting provider (Hostinger), which also sends our email, and Anthropic, for the document reading described above. When billing begins, our payment processor will handle card payments; we will not see full card numbers.
Calendar links you choose to create: if you subscribe to your organization's dates in Outlook, Google Calendar or another calendar app, that service receives each date's title, who is responsible, the vendor and a link back here (never notes, documents or passwords), and stores it under its own privacy terms. The link is private to you; you can replace or remove it at any time, and it stops working if you lose access.
We may disclose information if the law requires it, to protect the Service or others, or as part of a sale or transfer of our business, in which case this policy continues to apply.

The private site is never listed to the public or to search engines.

How we keep it secure

Encrypted in transit: every connection uses secure HTTPS.
Vault encryption in your browser: Emergency Vault entries are encrypted before they leave your device; not even the website can read them.
Documents kept private: uploaded files are stored outside the public website and are given only to signed-in members allowed to see them.
Two-step sign-in for administrators and Board members, with a code sent by email.
Automatic sign-out after 2 hours without activity.
Access is logged, so administrators can see who looked at and changed what, and when.

Who owns the content

The information your organization and its people add to the Service (your plans, records, documents, photographs and answers) belongs to your organization and the people who contributed it. It is not owned by us. We store and display it so your organization’s site works, and your organization may change or remove it at any time.

The Plan itself is separate. Its software (the underlying code), its design and “look and feel,” its logo, and the plan templates, question banks, worksheets, text, graphics and other material produced by TwoBros Digital LLC are the property of TwoBros Digital LLC and are protected by copyright and other intellectual-property rights. They are provided to your organization for use with the Service and may not be copied, resold or reused without our permission. A plan completed for your organization from one of our templates belongs to your organization; the template itself remains ours.

We never sell or share for advertising

We do not sell, rent or trade your information, and we never share it with anyone for advertising or marketing. Information stays within your organization and the service providers listed above.

How long we keep it

Your organization’s information is kept while it has an account. Earlier versions of changed or deleted Emergency Vault entries are kept, still encrypted, for one year so that an emergency opening is not defeated by deleted entries. After an account ends, your organization may ask for a copy of its plans and documents within 30 days; after that, its information may be deleted. Backups are overwritten over time in the normal course.

Your choices

You can update your own account details and sign-out devices from your account page. To correct, export or remove information about you that an organization has added, please contact that organization’s administrator, who controls it; we will help them do so. You may also contact us directly.

Children

The Service is for organizations and their adult staff, board members and advisers. It is not directed to children, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy. Changes will be posted here with a new version number and effective date.

Contact

Questions about privacy: write to us through the form on our home page, or reply to any email you have received from the Service.