Cloud planning account terms
Version: cloud-storage-managed-v1. Cloud availability is checked in the workspace. These terms apply when you sign in with Google or email for private cloud planning.
Sign-in and cloud storage
The notice below the Google and email sign-in actions links to these terms and the privacy notice. Selecting Continue with Google, Sign in, or Create account accepts this version for the ArthaCanvas account that successfully signs in. Acceptance is recorded against that verified account before financial writes are permitted. A restored sign-in session alone does not create a new acceptance. There is no separate activation form or agreement checkbox inside the workspace.
Signing in does not enable optional Gemini product help or analytics. Selecting Send question to Gemini after its disclosure enables that optional help setting for this account in this browser. Analytics stays off unless you explicitly allow it. Both choices can be changed or withdrawn in Account preferences. No financial plan is sent to Gemini.
Private plans are saved to your ArthaCanvas cloud account. There is no new local-only persistence option or local saving fallback. Without completing sign-in, you may explore temporary samples. A cloud outage can leave edits unsaved; keep the page open or download an encrypted copy.
Email/password accounts must verify their email before private cloud access. Passwords are managed by Firebase Authentication. Password-reset and verification links use Firebase’s managed email flows. Existing Google sign-in remains available. Firebase may associate verified Google and password sign-ins using the same email; ArthaCanvas identifies plan ownership by the authenticated account UID, not an email lookup.
Data and access
Cloud plans may contain financial values, household or client details, notes and contacts. Google-managed services encrypt data in transit and at rest. Authorized project operators can access these contents. This is not end-to-end or zero-knowledge encryption. Google App Check/reCAPTCHA processes security-verification information when cloud access is checked. Cloud storage does not send financial plans to Gemini; product-help explanations have a separate consent choice.
Existing device files
This release does not migrate existing local plans. Signing in does not upload or delete those files. Cloud account recovery and encrypted downloads do not constitute a local-save option.
Recovery and deletion limits
Use the same ArthaCanvas account and its verified sign-in method to reopen successfully saved cloud plans on another device. No separate account recovery code is required. Downloaded encrypted backups have their own separate recovery codes; keep those files and codes safely and separately. Ordinary PDF, JSON, XML and CSV exports contain readable financial information.
Cloud Trash is recoverable storage, not permanent erasure. Up to ten prior checkpoints remain available while retained; restoring one preserves the current saved version within that same limit. Trash does not expire automatically. To delete your ArthaCanvas account, open Account → Delete ArthaCanvas account (also linked from Privacy & clients). When this service is enabled, review the irreversible scope, verify recent account access if requested, and explicitly confirm. Account deletion removes live cloud planning data and the Firebase Authentication record used to sign in to ArthaCanvas. It does not delete your Google account, local/downloaded copies or billing/legal records. A queued request is not completed deletion; the receipt reports planning-data cleanup and ArthaCanvas sign-in-record deletion separately. Keep this tab open or download the private deletion receipt before leaving. After signing out, use Account → Open a private deletion receipt to check it. The receipt remains available while cleanup is pending and expires seven days after completion; expiration or closing the browser does not cancel cleanup. Never share this secret receipt. Signing in later may create a new account; it does not undo deletion. The database is configured for daily managed backups retained for seven days and seven-day point-in-time recovery. Deleting live plans does not immediately remove retained backup copies. Controlled recovery must honor completed and pending erasure requests; no recovery or erasure timeline is promised. Minimal erasure-control records, containing account/profile identifiers, creation generations and timestamps rather than plan contents, may be retained longer to prevent erased data from returning during recovery. Keep independent encrypted downloads.
Planning limitations
Model results depend on your inputs and assumptions. They are not guarantees or investment recommendations. Review your plan and exports before relying on or sharing them. Encryption and sign-in do not establish certification or blanket privacy-law compliance.