Privacy

What we keep, in plain words.

Three Statement is run by Pursuit Labs, LLC, a Florida company. Here is everything it stores about you, and where it goes.

Before you sign in

You can build a whole plan without an account. Until you sign in, the plan stays in your own browser and we never receive it. Clearing your browser data clears it, so download the JSON file if you want a copy you keep. The little we do count before you sign in is under Usage statistics below.

Your email address

We keep your email address so you can sign in and so your plans are saved to your account. Sign-in codes are sent through Resend, an email service, and we store each code only in a scrambled form that expires a few minutes after it is sent. We do not sell or rent your address, and we do not send marketing email to it.

Sign-in sessions

When you sign in we keep a scrambled session token and the times it was made and last used. To stop abuse of the sign-in form we keep a scrambled form of your internet address and of your email address for a short while, then delete it.

The plans you save

A saved plan is stored in the account database on Cloudflare in the United States, along with its name and when it was last changed. A plan is the assumptions you typed about a business. We do not connect to your bank, we do not ask for a login to your accounting system, and we never receive your real transactions.

We do not sell your plans, we do not share them, and we do not use them to train anything. Someone at Pursuit Labs can open an account's data when you ask for support or when we have to keep the service running, and not otherwise.

Usage statistics

We count what the app is used for so we can make it better. A page opened, a plan built, an export, a sign-in, an upgrade: each one is a row that holds the name of the thing that happened, the time, and either your account or a random id your browser made for itself. Your email address is never in one.

For a plan saved to an account we also keep a summary of what it works out to. That is figures such as revenue by year, the cash the plan opens with, the lowest it reaches, and what it would take to fund it. We keep it so we can see what the product is being asked to do without opening anybody's plan.

If you have not signed in we keep no figures from your plan at all. What is sent is a range in place of a number, such as "100k to 1M", along with which template you started from and how many years the plan covers.

Cloudflare Web Analytics counts page views for us. It sets no cookie and it does not follow you from site to site.

None of this is sold and none of it is shared.

Payments

If you subscribe, Stripe handles the payment. Checkout runs on Stripe's own page, so your card number is never typed into ours and we never see it. Stripe receives your email address and your billing details. We keep the Stripe customer number, which plan you are on, whether it is active, and when the period ends.

Cookies

One cookie of ours keeps you signed in. There are no advertising cookies, and the page counter described above sets none either. The app also uses your browser's own storage to hold a plan you have not saved to an account, and a random id that lets us count usage without knowing who you are.

Other companies

The site, the app and the database run on Cloudflare in the United States. Payments go through Stripe. Sign-in email goes through Resend. The pages load their type from Google Fonts, so Google receives the request for those font files. That is the whole list.

Keeping and deleting

Your plans are kept while your account exists. Email Contact from the address on the account and we delete your plans and your sign-in sessions and close the account. If you have paid, we keep the record of the payment for our books, so your email address stays on that record.

You can also delete any single plan yourself from inside the app.

Changes

If this page changes, the date below changes with it.

Last updated 6 September 2026.