This policy explains the information MyFinPlan collects, why it is used, and the choices available to users. Questions may be sent to support@myfinplan.net.
Account records may include name, email address, Google account identifier, optional Google profile-picture URL, account and login timestamps, access status, subscription or entitlement records, legal-document acceptance records, and an optional marketing-email preference. Access requests may also contain an optional message.
Users may separately enter sensitive retirement-planning information, including dates of birth, income, assets, tax assumptions, benefits, property, healthcare, and spending information.
Information is used to authenticate users, approve and administer access, operate and secure the service, save and share authorized plans, provide support, maintain subscription entitlements, comply with legal obligations, and send required account or security communications. Marketing messages are sent only when the user separately opts in.
When plan encryption is enabled, supported plan and tax-planner content is encrypted in the browser before storage. The server stores encrypted content, public keys, wrapped plan keys, and encrypted private-key envelopes. MyFinPlan does not receive the encryption passphrase or plaintext recovery code. Account, access, subscription, sharing, and operational metadata are not protected by the plan-encryption key.
MyFinPlan uses service providers including Google for authentication and Amazon Web Services for hosting and email delivery. A future payment provider may process payment and billing information. MyFinPlan should retain provider identifiers and subscription status rather than complete payment-card credentials.
Information is not sold for advertising. Information may be disclosed to service providers needed to operate the service, to collaborators explicitly authorized by a plan owner, when required by law, or to protect users and the service.
Information is retained while an account is active and as reasonably needed for security, support, legal, backup, and billing purposes. Reasonable administrative and technical safeguards are used, but no system can guarantee absolute security.
Users may decline or withdraw marketing email without affecting required account, security, support, or billing messages. Users may contact support to request access to, correction of, export of, or deletion of their account information, subject to applicable retention requirements. Users can download this version from the registration page.
Material changes will be issued as a new version and users may be required to acknowledge the updated policy before continuing.