Privacy Policy

We collect the following categories of information when you use FedVetRetirement:

Account Information

• Your name and email address (provided when you create or sign in to your account)
• Account creation date and login timestamps
• Your subscription tier (Free or FedVet Pro)

Financial Planning Inputs

When you build retirement scenarios, we store the data you provide, which may include:

• Date of birth and planned retirement date
• Current salary, GS grade/step, and service computation date (SCD)
• Years of federal civilian service
• VA disability rating and monthly benefit amount
• Social Security estimates and claiming age preferences
• TSP, IRA, and other retirement account balances
• Marital status, spouse information, and survivor benefit elections
• Healthcare plan selections and premium estimates

Usage Data

• Pages visited and features used within the Service
• Feature events (e.g., which tools you interact with) for product improvement
• Device type, browser, and general geographic region (country/state)
• Session duration and navigation patterns

Lead Information

If you submit your email address on our landing page or marketing forms, we retain that email address to send you product updates, retirement planning tips, and promotional communications. You may opt out at any time.

We use the information we collect to:

• Provide, operate, and maintain the Service and your retirement scenarios
• Calculate retirement income projections, tax estimates, and benefit analyses
• Personalize your experience based on your plan and data
• Process subscription payments through Stripe
• Communicate with you about your account, billing, and Service updates
• Send optional marketing emails and retirement planning content (with your consent)
• Identify and fix bugs, improve performance, and develop new features
• Monitor for fraud, abuse, and Terms of Service violations
• Comply with legal obligations

We do not use your financial planning inputs for any purpose other than providing the Service to you. Your scenario data is never used for advertising targeting.

We do not sell, rent, lease, or trade your personal information to any third party for their own commercial purposes.

We may share aggregated, de-identified data (e.g., "X% of users retiring at age 62 have a benefit gap") for research or product development purposes. This data cannot be used to identify you.

We use a limited number of trusted third-party providers to operate the Service. Each is bound by a data processing agreement and applicable privacy law obligations. A complete list is maintained in our internal Data Processing Register.

Stripe, Inc. (Payment Processing)

All subscription billing is handled by Stripe, a PCI-DSS Level 1 compliant payment processor. When you subscribe, your payment information is transmitted directly to Stripe — we never see or store your full card details. We receive and store only a Stripe customer ID, subscription status, and billing interval. Stripe's privacy policy: stripe.com/privacy.

Google LLC (Authentication)

When you choose "Sign in with Google," authentication is handled through Google's OAuth 2.0 service. We receive your name, email address, and Google account ID. We do not receive your Google password. Google's privacy policy: policies.google.com/privacy.

Resend, Inc. (Transactional & Marketing Email)

We use Resend to deliver account emails (billing confirmations, subscription notices, onboarding sequences) and optional marketing communications. Your name and email address are shared with Resend solely to deliver messages addressed to you. We do not share financial planning data with Resend. You may opt out of marketing emails at any time via the unsubscribe link included in every marketing email. Resend's privacy policy: resend.com/legal/privacy-policy.

OpenAI, L.L.C. (AI Coach Features)

Our AI-powered retirement coach features (including personalized insights and strategy recommendations) are powered by the OpenAI API. When you use these features, a structured summary of your scenario data (retirement dates, income projections, identified benefit gaps) is transmitted to OpenAI to generate a response. We do not transmit your name, email address, or account identifiers to OpenAI. OpenAI's API data usage policy: openai.com/policies/api-data-usage-policies.

If you do not wish your scenario data to be processed by OpenAI, do not use the AI Coach features. All other features of the Service function independently of OpenAI.

Replit, Inc. (Cloud Infrastructure)

The Service is hosted on Replit's cloud infrastructure. Your data is stored on servers operated by or on behalf of Replit and is subject to Replit's security controls. Replit's privacy policy: replit.com/site/privacy.

Teqnia Relay (Site Analytics)

We use Teqnia Relay on our production website to understand page usage and product interactions. The analytics service may receive technical information such as page paths, browser or device details, approximate location derived from network information, and interaction events. We do not intentionally send retirement scenario inputs, salary, VA rating, account credentials, or payment-card information to this service.

We do not share your financial planning data (scenario inputs, salary, VA rating, etc.) with any third party for advertising, profiling, or any purpose other than delivering the specific Service function described above.

The Legacy Vault is an optional subscriber feature that allows you to track and organize retirement and survivor planning documents. When you use the Legacy Vault:

• Document names, types, statuses, and tracking metadata are stored in our database.
• The Legacy Vault generates PDF survivor planning reports based on your scenario data — these PDFs are generated on-demand and are not permanently stored on our servers after download.
• We do not scan, analyze, or share the contents of your document records with third parties.
• Document tracking data is deleted when you request account deletion.

If your organization (e.g., a federal agency HR office) participates in a FedVetRetirement Government Pilot Program:

• Aggregate data only: Agency portal contacts see only anonymized, aggregate statistics (e.g., average retirement readiness score, percentage with benefit gaps). No personally identifiable information (PII) is shared with agency administrators.
• No individual identification: Individual user data is never disclosed to an agency, even if you work for that agency.
• Separate consent: If this changes in the future, we will obtain your explicit consent before sharing any individually identifiable information with any employer or agency.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:

• HTTPS encryption for all data transmission
• Secure session management with signed session cookies
• Database access controls and server-side authentication checks
• Regular security reviews and dependency updates

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You use the Service at your own risk with respect to data security.

If you believe your account has been compromised, contact us immediately at support@fedvetretirement.com.

We retain your account information and scenario data for as long as your account is active or as needed to provide the Service.

• Active accounts: All scenario data and account information are retained indefinitely while your account is active.
• Cancelled accounts: We retain your data for up to 12 months after cancellation to allow account reactivation, then delete it.
• Legal holds: We may retain certain information for longer periods if required by law or to resolve disputes.
• Lead emails: Retained until you unsubscribe or request deletion.

Aggregated, de-identified data derived from your usage may be retained indefinitely for research and improvement purposes.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Export: Export your scenario data in JSON format (available within the Service).
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us.
• Data portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at support@fedvetretirement.com. We will respond within 30 days.

The Service uses the following browser storage mechanisms:

• Session cookies: Used for authentication. Required for the Service to function.
• localStorage: Used to store user preferences (e.g., wizard state, dismissed banners) locally on your device. Not transmitted to our servers.
• sessionStorage: Used to track session-level state. Cleared when you close your browser tab.

We use production-site analytics to measure page usage and product interactions. We do not use third-party advertising cookies or sell analytics data for cross-context behavioral advertising.

The Service is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a minor has provided personal information to the Service, please contact us immediately at support@fedvetretirement.com and we will delete that information promptly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information with third parties for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, contact us at support@fedvetretirement.com with "California Privacy Request" in the subject line. We will verify your identity before processing the request and respond within 45 days as required by law.

In the event of a data breach that is reasonably likely to result in a risk to the rights and freedoms of affected individuals, we will:

• Notify affected users without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
• Notify applicable regulatory authorities as required by applicable law.
• Provide notice via email to the address associated with your account and/or via a prominent notice on the Service.
• Include in our notice: the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.

To report a suspected security vulnerability or data breach, email support@fedvetretirement.com with "Security" in the subject line.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Post a notice in the Service or send an email notification for significant changes.
• Archive the prior version in our administrative due diligence records.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: