Privacy Policy

On the standalone website, the information you enter to build your plan (accounts, balances, holdings, income, expenses, debts, scenarios and saved profiles) is stored in your browser's local storage and does not leave your device unless you use one of the features below. Clearing your data in Settings deletes it from that browser. Files you export are saved wherever you choose.

What is processed: the financial description you send for a projection and the plan inputs needed for follow-ups, including modeled age, household status, US state, income, assets, debts, spending, scenarios and assumptions. Use approximate or fictional figures. Do not submit names, account or card numbers, government identifiers, precise addresses, health information, passwords or other credentials. FinP4l receives the task-specific inputs ChatGPT sends to its tools, not your full chat history or ChatGPT login.

Temporary storage: our relay on Cloudflare holds the plan snapshot, settings, Undo state and calculated summary so the pane can reopen and support follow-ups in the same chat. Access ends 30 minutes after the plan was created and automatic cleanup is scheduled then. Editing does not extend that window. The pane uses memory instead of the website's saved local plan. There is no FinP4l account history or cross-chat plan lookup. Chat routing metadata is hashed; the pane also needs a signed access capability.

AI processing: creating inputs, requesting an AI correction or adding a conversational what-if sends relevant inputs to our shared AI service and Groq through Cloudflare AI Gateway. We request that guest calls bypass Gateway logging and caching. Guest descriptions and generated profiles are excluded from our benchmark database, usage analytics and team-chat copies. Calculations and manual scenario-library, switch and settings changes run in the pane without an AI request; the relay still receives their updated state.

Other retention: rate-limit counters use a hashed chat identifier and expire within 24 hours; request IP addresses are used for per-minute abuse controls. Our hosting and AI providers process operational metadata under their policies. Groq may retain inputs and outputs for reliability or abuse investigations for up to 30 days, or longer if legally required; see Groq's data policy. The relay's 30-minute limit does not delete messages or tool results from ChatGPT. Those follow your ChatGPT data settings and OpenAI's policies.

Your controls: choose which inputs to provide, use Undo or scenario switches, stop using the tools, and use ChatGPT's chat and connected-app controls. Closing or deleting a chat does not immediately erase a relay snapshot; its fixed expiry still applies. A fresh projection creates a new transient plan. No bank linking, trades or payments are provided by the guest simulator. Privacy questions: hello@finp4l.com.

These only run when you use them.

AI profile drafting and What-If ("Describe it to AI"). We send your description and summary figures from your plan (age, retirement age, income, totals of assets, debts and spending, and the family status and location you entered; in Update mode, also the names and amounts of your existing items) to our server and to Groq, the AI provider, through Cloudflare AI Gateway, which keeps a log of these requests. We keep a copy of your description and the generated profile to improve the generator and the peer benchmarks, unless you turn off usage data or peer-comparison sharing in Settings. Please leave names, account numbers and other identifying details out of your description.

AI suggestions. Scenario suggestions and the written peer-comparison summary send summary figures from your plan, without item names. The portfolio advisor sends ticker symbols, weights and gains, not dollar amounts. Transaction categorizing sends merchant names and descriptions only. Answers may be cached on our servers for up to 30 minutes.

Peer comparison. When you click Compare, we add an anonymous copy of your profile (amounts by type, age, state, family status and cost-of-living tier) to the benchmark pool and keep it to build benchmarks. It is not linked to your name or email. You can turn this off in Settings, under Privacy & Consent.

Bank linking (Plaid). You sign in to your bank through Plaid; your bank login never reaches us. Plaid gives our server a read-only access token, which we keep while your bank is linked, for up to one year; disconnecting the bank in the app deletes it. We request up to 90 days of transactions. They are held on our server for up to 7 days, until your browser imports them, and are then stored only in your browser.

Stock and option prices. We send the ticker symbols you hold to our market-data provider to get prices, betas and dividends.

Feedback. When you send feedback we receive your text and rating, the screen you were on, your approximate location (city, region and country), a short list of your recent actions in the app (without amounts or names) and, if you ask us to let you know when it is resolved, your email. Feedback is shared with our team in a private chat channel and a private issue tracker.

Supporter membership and calls. To confirm supporter status, we keep the email you used with our membership payment provider, for up to one year after your last membership change. Booking a call sends your name, email and topic to our calendar.

Professional and employer interest forms. What you enter in these forms is shared with our team.

What: which features and screens you use and actions you take (such as adding an item or running a scenario; for some actions, the name or type you gave an item, a scenario amount, or the start of an AI description), the page you came from, your browser and device type, your approximate location (city, region and country, from Cloudflare and ipapi.co), a random ID stored in your browser and a hashed IP address. We also share AI descriptions and their approximate location with our team in a private chat channel.

Why: to see which features help, find bugs, and decide what to build next.

How long: detailed usage records are deleted after 90 days. Aggregate counts are kept.

Turning it off: Settings, under Privacy & Consent, Usage Analytics. It takes effect after the page reloads. While it is off, we do not send usage events, share AI descriptions with our team, or keep copies of AI-drafted profiles.

Like any website, our servers see your IP address. We use it for up to 24 hours to enforce daily limits on AI features, and store only a hashed form, with usage data and AI-drafted profiles.

These providers process data for us under their own terms:

• Cloudflare (hosting, servers, storage, AI Gateway and logs)
• Groq (AI)
• Plaid (bank linking)
• our market-data provider
• ipapi.co (approximate location)
• Trustpilot (the review widget, which loads from Trustpilot)
• Discord (team chat)
• GitHub (private issue tracker)
• our membership payment provider

• Turn off usage data or peer-comparison sharing in Settings, under Privacy & Consent.
• Skip the optional features above.
• Disconnect a linked bank in the app.
• Clear your data in Settings, or export it to a file first.

For any request, email hello@finp4l.com. Because FinP4l has no accounts, records on our servers are not tied to your name, so we may not be able to find yours. Tell us what you used (for example, the email you gave with feedback) and we will help where we can.

FinP4l is an educational modeling tool, not professional financial, investment or tax advice. Projections are estimates based on your inputs and assumptions, and actual results may vary significantly.

FinP4l is an educational simulator for people aged 13 and older and is not directed to children under 13. Young learners should use fictional figures rather than personal or family financial details. Optional banking and other third-party services have their own eligibility rules. If you believe a child under 13 has provided personal information, contact us so we can investigate and remove information we can identify.

All connections to FinP4l use encrypted HTTPS, and access to our servers and data stores is limited to the team. No system is perfectly secure, so keep identifying details out of free-text fields.

We will update this policy when our practices change, and the date at the top will change with it. FinP4l is operated by DI SW Ventures, LLC. Questions: hello@finp4l.com.