Drawsmart Retirement LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit drawsmartretirement.com (the "Website") and use our services.
1. Information We Collect (and Do Not Collect)
We only collect information that is strictly necessary to provide our services, support our users, and maintain the functionality of our Website.
- Financial & Simulation Data (Zero Persistence): The financial inputs and demographic data you enter into our retirement modeling tools are not stored on our servers. All simulation data is stored and processed locally on your device within a secure client-side vault. When you run a simulation, your data is routed to our stateless math engine microservice solely for calculation. Once the results are generated and returned to your device, the raw data payload is instantly destroyed. We do not save, store, or persist any of your financial inputs in any database.
- Account Information: When you register for an account, we collect your email address, which serves as your username, and a password. A valid email address is required to facilitate secure logins and password resets.
- Customer Support Inquiries: When you contact us for questions or technical support, we collect your email address and any other information you choose to provide in your message so that we can respond to your inquiry.
- Payment Information: We do not collect, store, or process your credit card numbers or bank account information. All payment processing is handled securely by our third-party payment processor, Stripe. When you make a purchase, you provide your payment details directly to Stripe, whose use of your personal information is governed by their own Privacy Policy.
- Automatically Collected Data: Because our Website is hosted on Google Cloud, standard server logs may automatically collect basic, non-identifiable technical information when you visit the site, such as your IP address, browser type, and time of visit, to ensure the site functions securely and properly.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your secure account.
- To process password resets and provide technical support.
- To respond to your direct inquiries and customer service requests.
- To maintain the security, functionality, and performance of our Website.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We do not run advertising campaigns or share your data with advertisers. We only share your information with trusted third-party service providers who assist us in operating our business:
- Hosting Services: Our Website is securely hosted on Google Cloud.
- Payment Processing: All purchases and financial transactions are securely processed by Stripe.
These providers only have access to the basic account or operational information necessary to perform their specific functions and are obligated to protect your data.
4. Cookies and Tracking
We use essential cookies strictly necessary to provide our services, such as keeping you securely logged into your account during your session. We do not use marketing cookies, tracking pixels, or third-party advertising tools.
5. Data Security & Local Encryption
We take the security of your data very seriously and have architected our platform to ensure maximum privacy:
- Local 256-bit AES Encryption: The personal financial data you enter into the application is encrypted locally on your own device using military-grade 256-bit AES encryption.
- Decoupled Architecture: As mentioned in Section 1, our core mathematical engine operates as a stateless microservice. It exists purely to execute calculations. It does not possess the capability to persist, record, or save your encrypted data payloads.
- General Security: For the basic account information we do hold (such as your login email), we implement reasonable technical and organizational security measures to protect it from unauthorized access, disclosure, or destruction.
6. Your Data Rights
Because DrawSmart operates on a strictly Zero-PII architecture, the only personal data we store on our servers is your account email address and encrypted password. Your custom financial scenarios remain fully encrypted and stored securely on your local device. All payment and credit card information is managed entirely by our secure payment processor, Stripe. Depending on your location, you may have the right to request access to, correction of, or deletion of your account data. You can instantly exercise your right to deletion by using the 'Delete Account Forever' feature located in your Account Settings' Danger Zone. This action permanently wipes your local vault data, deletes your account from our servers, and immediately cancels your Stripe subscription. For other data requests, please contact us at support@drawsmartretirement.com.
7. Contact Us
If you have any questions or concerns about this Privacy Policy, our microservice architecture, or how we handle your data, please contact us at:
