Legal

Privacy Policy

Effective date: July 6, 2026

This Privacy Policy explains what information My Retirement Coach ("we", "us", "our") collects, how we use it, and the choices you have. By using our website and services (the "Service"), you agree to this policy.

Who we are. My Retirement Coach and MeetMRC OS are products of The Vault Studios, Inc. MeetMRC OS is the platform that powers the My Retirement Coach experience at meetmrc.com.

Information we collect

Information you give us — such as your name, email address, and any details you submit through forms, sign up, or support requests.
Billing information — payments are processed by third party payment processors. We do not store full card numbers on our servers.
Usage and device data — pages viewed, actions taken, approximate location, browser type, and similar analytics collected automatically through cookies and similar technologies.
Inputs you choose to enter — holdings, balances, and goals you add manually are used to power features you request.
Connected financial account data — if you choose to connect a bank, card, or other financial account, we receive financial data from that account through our connectivity provider, Plaid (described below).

Connecting your financial accounts (Plaid)

You can choose to connect your own financial accounts to the Service. We use Plaid Inc. ("Plaid") as our account connectivity provider. When you connect an account:

You authenticate directly with your financial institution through Plaid. We never receive or store your bank username or password.
Plaid provides us with financial data from the accounts you connect, which may include account names and types, account balances, and transaction history such as dates, amounts, descriptions, merchant names, and categories.
Our access is read only. The Service cannot move money, make payments, or initiate transactions on your accounts.
Plaid's handling of your information is governed by Plaid's own privacy policy, available at plaid.com/legal.

What connected financial data is used for

To identify recurring bills, subscriptions, and income from your transaction history.
To categorize spending and organize your transactions.
To calculate cash flow and present your private financial dashboard and summaries.
To keep your information current through ongoing updates from Plaid.

We use your connected financial data solely to provide these features to you. We do not use it for advertising, and we do not sell it.

How we use information

To provide, operate, maintain, and improve the Service.
To communicate with you about your account, updates, and support.
To personalize features and content.
To monitor usage, prevent fraud or abuse, and keep the Service secure.
To comply with legal obligations.

How we share information

We do not sell your personal or financial information. We share information only with service providers who help us run the Service, when required by law, or in connection with a merger, acquisition, or sale of assets. Our service providers include:

Plaid — secure connection to your financial accounts.
Supabase — database and authentication.
Vercel — application hosting.
Stripe — payment processing.
Analytics providers — to measure and improve the Service.

These providers are permitted to use your information only to perform services for us, under their own security controls, and never to sell or monetize it.

How we protect your data

Data is encrypted in transit using TLS between you, our Service, and our providers.
Sensitive access credentials for connected accounts are encrypted at rest using authenticated encryption (AES 256 GCM) and are never exposed to your browser.
Your records are scoped to your account through per user access controls at the database layer, so one user cannot access another user's data.
Incoming account update notifications are cryptographically verified before they are processed.

We use reasonable safeguards to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention

We retain your personal and financial information for as long as your account is active or as needed to provide the Service, and for legitimate business or legal purposes. When you disconnect a financial institution, we remove the stored access credential for that connection and stop retrieving new data from it.

Data deletion requests

You are in control of your data:

You can disconnect any connected institution at any time inside the Service. This removes the stored access credential for that connection and stops further data retrieval.
You can request deletion of your account and associated data by emailing support@meetmrc.com. We will delete your data except where we are required to retain it for legal or legitimate business purposes.

Cookies

We use cookies and similar technologies to operate the site, remember preferences, and measure performance. You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

Your choices

You may update your account information, opt out of marketing emails using the unsubscribe link, disconnect connected institutions, or request deletion of your account by contacting us. Depending on where you live, you may have additional rights under applicable privacy laws.

Children

The Service is intended for adults aged 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18.

Changes

We may update this Privacy Policy from time to time. Changes are effective when posted on this page with a new effective date. Your continued use of the Service means you accept the updated policy.

Contact

Questions about this policy, or requests about your data? Email support@meetmrc.com or use our contact page.