Privacy Policy

1. Information We Collect

We collect the following categories of information:

• •Account information: Your name, email address, phone number, date of birth, and profile details when you create an account or update your profile.
• •Financial data: Account balances, transaction data, and account metadata retrieved through Plaid when you link a financial institution. We also collect information you enter manually, such as debts, goals, retirement accounts, and manual assets.
• •Document data: Financial documents (statements, agreements, coaching summaries) you upload to the Document Center, including file metadata (name, type, size, hash).
• •Coaching data: Meeting notes, action items, private coach notes, and messages between you and your assigned coach.
• •Consultation inquiries: Name, email, plan interest, and concern submitted through the consultation form.
• •Usage data: Information about how you interact with the Platform, including pages visited, features used, and device/browser information.
• •Technical data: IP address, browser type, and access logs used for security and platform operation.

2. How We Use Your Information

We use your information to:

• •Provide, personalize, and improve your coaching experience and dashboard.
• •Display aggregated financial insights, net worth, cash flow, budget tracking, and goal progress.
• •Facilitate coaching sessions, action item management, and meeting scheduling.
• •Communicate with you about your account, meetings, action items, and educational content.
• •Process document uploads, validation, storage, and retrieval.
• •Operate the Platform securely, including fraud prevention and access control.
• •Respond to support cases, complaints, and disputes you submit.
• •Manage consultation inquiries and enrollment.
• •Comply with legal obligations and respond to lawful requests.

3. Financial Data and Plaid Integration

When you connect a financial institution through Plaid, you authorize Plaid to retrieve your financial account data and transmit it to the Platform. Plaid acts as a secure intermediary — we do not store your banking login credentials. Plaid handles authentication with your financial institution and transmits data such as account balances, transaction history, and account metadata.

We use this data solely to power your coaching dashboard, including cash flow analysis, net worth calculation, budget tracking, debt management, and retirement planning. We do not use your financial data for marketing or advertising purposes.

You may disconnect linked accounts at any time through the Platform settings or by revoking access through your financial institution. Disconnecting an account stops new data retrieval; previously retrieved data remains subject to our Retention Policy.

Plaid data synchronization may lag behind actual bank postings by one to two days. We are not responsible for delays or inaccuracies in data provided by Plaid or your financial institutions.

4. Document Center and File Security

Documents you upload to the Document Center are stored in private storage with access controls. Access is limited to you, your assigned coach, and authorized administrators. Signed URLs are generated on demand for preview and download and are time-limited.

All uploaded files undergo structural validation (file type, file size, format, and filename safety checks). The Platform does not perform malware scanning. Structural validation is not a guarantee that a file is free of malicious content. You are responsible for scanning files with your own antivirus software before uploading.

Document file hashes (SHA-256) are computed for duplicate detection and integrity verification. File metadata (name, type, size) is stored with the document record. File contents are not inspected beyond structural validation.

Legacy documents uploaded before the implementation of structural validation are retained but marked as unverified.

5. How We Share Information

We do not sell your personal information. We share data only in the following circumstances:

• •Service providers: We share data with Plaid (financial data aggregation), our hosting provider, and email service providers who help operate the Platform. These providers are bound by confidentiality obligations and may only use your data to provide services to us.
• •Assigned coaches: Your assigned coach can view your coaching data (dashboard, goals, documents, messages) to support your engagement. Coaches may not access data for clients not assigned to them.
• •Legal compliance: We may disclose information when required by law, court order, or government regulation, or to protect the rights, property, or safety of RFL, our users, or others.
• •Business transfers: In connection with a merger, acquisition, or asset sale, we may transfer information to the successor entity. We will notify you before such a transfer if required by law.
• •Support cases: Information you submit through support, complaint, or dispute cases is visible to authorized administrators and may be shared with your assigned coach for resolution.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect your personal information. These include encryption in transit (TLS) and at rest where applicable, access controls, role-based permissions, audit trails, and regular security reviews.

Row-level security (RLS) ensures that each user can only access their own data (and coaches can only access data for their assigned clients). Administrator access is restricted to authorized admin-role users.

No system is perfectly secure. We cannot guarantee the absolute security of your data. In the event of a security breach, we will notify affected users and take appropriate remedial action as required by applicable law.

7. Data Retention and Deletion

We retain your personal and financial data in accordance with our Retention Policy. Key principles include: data is retained while your service is active; upon service end, most records become eligible for deletion after 90 days followed by a 30-day recovery window before permanent deletion; identity-verification documents are retained for 90 days after verification; and legal holds may override standard retention schedules.

You may request deletion of your documents and account at any time through the Platform settings. Deletion requests initiate the recovery process described in the Retention Policy, giving you a window to restore deleted items before they are permanently purged.

For full details, please review our Retention Policy.

8. Cookies and Analytics

We use cookies and similar technologies to operate the site, maintain your session, remember preferences, and understand usage patterns. You can control cookies through your browser settings. Disabling cookies may limit some Platform functionality. We do not use cookies for targeted advertising.

9. Your Privacy Rights

Depending on your location (e.g., if you are a resident of California, Colorado, or another jurisdiction with consumer privacy laws), you may have rights to:

Access the personal information we hold about you. Request correction of inaccurate personal information. Request deletion of your personal information (subject to retention requirements). Opt out of the sale or sharing of your personal information (we do not sell your data). Limit the use of sensitive personal information. Receive notice of what personal information we collect and how it is used.

To exercise these rights, contact us through the Contact page. We will verify your identity before processing your request. We may decline requests that would compromise the security of the Platform or that are not required by law.

Note that we do not process sensitive financial information (such as account numbers or Social Security numbers) through the consultation inquiry form. Such information, if submitted, will be rejected.

10. Children's Privacy

Our services are not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete it. If you believe we have collected such information, please contact us through the Contact page.

11. Do Not Track

We do not currently respond to "Do Not Track" signals as there is no standardized protocol for doing so. We use cookies and analytics as described in this policy.

12. International Users

If you access the Platform from outside the United States, your information will be processed in the United States. By using the Platform, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. If we make material changes, we will provide notice through the Platform or by email. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or your personal information, please reach out to support@reedfinanciallab.com or via our Contact page. We will make reasonable efforts to respond to inquiries in a timely manner.