Privacy Policy

Information we collect

We collect account information, pilot-profile inputs, uploaded payroll documents, user-confirmed payroll values, extraction evidence, settings needed to provide the service, and a versioned record of payroll-document authorization including its acceptance timestamp.

Operational logs may record technical events, trace identifiers, document types, processing stages, and error codes. Production logs are designed not to contain payroll amounts, uploaded filenames, or stable user identifiers.

How information is used

Information is used to authenticate users, securely process payroll documents, prepare retirement estimates, improve estimate confidence as new paychecks are uploaded, provide educational content, prevent abuse, and troubleshoot failures.

The payroll-document authorization record is retained to document the user's permission for secure storage, extraction, and processing. It does not grant the user rights they do not otherwise possess.

Retirement Flight Deck does not sell personal information or use uploaded payroll documents for advertising.

Storage and service providers

Authentication, database records, and private document storage are provided through Supabase. Application hosting and server-side processing are provided through Vercel. These providers process information only as needed to operate the service under their applicable terms.

Retention and user controls

Payroll information is retained while the account remains active so estimates can improve over time. Users can download a structured data export, delete payroll data while retaining their profile, or permanently delete their account.

Backups and provider-level recovery copies may persist temporarily according to service-provider retention schedules.

Security

Payroll documents are stored in a private bucket and access is restricted to the authenticated owner. The application uses row-level database security, authenticated server processing, security headers, and request-rate controls. No online service can guarantee absolute security.

Contact and review

A monitored privacy contact address and any jurisdiction-specific disclosures must be added before paid public launch. This draft must be reviewed by qualified counsel.