Privacy Policy

Information we collect

We collect account information, pilot-profile inputs, uploaded payroll documents, user-confirmed payroll values, extraction evidence, settings needed to provide the service, and a versioned record of payroll-document authorization including its acceptance timestamp.

Operational logs may record technical events, trace identifiers, document types, processing stages, and error codes. Production logs are designed not to contain payroll amounts, uploaded filenames, or stable user identifiers.

How information is used

Information is used to authenticate users, securely process payroll documents, prepare retirement estimates, improve estimate confidence as new paychecks are uploaded, provide educational content, prevent abuse, and troubleshoot failures.

The payroll-document authorization record is retained to document the user's permission for secure storage, extraction, and processing. It does not grant the user rights they do not otherwise possess.

Retirement Flight Deck does not sell personal information or use uploaded payroll documents for advertising.

Storage and service providers

Authentication, database records, and private document storage are provided through Supabase. Application hosting and server-side processing are provided through Vercel. Cloudflare Turnstile processes limited network and browser signals to protect sign-up and sign-in from automated abuse. Resend may deliver support-notification email after the support request is securely stored. These providers process information only as needed to operate the service under their applicable terms.

Private third-party malware scanning is not currently active. Payroll documents will not be sent to such a provider unless a commercial private-processing service is approved, configured, tested, and disclosed here before activation. No live payment provider or product-analytics service is currently connected.

Browser storage

The browser stores the authenticated session so returning users can remain signed in. Limited local interface preferences may also be stored, including verification guidance, dismissed plan notices, reminder timing, and dismissed review prompts. This browser-local state is not used for advertising and does not contain uploaded PDF contents or payroll amounts.

Retention and user controls

Payroll information is retained while the account remains active so estimates can improve over time. Users can download a structured data export, delete payroll data while retaining their profile, or permanently delete their account.

Backups and provider-level recovery copies may persist temporarily according to service-provider retention schedules.

Security

Payroll documents are stored in a private bucket and access is restricted to the authenticated owner. The application uses row-level database security, authenticated server processing, security headers, and request-rate controls. No online service can guarantee absolute security.

Contact and review

A monitored privacy contact address and any jurisdiction-specific disclosures must be added before paid public launch. This draft must be reviewed by qualified counsel.