Privacy Policy

You can use most of RTP without giving us anything. Your inputs save in your browser, not on our servers. If you decide you want a partner in our reviewed network to follow up with you, you give us your email and (optionally) phone, you check a consent box, and we share an anonymized version of your plan on a partner-facing marketplace. One partner can purchase the right to contact you. At that point your name, email, the contents of your plan, and (if you separately consented) your phone go to that one partner. We do not sell your information to anyone outside our reviewed network. We honor California, Virginia, Colorado, Connecticut, Utah, and other state privacy rights below. We honor the Global Privacy Control browser signal.

This Privacy Policy applies to the Retirement Transparency Project website, mobile-formatted views, planning tools, plan reports, emails, and any other RTP service. It does not cover any partner firm's handling of your information after we release it to that partner; the partner's own privacy notice governs there. We name in Section 7 what we hold the partner to contractually.

Anonymous path. You can run the educational journey and the planning tools without giving us your name, email, phone, or any other direct identifier. Your inputs save in your browser using local storage. We do not see them. We do not list you with any partner firm. Site analytics, described in 4(d), are the only data flowing back to us.

Matched path. If you want a partner firm to follow up with you about your plan, you provide your email address (and optionally phone) and you check the consent box described in Section 1 of the Terms of Use. From that point forward, the additional collection and sharing described below apply.

Retirement Transparency Project provides educational tools and content. It is not a registered investment adviser, broker-dealer, insurance agent or insurance producer, Certified Financial Planner, accountant, or attorney. The tools and content on this site are not personalized financial, tax, or insurance advice. Consult your own licensed financial professional before making any financial decision. See the full educational disclaimer at /disclaimer.

(a) Anonymous inputs (browser-local). Your retirement-planning inputs save to your browser using local storage. We do not receive them, we do not see them, and we cannot recover them if you clear your browser. If you switch to the matched path, the inputs are sent to our servers as part of the lead record.

(b) Contact information (matched path). Email is required to be matched. Phone is optional. Both are encrypted at rest and in transit.

(c) Plan and demographic information (matched path). Your age, household state, spending estimate, savings totals (by tax treatment band), Social Security and pension estimates, dream descriptions in your own words, and any other information you entered to build your plan.

(d) Technical and analytics information. Browser type, device type, language, approximate IP-based geography (city/state level), pages viewed, time on page, and referring URL. We use a privacy-respecting analytics tool that does not collect direct identifiers. Site analytics fire only after you accept the cookie banner, or do not fire at all if your browser sends a Global Privacy Control signal.

(e) Email and message logs. When we email you, we log the send, the open (if our provider reports it), and any reply. When you receive SMS from us (only if you consented to SMS), we log the send, the delivery status, and any STOP/HELP/UNSUBSCRIBE reply.

(f) Support and rights requests. When you contact privacy@ or help@, we receive the contents of your message and any attachments, plus your reply-to email.

(g) We do not collect. Social Security numbers, bank account numbers, credit card numbers, driver's license numbers, biometric identifiers, geolocation precise to your home address, health information, or any information about anyone under 18.

1. To run the educational tools and produce your plan.
2. To match you with one partner firm in our reviewed network if you have asked us to.
3. To send you the report and any educational follow-ups you have not opted out of.
4. To respond to your support, privacy, or rights requests.
5. To detect, prevent, and respond to fraud, security incidents, and abuse.
6. To comply with our legal obligations (subpoena, court order, regulatory request).
7. To improve the tools (in aggregate, never reading your individual plan to do so).

When you check the consent box on the matched path, two distinct data flows happen.

(a) Anonymized listing on the partner marketplace. RTP posts an anonymized version of your plan to Transparent Advisor Leads (TAL), a partner-facing marketplace operated as a separate property. The anonymized listing contains things like your age, your household state, approximate asset bands, the goal you selected, and a short headline. It does not contain your name, email, phone number, or any other direct identifier.Partners in our reviewed network can see this anonymized listing and decide whether to purchase the right to be matched with you. Partners outside our reviewed network do not have access to the marketplace at all.

(b) Contact release to one partner firm. When one partner firm purchases the match, RTP releases to that partner only: your name, your email, the contents of your plan, and (only if you separately consented to phone or SMS contact on the form where you entered a phone number) your phone number. Only the one purchasing partner receives any of this. No other partner sees it. The partner may discuss retirement income strategies with you, including annuity products. The partner sells insurance products on commission. From that point forward, the partner's own privacy notice governs how they handle that information; we hold them contractually to (i) only contact you about retirement income and insurance products and the financial-planning context for those, (ii) honor STOP and unsubscribe immediately, (iii) delete the contact information we shared with them if you ask us to, (iv) not resell the information.

(c) What we do not do. We do not sell your information to firms outside our reviewed network. We do not list you with multiple partners at the same time. We do not rank partners by what they pay us. We do not share your information with brokers, data aggregators, or anyone other than the one matched partner and our own service providers as described in 6(d).

(d) Service providers. We use third-party processors to operate the site (hosting, email delivery, SMS delivery, analytics, error reporting, payment processing for partners). Each is contractually limited to the purposes for which we engaged them and bound by confidentiality, data-protection, and security obligations equivalent to ours. We do not authorize them to use your information for their own purposes.

(e) Legal requirements. We may share information when required by law, when responding to a subpoena, court order, or regulatory request, or when necessary to protect the rights, safety, or property of RTP, our users, or others. Where lawful, we will give you notice before doing so.

(f) Business transfers. If we are acquired or merged, your information may transfer as part of that transaction, subject to the same restrictions in this Privacy Policy. If the buyer materially changes the policy, we will notify you and give you the option to delete your data first.

Each partner firm participating in our reviewed network signs an onboarding agreement. The agreement obligates the partner to:

• Only contact you about retirement income and insurance products and the financial-planning context for those.
• Use email as the default channel. Use phone or SMS only if you separately consented to phone/SMS contact at the moment you submitted the lead.
• Honor STOP, HELP, and unsubscribe requests immediately.
• Disclose, in their first communication with you, that RTP was paid a referral fee for the introduction, that the partner's firm sells insurance products on commission, and that there is no obligation.
• Comply with all laws applicable to their own conduct, including TCPA, state telemarketing laws, GLBA, state insurance-licensing rules, and the SEC Marketing Rule where applicable.
• Delete the contact information we shared with them if you ask us to revoke the match.
• Not resell or further share the information we provided.

The partner is solely responsible for their own compliance with each of the above. RTP does not supervise the partner's communications, does not control what products the partner offers, and does not earn a portion of any fees or commissions you later pay the partner.

We use a small number of cookies. None of them collect direct identifiers.

• Strictly necessary. Required for the site to work (session, security). We use these without consent.
• Functional. Remember your interface choices. We use these only with consent.
• Analytics. Aggregate usage measurement. We use these only with consent and only when GPC is not detected.

We do not use advertising or retargeting cookies.

Global Privacy Control (GPC). If your browser sends the Sec-GPC signal or the navigator.globalPrivacyControl property, we treat that as a valid opt-out of the "sale" or "share" of your information under California law and similar state laws. The cookie banner still appears for transparency. Honoring the signal does not require the banner.

The rights below apply to you regardless of where you live. State-specific rights are summarized in Section 10.

(a) Right to know. You can ask us what information we hold about you.

(b) Right to access. You can ask us for a copy of the information we hold about you.

(c) Right to delete. You can ask us to delete the information we hold about you. We will delete it from our active systems within 30 days and from backups on our next backup rotation cycle.

(d) Right to correct. You can ask us to correct inaccurate information about you. The fastest path is to log into RTP and update it yourself.

(e) Right to opt out of marketing. You can opt out of any marketing email or SMS at any time. Reply STOP to text messages. Click unsubscribe in any marketing email. Transactional messages required to operate the service are not subject to opt-out.

(f) Right to revoke a match. You can revoke a pending match before or after contact begins. We will notify the matched partner to stop contact and to delete the information we shared with them.

(g) Right to opt out of the marketplace listing. You can stop being listed in the partner marketplace at any time. Existing listings are removed promptly. If a partner has already purchased the match, the revocation flow in (f) applies.

(h) Right to appeal. If we deny a privacy rights request, you may appeal by replying to the denial email or writing to privacy@retirementtransparencyproject.com with the word APPEAL in the subject line.

To exercise any of the above, use the form below, email privacy@retirementtransparencyproject.com, or use the page at /privacy-choices. We will respond within 45 days. We will verify your identity before fulfilling sensitive requests, in proportion to the sensitivity (we will not ask for more than necessary).

(a) California (CCPA / CPRA). California residents have, in addition to the rights above, the right to opt out of the "sale" or "sharing" of personal information and the right to limit the use of sensitive personal information. California treats RTP's sharing of your plan and contact information with a partner firm in the marketplace as a "sale" or "share" under California law, even though no money flows from you to RTP. You can opt out at /privacy-choices, by replying to any RTP email, or by sending the Global Privacy Control signal from your browser. We do not use or disclose sensitive personal information for purposes other than the ones permitted under CPRA Regulation §7027(m).

(b) Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, Tennessee, Indiana, Minnesota, New Jersey, Kentucky, Nebraska, Maryland, Rhode Island, and other states with comprehensive privacy laws (the list grows). Residents have rights to access, correct, delete, opt out of "sale" or "targeted advertising," and opt out of "profiling in furtherance of decisions that produce legal or similarly significant effects." RTP does not engage in targeted advertising and does not profile users for decisions that produce legal or similarly significant effects. The matchmaking decision is initiated by you, not by an automated decision system; you choose whether to be listed and whether to engage a matched partner.

(c) Florida. Florida residents who provided their phone number for partner contact should also see Section 11C of the Terms of Use and the FL TCPA addendum on the consent screen.

(d) Oklahoma. Oklahoma residents who provided their phone number for partner contact should also see Section 11D of the Terms of Use and the OK TCPA addendum on the consent screen.

(e) Other states. If your state law gives you a right we have not addressed, we will honor it. Contact us.

RTP is not intended for use by anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact privacy@retirementtransparencyproject.com and we will delete it.

(a) Anonymous browser-local data. Lives on your device for as long as you keep it. We never see it.

(b) Contact information for active matches. Held until you revoke the match or until 30 days after the partner reports an outcome, whichever is earlier.

(c) Lead records (matched users). Held for 7 years from the date of the match, then deleted from active systems. This retention period supports our own audit obligations and any regulatory inquiry that may follow.

(d) Anonymized plan data. Held indefinitely for product and engine improvement, with no link back to your identity once contact information is deleted.

(e) Email and message logs. 18 months for delivery and abuse-prevention purposes.

(f) Support correspondence. 3 years for service-quality and dispute purposes.

(g) On deletion request. We delete from active systems within 30 days and from backups on the next backup rotation cycle. Some records may be retained longer where required by law (e.g., tax records, fraud investigation, regulatory hold).

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, role-based access control, audit logging, vendor due diligence, and a written information security program. No system is perfectly secure. If we learn of a security incident affecting your information, we will notify you and any regulator required to be notified, in the time and form required by applicable law.

RTP operates from the United States and the information we collect is processed in the United States. If you are accessing the site from outside the United States, you understand and consent to that processing. We do not currently offer the matching service to users outside the United States.

We may update this Privacy Policy. If a change is material, we will give you at least 30 days' notice by email or in-product notice before it takes effect, and we will update the "Effective date" line at the top. Your continued use after the effective date means you accept the updated Policy. If you do not accept it, you can stop using RTP and delete your data.

Privacy questions and rights requests: privacy@retirementtransparencyproject.com
Security incidents: security@retirementtransparencyproject.com
General contact: hello@retirementtransparencyproject.com
Mail: [LEGAL ENTITY NAME], [registered address]