Privacy Policy

Personal information you disclose to us. We collect personal information that you voluntarily provide when you register on the Services, express interest in our products and Services, participate in activities on the Services, or otherwise contact us. This may include:

• names
• phone numbers
• email addresses
• contact preferences
• passwords

Sensitive information. When necessary, with your consent or as otherwise permitted by applicable law, we process financial data and credit worthiness data.

Payment data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and associated security code. All payment data is handled and stored by Stripe. You may find their privacy notice at stripe.com/privacy.

Social media login data. We may provide you the option to register using your existing social media account details. If you choose this, we collect certain profile information as described in “How do we handle your social logins?” below.

Application data. If you use our application(s), we may request to send you push notifications regarding your account or certain features. You can opt out in your device’s settings.

Information automatically collected. We automatically collect certain information when you visit, use, or navigate the Services, including log and usage data (IP address, device information, browser type, activity in the Services, error reports) and device data (computer, phone, or tablet identifiers, operating system, and configuration). Like many businesses, we also collect information through cookies and similar technologies, described in our Cookie Notice at retrofimoney.com/cookie-policy.

Information collected from other sources. To enhance our ability to provide relevant marketing, offers, and services, we may obtain information about you from public databases, joint marketing partners, affiliate programs, data providers, and social media platforms.

We process your personal information for a variety of reasons, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries and offer support.
• To send administrative information such as changes to our terms and policies.
• To fulfill and manage your orders, payments, returns, and exchanges.
• To request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications, in line with your preferences.
• To protect our Services, including fraud monitoring and prevention.
• To evaluate and improve our Services, products, marketing, and your experience.
• To identify usage trends and comply with our legal obligations.
• Financial insights. To generate personalized financial insights and forecasts using AI processing of your financial data.

If you are located in Canada, this section applies to you. We may process your information if you have given us express consent, or where your permission can be inferred (implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted to process your information without consent, for example for fraud detection and prevention, to comply with a subpoena or court order, or where the information is publicly available and specified by regulation.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us and require access to do that work. The third parties we may share personal information with are:

• Affiliate marketing programs — CJ Affiliate Program
• AI service providers — Anthropic and OpenAI
• Retargeting platforms — Google Ads Remarketing
• Web and mobile analytics — Google Analytics and PostHog
• Website performance monitoring — Sentry
• Financial data aggregation — Plaid
• User auth — Supabase
• Cloud hosting — Vercel
• Background job processing — Trigger.dev
• Transaction & marketing email — Resend

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some help us maintain security, prevent crashes, fix bugs, save preferences, and assist with basic site functions. We also permit third parties and service providers to use online tracking technologies for analytics and advertising.

To the extent these technologies are deemed a “sale” or “sharing” under applicable US state laws, you can opt out as described under “Do United States residents have specific privacy rights?” below. Specific information is set out in our Cookie Notice at retrofimoney.com/cookie-policy.

Google Analytics. We may share your information with Google Analytics to track and analyze use of the Services, including Remarketing with Google Analytics. To opt out, visit tools.google.com/dlpage/gaoptout.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (“AI Products”). We provide the AI Products through third-party service providers (“AI Service Providers”), including Anthropic. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products.

Our AI Products are designed for AI predictive analytics and AI insights.

How to opt out. To opt out, log in to your account settings and update your user account.

Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we receive certain profile information (which may include your name, email address, and profile picture). We use this information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, other uses of your personal information by your third-party social media provider.

We will only keep your personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than twelve (12) months past the termination of the user’s account. When we have no ongoing legitimate business need to process your information, we will delete or anonymize it, or, where that is not possible (for example, backup archives), securely store and isolate it from further processing until deletion is possible.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will not be able to defeat our security. Transmission of personal information to and from our Services is at your own risk.

We do not knowingly collect, solicit data from, or market to children under 18 years of age (or the equivalent age specified by law in your jurisdiction), nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the parent or guardian of such a minor. If you become aware of any data we may have collected from children under age 18, please contact us at support@retrofimoney.com.

In some regions (like Canada), you have certain rights under applicable data protection laws. These may include the right to request access and obtain a copy of your personal information, to request rectification or erasure, to restrict processing, to data portability, and not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review.

Withdrawing your consent. If we are relying on your consent, you have the right to withdraw it at any time by contacting us. This will not affect the lawfulness of processing before its withdrawal. To exercise any right, email privacy@retrofimoney.com.

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this Privacy Notice.

If you are a resident of a state with a comprehensive privacy law, you may have the right to confirm whether we process your personal information, access and correct or delete it, obtain a portable copy, and opt out of targeted advertising, the sale of personal information, or profiling in furtherance of decisions with legal or similarly significant effects. To exercise these rights, email privacy@retrofimoney.com. We will respond within the timeframe required by applicable law, and you will not be discriminated against for exercising your rights.

RetroFi offers optional household and family sharing. If you enable it, certain financial summaries and account data become visible to the household members you invite. You control who is invited and can remove members or leave a household at any time in your account settings.

You can turn off AI-generated insights and forecasts at any time from your account settings; doing so stops further AI processing of your data for that feature going forward.

RetroFi uses Plaid Inc. (“Plaid”) to enable secure connections to your financial institutions. When you choose to link a bank account, you will be redirected to Plaid’s secure interface, where you authenticate directly with your bank. RetroFi never sees or stores your banking username or password.

Data we receive from Plaid. Through Plaid, we may receive account and routing numbers, account balances, transaction history (merchant names, amounts, dates, categories), account holder name and identity information, and account type (checking, savings, credit card, etc.).

How we use this data. We use Plaid-sourced data solely to provide RetroFi’s features, including calculating your Safe to Spend estimate, generating cash flow forecasts, detecting subscriptions, and providing AI-powered insights.

Data retention. Plaid-sourced transaction and account data is retained for as long as your account remains active and your bank connection remains linked. If you disconnect a bank account or delete your RetroFi account, this data will be deleted in accordance with our data retention practices described above.

Revoking access. You may disconnect any linked bank account at any time through your RetroFi account settings, which immediately stops RetroFi from receiving new data from that account. You may also revoke access through your financial institution or through Plaid’s consumer portal at my.plaid.com.

No sale of financial data. We do not sell your Plaid-sourced financial data to third parties. Plaid’s collection and use of your information is governed by Plaid’s own Privacy Policy, available at plaid.com/legal.

Yes, we will update this notice as necessary to stay compliant with relevant laws. Updates will be indicated by a revised “Last updated” date, and where changes are material, we will notify you.

If you have questions or comments about this notice, email us at privacy@retrofimoney.com or write to Cumulative LLC, d/b/a RetroFi, 30 Gould St, Suite N, Sheridan, WY 82801, United States.

You can request to review, update, or delete your personal information at any time by emailing privacy@retrofimoney.com. We will consider and act upon any request in accordance with applicable data protection laws.