Privacy Policy

1. Information we collect

a. Account information

When you sign up, our authentication provider, Clerk, collects your name, email address, and password (or, if you sign up with a third-party account such as Google or Microsoft, the basic profile information that account shares with us — typically your name, email address, and profile photo). We never see or store your Google or Microsoft password, and we only request the minimum profile scopes needed to create and secure your Retireez account (basic profile and email). We do not request access to your Gmail, Google Drive, Outlook mail, OneDrive, calendar, contacts, or any other data in those accounts.

b. Financial planning information

To generate your retirement projections, you provide financial and personal details such as your birth date, marital/household status, income, employment status, government benefit elections (CPP/OAS), account balances and contribution room (RRSP, RRIF, TFSA, LIRA, non-registered, cash savings), mortgage or debt details, and spending goals. This is sensitive information, and we treat it accordingly (see “How we protect your information” below).

c. Payment information

If you subscribe to Retireez Pro, billing is processed by Stripe. We do not store your full credit card number on our servers — Stripe collects and processes it directly under its own privacy policy. We retain limited billing metadata (e.g., subscription status, plan, and transaction history) needed to administer your account.

d. Usage, device, and analytics data

We use PostHog for product analytics and Vercel Analytics /Speed Insights for aggregate traffic and performance metrics. These tools may collect information such as pages visited, feature usage, device/browser type, approximate location (derived from IP address), and timestamps. We use Sentry to capture error and performance diagnostics when something goes wrong, which may incidentally include technical context about your session.

e. AI features

Optional AI features (such as plan summaries and the AI Coach) send relevant parts of your plan data and your questions to our AI model provider, Anthropic (Claude), in order to generate a response. This data is used to fulfill your request and is not used by us to train models.

f. Communications

We use Resend to send transactional emails (e.g., welcome emails, subscription confirmations). We do not send marketing email without your consent.

If you ask a free calculator to email your results, we use the address you enter to send them once. The email contains the numbers you entered and the results; we don't store them. We add your address to our mailing list only if you tick the box to join it, and every list email has an unsubscribe link.

2. How we use your information

• To create and maintain your account and authenticate you (including via Google or Microsoft sign-in, when you choose it).
• To run the retirement, tax, and Monte Carlo simulations that power your projections.
• To process payments and manage your subscription.
• To send you service-related communications (confirmations, security alerts, support replies).
• To monitor, secure, debug, and improve the Service.
• To comply with legal obligations and enforce our Terms of Service.

3. How we share your information

We do not sell your personal information. We share information only with the service providers (“subprocessors”) who help us operate Retireez, each acting under contractual confidentiality and data-protection obligations, and only to the extent necessary for the purpose described:

• Clerk — authentication and identity/session management.
• Stripe — subscription billing and payment processing.
• Anthropic — AI-generated plan summaries and coaching responses.
• PostHog, Sentry, Vercel Analytics/Speed Insights — product analytics, error monitoring, and performance diagnostics.
• Resend — email delivery, and our mailing list for people who join it.
• Vercel and Railway — application hosting and infrastructure (frontend, backend, database, and background workers).

We may also disclose information if required by law, to protect the rights, property, or safety of Retireez, our users, or the public, or in connection with a merger, acquisition, or sale of assets (subject to this Policy continuing to apply, or you being notified of any change).

4. International data transfers

Some of the service providers listed above process data outside Canada, including in the United States. Where your personal information is transferred internationally, it remains subject to the safeguards required by PIPEDA, and may become subject to the laws of the receiving jurisdiction, including lawful access by that jurisdiction's authorities.

5. Cookies and similar technologies

We use essential cookies (via Clerk) to keep you signed in, and analytics cookies/local storage (via PostHog) to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

6. Data retention

We retain your account and financial planning information for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or security obligations. You can request deletion of your account and associated data at any time (see “Your rights” below).

7. How we protect your information

We use industry-standard technical and organizational safeguards, including encryption in transit, access controls, and Redis-backed rate limiting to protect the Service from abuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights and choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information (most fields are editable directly in the app).
• Request deletion of your account and personal information.
• Withdraw consent to certain processing (e.g., optional AI features or analytics), where applicable.
• Ask questions or lodge a complaint about how we handle your information.

To exercise any of these rights, contact us at hello@retireez.io. We will respond within a reasonable time and in accordance with applicable law.

9. Children's privacy

The Service is intended for adults planning their retirement and is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The “Last updated” date above reflects the most recent revision.

11. Contact us

Questions about this Privacy Policy or our data practices can be sent to hello@retireez.io.