Privacy Policy

Effective date: March 9, 2026

TechForest LLC ("we", "us", "our") is a Massachusetts limited liability company that builds privacy-first software products. This policy explains what data we collect across our websites and products, why we collect it, and your rights as a user.

1. Data We Collect

We collect only what is necessary to provide our services:

  • Account data: Email address (via Google OAuth or password registration) and an optional display name. We do not collect your full legal name, street address, SSN, or financial account numbers.
  • Financial planning data (RetireQuest): Loan amounts and APRs, monthly expense categories and amounts, investment fund types and amounts, and savings balances. All financial data is anonymous — no bank account numbers or policy numbers are collected or stored.
  • Location: City and state only, used solely for cost-of-living comparisons. No street address is collected.
  • Usage data: IP address and session information for security and fraud prevention. We do not use third-party analytics that track cross-site behavior.
  • Cookies: One essential authentication cookie (httpOnly, secure) that maintains your login session in our products. See our Cookie Policy for details.

2. How We Use Your Data

  • Providing and improving our software services
  • Authenticating your account and maintaining session security
  • Calculating cost-of-living comparisons using BLS CPI data
  • Detecting and preventing fraudulent or abusive activity

We do not sell, rent, or trade your data to third parties.

3. Third-Party Services

  • Google OAuth: Used for sign-in in our products. Governed by Google's Privacy Policy.
  • Supabase: PostgreSQL database hosting. Your data is stored in a Supabase-managed database.
  • Vercel: Frontend hosting. Vercel may log request metadata (IP, user-agent) for CDN and security purposes.
  • Google Cloud Platform: Backend hosting via Cloud Run.

4. Data Retention

Your account data is retained for as long as your account is active. If you request account deletion, all personal data will be permanently deleted within 30 days. Financial planning data (expenses, loans, investments) is deleted immediately upon account deletion.

5. Your Rights

You have the right to:

  • Access: Request a copy of all data we hold about you.
  • Correction: Update inaccurate data through your account settings.
  • Deletion: Request permanent deletion of your account and all associated data.
  • Portability: Export your data in JSON or CSV format.

6. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected and how it is used
  • Right to delete personal information
  • Right to opt out of the sale of personal information

We do not sell personal information to any third party. To exercise your rights, contact us at privacy@techforest.org.

7. European Users (GDPR)

If you are located in the European Economic Area, our lawful basis for processing your data is:

  • Contract: Processing necessary to provide the service you signed up for.
  • Legitimate interest: Security monitoring and fraud prevention.

In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay.

8. Children

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete that information immediately.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice in the relevant product or by email. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

10. Contact

For privacy requests, data access, or deletion requests:

← Back to TechForest.org