Privacy Policy

Last updated: June 15, 2026  ·  Effective: June 15, 2026

RetireSmart AI ("we", "us", or "our") is operated by i360HD. This Privacy Policy explains how we collect, use, and protect information when you use retiresmart-ai.com (the "Service").

1. Information We Collect

Information you provide directly:

• Email address — collected when you save a scenario, restore a scenario, or subscribe to Pro. Used to identify your account and deliver your subscription.
• Payment information — processed entirely by Stripe. We never see or store your card number, bank details, or billing address.

Information collected automatically:

• Browser fingerprint — a non-identifying hash generated from your browser and device characteristics, used solely to limit Pro access to a maximum of 3 devices per account. It is never shared or used for advertising.
• Scenario data — your planning inputs (origin country, destination, income, sliders) saved to our servers when you choose to save your scenario. Used only to restore your session.
• Usage analytics — we use Google Analytics to collect anonymised data on page views and interactions. No personally identifiable information is sent to Google Analytics.
• FX rate cache — exchange rates are cached locally in your browser to reduce API calls. This data is not transmitted to us.

2. How We Use Your Information

• To verify your Pro subscription status
• To save and restore your retirement planning scenario
• To limit Pro account access to 3 devices
• To process payments via Stripe
• To send subscription-related emails (receipts, renewal notices) via Stripe
• To improve the Service through anonymised analytics

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.

3. Data Storage

Your email address and scenario data are stored in Cloudflare Workers KV — a globally distributed key-value store operated by Cloudflare, Inc. Data is stored in accordance with Cloudflare's privacy and security standards.

Your browser fingerprint hash and planning preferences are stored locally in your browser (localStorage, sessionStorage, and cookies). This data does not leave your device except as part of Pro verification requests to our server.

4. Third-Party Services

• Stripe — payment processing. Stripe collects and stores your billing information under their own Privacy Policy.
• Cloudflare — hosting, edge network, and KV storage. Subject to Cloudflare's Privacy Policy.
• Google Analytics — anonymised usage analytics. Subject to Google's Privacy Policy. You can opt out via Google Analytics Opt-out.
• Anthropic Claude API — used to power AI-generated visa summaries and retirement insights. Queries do not include personally identifiable information.
• ExchangeRate-API — used to fetch live currency exchange rates. No personal data is transmitted.

5. Cookies

We use cookies and localStorage to store your email, theme preference, and planning state between sessions. These are functional cookies necessary to operate the Service. We do not use advertising or tracking cookies beyond Google Analytics (which uses its own cookies).

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, email us at support@retiresmart-ai.com. We will respond within 30 days.

To delete your saved scenario and account data, email us and we will remove all records associated with your email address from our systems within 7 days.

7. Data Retention

Scenario data is retained until you request deletion or your Pro subscription has been cancelled for more than 12 months, at which point it is deleted automatically. Email addresses associated with active subscriptions are retained for the duration of the subscription and up to 12 months after cancellation for accounting purposes.

8. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. International Transfers

Your data may be processed and stored in data centres outside your country of residence, including in the United States and the European Union, via Cloudflare's global network. Cloudflare maintains appropriate data transfer mechanisms including Standard Contractual Clauses.

10. Security

We use HTTPS for all data in transit. Access to our Cloudflare KV store is restricted to our Worker backend. Stripe handles all payment data and is PCI-DSS Level 1 certified. No system is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy. For material changes, we will notify Pro subscribers by email.

12. Contact

For privacy questions or data requests, contact us at:
support@retiresmart-ai.com