Privacy

What FIREproof collects, and why

• Account information: your email address, name, and password (stored hashed, never readable), or your Google sign-in. Used to run your account and sign you in.
• Financial-plan information: the balances, income, expenses, account types, assumptions, and other inputs you enter, and your saved simulations. Used to run your simulations and show you the results.
• Subscription information: your plan, status, and renewal dates. Card details stay with Stripe. Used to process your subscription and send billing and renewal notices.
• What you post: feedback board posts, comments, and votes, and the display name you choose. Used to run the feedback board.
• How you found the site: the referring page and campaign tag from your first visit. Used to understand which links bring people in.
• Technical information: your IP address, browser and device information, the pages you request and when, error reports, and analytics identifiers. Used to keep the service secure, prevent abuse, fix bugs, and understand overall site usage.

Cookies and browser storage

FIREproof stores a few things in your browser: your sign-in, your display preferences, and how you found the site. Google Analytics sets its own cookie to count visits. FIREproof does not use advertising cookies and does not let advertising companies track you across websites. Because there is no advertising tracking to turn off, FIREproof does not change its behavior in response to browser Do Not Track signals.

The services that help run the site

These companies process data on FIREproof's behalf and receive only what they need to provide their service.

Stripe

Processes Pro and Planner payments and subscriptions. Receives your email address, billing details, and the card details you enter into Stripe's payment form, which never touch FIREproof servers.

DigitalOcean

Hosts the servers, the database where your account and plans are stored, and its backups.

Amazon SES

Sends account and billing email, such as verification, password resets, and renewal notices. Receives your email address and the content of those emails.

Google

Handles "Sign in with Google" if you choose it. Also runs Google Analytics, which may receive a pseudonymous cookie identifier, your FIREproof account number, the pages you visit, browser and device information, approximate location, how you found the site, and events such as sign-ups and purchases. Google sees your IP address while processing this but Analytics does not store it. Analytics never receives your email address or the contents of your plans. Google Signals and advertising features are turned off.

Sentry

Reports errors so I can fix bugs. A report can include your IP address, browser information, technical details about the error, and a replay of recent page activity. Replays are configured to mask page text, form entries, and labels, so your figures are not visible in them.

What you choose to share

• Share links: anyone with a share link can view that snapshot of your plan, with names hidden if you choose. Revoking a link stops access through FIREproof, but it cannot recall copies or screenshots someone already made.
• The feedback board: posts and comments are public, even to people without an account. You can post anonymously.
• Financial planners: if you connect your plan to a planner, that planner can see and work on it. When a planner enters a client's information or a prospect fills in a planner's intake form, the planner decides what is entered, and FIREproof handles it under this same policy.

Your choices: access, correction, deletion

Email lauren@fireproofme.com (send an email) from the address on your account to get a copy of your personal information, correct it, or delete your account.

When you delete your account:

• Your account, plans, and saved simulations are removed from the service, and any share links you created stop working.
• Your feedback board posts and comments stay public, shown as written by a "Former member". Ask if you want them removed as well.
• Records of renewal notices sent to you are kept for 6 months after sending, then deleted. Payment records are kept where accounting, tax, fraud-prevention, or payment-dispute rules require.
• Some information can remain for a while in database backups, server logs, and the providers' systems until those records expire on their normal schedules.

Children

FIREproof is not intended for children under 18, and I do not knowingly collect personal information from children under 18.

Users in the EEA, UK, and Switzerland

• Controller: Boland Media & Technology controls your personal data. Contact: lauren@fireproofme.com.
• Legal bases: running your account, simulations, subscription, and service emails is necessary to provide the service you signed up for (contract). Security, abuse prevention, error reports, and site analytics rely on legitimate interests in operating a secure and working service. Payment records are kept to meet legal obligations.
• Transfers: the providers above process data in the United States, under safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
• Retention: account and plan data is kept while your account exists and deleted on request, as described above.
• Your rights: you can request access, correction, deletion, restriction, or a portable copy of your data, and object to processing based on legitimate interests. You can also complain to your data protection authority, such as the Autoriteit Persoonsgegevens in the Netherlands.
• No automated decisions: FIREproof makes no automated decisions with legal or similarly significant effects on you. Simulations are tools you run for yourself.

Changes and questions

If this page changes, the date at the top changes with it. The promises in the short version will not. Questions are welcome at lauren@fireproofme.com.