Understand planning-data privacy and security boundaries

Choose what you enter, export, and share

A retirement plan can reveal household income, assets, health-cost assumptions, and family intentions. Use recognizable planning names without adding passwords, full account numbers, or unrelated personal documents.

For questions about storage location, retention, sharing, or use of data, read the current Privacy Policy from the page footer. If it does not answer your question, use its privacy contact before providing information you are uncomfortable sharing.

Use the security controls that match your concern

Use Account Settings to change credentials, enable multifactor authentication, and revoke sessions. Use a unique password and do not share authentication codes. If the concern is a privacy request, use the contact named in the current policy and send only the information needed to identify the request.

Holdings import processes the file you deliberately choose. It is not an ongoing brokerage connection and does not require a brokerage password. Review the preview and avoid uploading unrelated documents or unnecessary identifiers.

Before exporting or sharing a report, read what it contains and choose a secure delivery method. A convenient export can contain enough planning detail to be sensitive even when it contains no login secret.

Understand AI-assisted support before sharing details

Submitting feedback does not itself request an AI draft. Authorized support staff may later ask OpenAI to draft a reply using your category, title, message, current approach, source page path, error reference and recent conversation. The request omits the separate account email and browser/device fields and staff-only notes.

Details you type into feedback or a follow-up are not automatically removed and may be sent to OpenAI for that draft. Keep passwords, authentication codes, full account numbers and sensitive financial documents out of the conversation. For a concern about AI-assisted support, contact [email protected] before including sensitive details.

Ask YARCalc can also send a question, financial summary and relevant page facts to OpenAI when AI interpretation is needed. A request not to store AI responses for later retrieval does not guarantee zero provider retention. The Privacy Policy explains both flows and the limits of the retention statement.

Read AI questions and support drafts in the Privacy Policy from the page footer for the complete explanation.

Keep access secrets and planning information separate

Use Sign out all devices in Account Settings when a lost device or shared session may still have access. Changing your password also ends other signed-in sessions. Secure the email account used for recovery as well.

Never put a password, recovery code, authenticator secret, full account number, brokerage login, or complete financial document into an ordinary support email. A useful support request can name the page, approximate time, action, and safe error reference.

Ask for the data action you actually need

Use the Privacy Policy’s contact for access, correction, export, or deletion questions. Specify the request and provide only the information needed to identify your account.

Changing a subscription, signing out, deleting one plan, and requesting account deletion are different actions. Check the policy’s retention and deletion terms before assuming that any one of them removes all planning data.

Request account deletion or a change to your planning data

Use the privacy contact in the Privacy Policy to request account deletion, deletion of planning data, a correction, or a copy of your information. Say which action you want and whether it includes your saved plans and results. Provide only the information needed to identify the account; do not send passwords, authentication codes, or complete financial documents.

Before requesting deletion, keep any reports you need and read the policy’s retention and deletion terms. Do not assume that every record is removed immediately. Signing out, changing access, deleting one What-if, and asking to delete the account have different effects. Ask the privacy contact to confirm the scope and outcome of your request.