Privacy Policy

Effective: May 8, 2026 · Last updated: October 10, 2026

What we collect

• Account data: email address (for sign-in via Supabase), your name and company (used on reports you generate), a phone number if you choose to provide one, and any display name you set.
• Subscription / billing: Stripe customer ID, subscription status, plan tier, billing period. We do not store credit-card numbers — payment data is held by Stripe.
• Usage: which plans you unlock, when, and from which IP. Search queries, tags, and notes you create on plans.
• Analytics & advertising: we use Google Analytics 4, Google Ads conversion tags, Meta (Facebook) Pixel, LinkedIn Insight Tag, and PostHog product analytics to measure how visitors arrive, navigate, and convert. These tools set their own cookies and may receive your IP address, page URLs, and the conversion events listed below (signup completed, checkout started, subscription completed, credit pack purchased). We do not pass them your name, email, password, or financial data.
• Cookies: first-party session cookies for authentication, plus third-party cookies set by the analytics and advertising vendors above.
• Support & chat: if you use the in-app chat widget (Crisp) or email support, we receive the messages you send and any contact details you include.
• Uploaded content: if you purchase branded reports and upload a firm logo, that logo is stored in publicly accessible storage — by design, since it renders on report pages you share with your clients. Do not upload images you are not willing to have publicly reachable.
• Error & diagnostics data: when something breaks, our error-monitoring vendor (Sentry) receives technical details of the failure — browser, page URL, IP address — so we can fix it.

If you use the old-401(k) finder

The finder at /find-my-401k and our pages about closed plans are for people looking for their own retirement money. You do not need an account to use them, and searching collects nothing that identifies you. We collect personal information only when you give it to us:

• When you ask for a plan’s contact details: your email address, your first name if you give it, and which plan you asked about. We email you a link, and opening it confirms the address is yours. We then send at most two follow-up emails with tips on finding your account. Every one has an unsubscribe link, and unsubscribing does not affect your access to the plan details.
• When you ask for a licensed advisor’s help: your name, email address, and whatever else you choose to add: a phone number, your state, the employer’s name, a rough account balance and a message. We store the exact consent wording you agreed to.
• Phone calls and texts happen only if you gave a number and ticked the separate box agreeing to be called or texted. Otherwise you are contacted by email only.
• A cookie that remembers you opened your emailed link, so other plans open without another email. It lasts up to 30 days and is not used for advertising.
• Technical data with each request (IP address and browser type), used to stop spam and abuse.
• Anonymous counts. We keep a tally of how many times each plan is looked up. The tally records the plan and the date, and nothing about you. We may share those totals, for example with financial advisors.

Who sees it. If you ask for an advisor’s help, we pass your request to one licensed financial advisor so they can contact you about it. That advisor may pay us for the introduction. We pass it on only because you asked us to, we do not pass it to anyone else, and we do not use it for anything else, including marketing unrelated products to you, without your consent. If you only asked for a plan’s contact details, your email address is not given to any advisor. We never ask for your Social Security number, account numbers or passwords, and you should not send them to us.

How long we keep it. Until you ask us to delete it. Email support@401khunter.com from the address you used and we will delete your details and tell any advisor we passed them to.

If you leave a review

The form at /reviews collects your name, your email address, your star rating and what you write, plus your firm and a LinkedIn link if you choose to add them. We read every review before anything is shown. If we publish yours, it appears with your first name and last initial and any role or firm you gave. If you tell us a financial advisor helped you, that advisor’s name and firm may be shown with your review. Your email address is never published. Email support@401khunter.com to have a review removed.

What we do not collect

• We do not sell your personal data to third parties. We share it only with the advisor you ask us to connect you with (see above) and, if you use the Service as a professional, with the retirement-plan partners described below unless you opt out.
• We do not access or store your contact lists, calendar, or other system data outside the Service.
• We do not pass your email, name, or financial data to ad networks or analytics vendors.

Retirement-plan partners (wholesalers and TPAs)

If you use 401kHunter as a financial or retirement-plan professional, you may be contacted by retirement-plan product wholesalers and third-party administrators (TPAs) that we work with, about their products and services. To make that possible we build a professional profile of your account and may share it with those partners:

• Who you are professionally: your name, firm, title and business contact details, and your registration details from public SEC (IAPD) and FINRA (BrokerCheck) records.
• Your firm’s retirement-plan business: summaries compiled from public Form 5500 filings and SEC Form ADV, such as the number and size of plans your firm serves and which recordkeepers those plans use.
• How you use the Service, in aggregate only: for example the plan sizes, regions, or recordkeepers you tend to focus on. We never share which specific plans or companies you have looked up, unlocked, or contacted.

To build this profile we look up professional accounts in the public sources above and on your firm’s public web pages, using AI-assisted web search. We also use it to tell professional accounts apart from personal ones. You can opt out at any time under Settings → Email & contact preferences → Contact from retirement-plan partners; once you do, your profile is no longer shared with partners.

Data we surface about third parties

The Service displays information about retirement plans, plan sponsors, and individuals associated with those plans (e.g., named plan administrators, decision-makers, service providers). This data comes from two sources:

• U.S. Department of Labor Form 5500 filings — public-record data filed by employers under ERISA. This data is publicly disclosable per federal law.
• Apollo.io and similar B2B data providers — third-party-sourced professional contact information (titles, emails, phone numbers, LinkedIn URLs). We display this data only when you explicitly unlock it for a plan, in exchange for a credit.

Individuals named in third-party data may exercise rights to access, correct, or delete their information by contacting the original data provider (Apollo.io, etc.). We will also honor verified takedown requests directed to us — see "Your rights" below.

Use of artificial intelligence

Parts of the Service are powered by AI. Specifically, we use large language models (provided by Anthropic) to generate plan briefs and summaries, to produce client-facing explanations of plan metrics, and to read the publicly filed Form 5500 attachments (audited financial statements) to extract facts such as whether a plan offers a Roth option. An AI assistant also answers the support chat first; a person on our team can read every chat and take over at any time.

• What is sent to AI providers: public-record filing data and public filing PDFs. If you use the support chat, the messages in that conversation are sent so the assistant can reply (plus whether you are signed in). We do not send your password, billing details, or account activity to AI providers.
• Training: our AI providers process this data to return results to us; under our API terms they do not use it to train their models.
• Accuracy: AI-generated content can be wrong. AI outputs in the Service are informational summaries of public filings, not advice — verify anything material against the underlying filing before relying on it.

How we use data

• To provide the Service: authenticate users, process payments, deliver enrichments, render search results, and maintain your pipeline.
• To support customers and respond to inquiries.
• To improve the Service: aggregate usage analytics (no individual targeting), bug investigations, performance monitoring.
• To comply with legal obligations: tax reporting, fraud prevention, response to lawful subpoenas.

Service providers we share data with

• Stripe — payment processing.
• Supabase — authentication and database hosting.
• Vercel — application hosting and edge delivery.
• Resend — email delivery. This covers account email (welcome, receipts, renewal and payment notices, password reset), the optional email you can switch off in Settings (search alerts, follow-up reminders, low-balance notices, tips), and the emails sent to people using the old-401(k) finder. Resend receives the recipient’s address and the message content.
• Apollo.io — decision-maker contact lookup (we send the sponsor name and location to identify the right organization; we do not send your account data).
• Anthropic — AI processing of public filing data and support-chat messages, as described in "Use of artificial intelligence" above.
• Brave Search API — anonymous search queries to identify company domains.
• Crisp — in-app support chat (receives the messages you type into the chat widget).
• Google Workspace (Calendar and Meet) — demo bookings. When you book a demo we create the calendar event and Meet link on our team member’s Google Calendar, which receives your name, email and anything you add to the booking form.
• Sentry — error monitoring (receives technical failure data, including IP address and page URL).
• Upstash — rate limiting infrastructure (receives IP addresses to throttle abusive traffic).
• Google (Analytics 4 + Ads), Meta (Facebook) Pixel, LinkedIn Insight Tag, PostHog — measurement and ad attribution. These vendors receive page URLs, conversion events, IP addresses, and their own cookie identifiers as described above.

Advertising cookies are off until you press “Accept all” in our cookie banner; until then Google receives only cookieless signals that it uses to estimate totals, not to identify you. Google Analytics cookies are on by default in the United States and most other countries, and off by default in the European Economic Area, the United Kingdom and Switzerland until you press “Accept all”. Choosing “Essential only” turns both off everywhere. You can also opt out of advertising-cookie tracking by using a tracking-blocker extension (uBlock Origin, Privacy Badger) or visiting the vendor opt-out pages directly: Google Analytics, Meta, LinkedIn.

Each of these providers acts as a sub-processor under their own privacy commitments. We do not authorize them to use your data for their own purposes.

Subscriptions, renewal, and cancellation

• Paid subscriptions renew automatically at the end of each billing cycle.
• We email you an advance notice roughly 7 days before each renewal, stating the renewal date and how to cancel. This notice is not optional marketing and cannot be disabled.
• Cancelling takes one click from Settings → Billing → Cancel subscription — no phone call, no chat with retention, no more steps than signing up. Cancellation stops the renewal; you keep access through the end of the paid period.
• Optional email categories (search alerts, follow-up reminders, low-balance notices, tips & marketing) can each be turned off in Settings → Email notifications. Transactional email (receipts, payment failures, renewal notices) is always sent.

Retention

• Account data: retained while your account is active, plus 24 months after deletion for tax/audit purposes.
• Billing records: retained per legal requirement (typically 7 years).
• Plan unlocks and notes: retained until you delete them or your account is deleted.
• Server logs: 90 days.

Your rights

Depending on your jurisdiction (CCPA, GDPR, etc.) you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal-retention obligations)
• Export your data in a portable format
• Opt out of any sale of your data (we do not sell data, so this is automatic)
• Opt out of being contacted by retirement-plan partners (Settings → Email & contact preferences)

To exercise any of these rights, email support@401khunter.com. Third parties whose data we display (i.e., named plan decision-makers) may request removal of their entry by emailing the same address.

Security

We use industry-standard security practices: TLS in transit, encrypted database at rest, role-scoped access control. No system is perfectly secure — if you suspect unauthorized access to your account, contact us immediately.

Children

The Service is not directed at, and we do not knowingly collect data from, anyone under 18.

International users

The Service is operated from the United States. If you access from outside the U.S., your data will be transferred to and processed in the U.S. By using the Service you consent to this transfer.

Changes

Material changes to this policy will be communicated via email or in-app notification at least 14 days before they take effect.

Contact

Privacy questions or requests: support@401khunter.com.

By mail: 401kHunter, 12621 N Tatum Blvd #1914, Phoenix, AZ 85032, United States.