Privacy Policy

This page states our formal privacy commitments in the structure most privacy laws expect. For the plain-English day-to-day summary (encryption, two-factor sign-in, account deletion, email preferences), see the About page's Data Privacy & Security Statement - this page doesn't repeat that detail, only adds to it.

1. Information We Collect

We collect only what's needed to operate the service:

• Account information: name, email address, and password (stored one-way hashed, never in plain text).
• Retirement profile data you enter: date of birth, pay and special-pay figures, years of service, pension tier, PTO/leave balances, retirement target, and similar planning inputs.
• Payment information: handled entirely by our payment processor, Stripe - we receive a payment status and a card fingerprint for fraud/duplicate checks, never your full card number.
• Technical data: IP address, browser type, and basic access logs, collected automatically by our hosting infrastructure for security and abuse prevention.

2. How We Use Your Information

• To create and secure your account, and to run the retirement/PTO calculations you request.
• To send required account-security email (sign-in codes, password resets, email verification) and, if you opt in, checklist reminders and occasional product updates.
• To process payment and manage your subscription through Stripe.
• To maintain security, detect abuse or duplicate accounts, and comply with legal obligations.
• In de-identified, aggregate form only, to improve the accuracy of the pension/MOU data this app is built on - individual profile data is never used for this without being stripped of anything identifying.

3. How We Share Information

We do not sell your personal information, and we do not share it with your employer, union, pension system, or any other member's account. We share information only with the small number of service providers necessary to run this application:

• Our cloud hosting and database provider, to store and serve the application.
• Stripe, to process subscription payments.
• Our transactional email provider, to deliver account and (if opted in) reminder/product email.

Each is bound to use your information only to provide their specific service to us, not for their own marketing purposes. We may also disclose information if required by law or to protect the rights, safety, or property of Active Shift Software or our users.

4. Cookies & Similar Technologies

We use only the cookies necessary for the application to function: a session cookie that keeps you signed in, and a CSRF-protection cookie required by the underlying Django framework. We do not use third-party advertising or analytics trackers, and we do not build cross-site advertising profiles.

To understand how the site is used, we keep our own anonymous, cookie-free visit counts: which pages are viewed, for how long, the kind of device, and the website or email link that brought the visitor here. These counts are not linked to your account, your name, or your IP address — each visitor is represented by a random code that changes every day, so visits can be counted but not traced back to a person. They are never shared or sold, and they are deleted after about 13 months.

When you create an account, we also note on it how you first arrived — for example from one of our emails, a referral, a promo code, another website, or typed in directly — so we know which outreach works. This is kept only in your browser tab (not in a cookie) until you sign up, and is only ever seen by us. Likewise, when you use a Refer-a-Friend share or copy button, we count that it was used — never who you sent it to or what number or address you sent it to.

5. Data Retention

We retain your account and profile data for as long as your account is active. You may permanently delete your account and all associated data at any time from your Account page - this is immediate and does not require contacting support. Some billing records may be retained separately by Stripe as required for tax and fraud-prevention purposes even after account deletion.

6. Your Privacy Rights (California Residents)

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to:

• Know what personal information we collect, use, and disclose.
• Delete personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information - we don't sell or share personal information for cross-context advertising, so there is nothing to opt out of today, but you retain this right if that ever changes.
• Non-discrimination for exercising any of these rights.

You can exercise the right to know, delete, or correct your own account data directly from your Account page. For anything the Account page doesn't cover, or to submit a request through an authorized agent, email support@activeshiftsoftware.com - we will respond within the timeframe California law requires.

7. Children's Privacy

This service is intended for working adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated date below, and, where required by law, we will provide additional notice. Continued use of the service after a change constitutes acceptance of the updated policy.

Last updated: September 2026.

9. Contact Us

Questions about this policy, your data, or anything else: support@activeshiftsoftware.com.