Privacy Policy

Subscriptions are not open yet. Nothing can be bought today. This page is published in advance so that it can be read before you subscribe. It takes effect when subscriptions open.

What is true today. This website is plain pages. It sets no cookies and runs no analytics or trackers. Our web host, Cloudflare, processes the requests your browser makes in order to serve these pages, and those requests include your IP address. The calculator service described below is not running yet, and there are no subscriber accounts. Everything below, including the retention and deletion commitments, describes what will happen from the day subscriptions open.

This policy takes effect on the day subscriptions open.

9to95 is a retirement projection calculator that your own AI assistant calls on your behalf. This policy explains what we collect, what we never store, and who else is involved. "We" and "us" mean the company named at the end of this policy.

1. The short version

• We do not store your plan. Your scenario (ages, balances, income, spending, assumptions) is used to run a calculation and is then discarded. We do not store the results either.
• We do not write the contents of your requests to our logs.
• The only personal information we keep is your account record, a record that you agreed to automatic renewal, and a small amount of billing and support information, all listed in section 2.
• When your subscription ends, your account is frozen and its record is deleted 90 days later.
• We do not sell your information, share it for advertising, or use it to train AI models.
• Your conversation happens in your AI assistant. Your assistant's provider keeps its own copy under its own rules, which we do not control.

2. What we collect and keep

This is what we will collect and keep once subscriptions open.

Your account record.

• Your email address.
• How you sign in: a one-way hash of your password, or the identifiers your sign-in provider gives us if you sign in through one. We never store a password in readable form.
• Your plan (annual or monthly), your subscription status and your renewal date.
• The date you accepted our Terms and which version.

Your consent record. The law requires us to be able to show that you agreed to automatic renewal. We keep that proof as a separate record that contains only: the subscription identifier Paddle gave your subscription; the date and time you agreed; the plan and price you were shown; which version of the checkout disclosure and of the Terms you agreed to; the dates and types of the renewal and price-change notices we sent you; and the date your subscription ended. It does not contain your email address, your name or your sign-in details. It can be connected to you only through Paddle's billing records.

Access logs. For each call your assistant makes we record the time, your account identifier, the name of the tool that was called, whether it succeeded, and how long it took. The log does not contain what was sent or what was returned. Our hosting provider also records the internet address (IP address) of each connection in its own network logs for security purposes.

The demo. The demo needs no account and no sign-in. It runs only the invented sample households that come with it and cannot accept figures of your own, so you give it no information about yourself. When the demo is used we record the same access-log items as for any other call (time, tool name, whether it succeeded, how long it took), with no account identifier because there is none. We do not ask demo visitors for a name or an email address. If you reach the demo through an AI assistant, section 4 applies to that conversation.

Billing information from Paddle. Paid orders are sold by Paddle, our reseller and merchant of record. Paddle collects your payment details and keeps them under its own privacy policy. We never receive your full card number. Paddle shows us your email address, the country and postal code you gave at checkout, what you bought, and whether payments succeeded, failed or were refunded.

Messages you send us. If you email us, we keep the message and our reply. Please do not send account numbers, balances or other financial details by email. We do not need them to help you.

The website. Today these pages set no cookies. Once subscriptions open, the sign-in will use only the cookies needed to sign you in. We do not use advertising cookies or third-party analytics trackers.

3. What we never store

• Your scenario, in whole or in part: names, dates of birth, balances, income, spending, Social Security estimates, assumptions.
• Any projection or simulation result.
• The content of requests or responses in logs, error reports or analytics.
• Your conversation with your assistant. We never receive it. We receive only the tool requests your assistant chooses to send.
• Bank, brokerage or other financial account credentials or connections. The Service does not link to financial accounts.

Because we do not keep your scenario or results, we cannot send them to you, restore them, or delete them later. They exist on our systems only for the moments it takes to calculate.

4. Your AI assistant and its provider

You use 9to95 through an AI assistant that you chose, such as Gemini, Claude or ChatGPT. Everything you type to your assistant, the scenario it writes, and the results we send back all pass through your assistant and may be stored by its provider, according to the settings and terms of your account with that provider. The provider decides for itself how that information is used and how long it is kept. It is not our service provider and we do not control it.

If you want to limit what is kept about your plan, look at your assistant provider's privacy settings and data controls. Deleting a conversation, or turning off history or model training where the provider offers that, is done there and not with us.

5. How we use what we keep

• To create and secure your account and sign you in.
• To check that you have an active subscription and to apply usage limits.
• To send account messages: receipts and confirmations, renewal reminders, notices of price or terms changes, security notices and replies to your questions.
• To keep the Service running, investigate faults and prevent abuse.
• To meet legal obligations and to establish or defend legal claims.

We send product news or marketing email only if you have asked for it, and every such email has an unsubscribe link and our postal address. Account messages are not marketing and are sent while you have an account.

6. Who we share information with

We do not sell personal information, and we do not share it for advertising. We disclose it only to:

• Paddle, which sells subscriptions as merchant of record, takes payment, handles sales tax, refunds and billing support, runs the customer portal where you cancel or change your card, and uses its own privacy policy for the information it collects.
• Our hosting provider, which runs the servers the Service operates on. The company will be named here before subscriptions open.
• Our email provider, which delivers our email and hosts our support mailbox. The company will be named here before subscriptions open.
• Authorities or other parties when the law requires it, for example in response to a valid subpoena or court order, or when needed to protect the Service or its users from fraud or attack. Because we do not store scenarios or results, we have none to produce.
• A successor, if the business is sold or reorganized. The successor must honor this policy for information collected under it.

Our service providers may use the information only to provide their service to us.

7. How long we keep it

These are the periods that will apply from the day subscriptions open.

• Account record: while you have a subscription. When your subscription ends, your account is frozen: it cannot be used and we do nothing with it except hold it. We delete the account record, including your email address and sign-in details, 90 days after the day your access ended. If you ask us to delete it sooner, we will do so within a number of days that will be stated here before subscriptions open.
• Consent record: three years after your subscription ends, because the law requires us to be able to show that you agreed to automatic renewal. It contains only the items listed in section 2 and no email address, so it stays after the account record is deleted.
• Access logs: how long we keep them will be stated here before subscriptions open.
• Support email: for a period that will be stated here before subscriptions open, counted from when the conversation ends. If you wrote to us, your messages and the address you wrote from stay in our support mailbox for that time, even after your account record is deleted. Ask us and we will delete them sooner.
• Billing records: Paddle keeps transaction records for as long as tax and financial law requires.
• Scenarios and results: not kept at all.

8. Security

We keep as little as possible, which is the strongest protection we can offer. Beyond that: connections to the Service are encrypted in transit, passwords are stored only as one-way hashes, access to production systems is limited to the people who need it and protected by two-factor authentication, and we review our safeguards regularly.

No system is perfectly secure. If a security breach affects your personal information, we will notify you as the law requires.

9. Your choices and rights

Whatever state you live in, you may ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete your account and the information tied to it.

Email [email protected] from the address on your account. We will answer within 30 days. We will not treat you differently for making a request. If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why. If you disagree with our answer, reply and ask us to review it.

For payment information held by Paddle, you can also contact Paddle at https://paddle.net.

We do not sell personal information or share it for cross-context advertising, so there is nothing to opt out of.

10. Children

The Service is for adults. You must be at least 18 to have an account. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email [email protected] and we will delete it.

11. Where we operate

The Service is operated from the United States and is intended for people who live in the United States. If you use it from another country, your information is processed in the United States.

12. Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change is material, for example if we ever began to store scenarios, we will email you at least 30 days before it takes effect, and we will not apply it to you without that notice.

13. Contact

9to95 LLC, a New York limited liability company now being formed
[email protected]

Our business mailing address will be published on this page before subscriptions open.