Privacy Policy for My Plan Keeper Inc.
Effective August 12, 2024
Welcome to MyPlanKeeper Inc. (“Company”, “we”, “us”, or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you interact with our fintech platform, which is designed specifically to serve retirees. It also outlines your rights under applicable laws, including GDPR, HIPAA, and SOC 2 compliance.
COMMITMENT TO PRIVACY
At MyPlanKeeper Inc. your privacy is our top priority, and we take rigorous measures to protect your personal information. We collect a limited amount of personal information from our clients to provide the best possible service while maintaining the highest standards of privacy and security. The types of personal information we collect include:
What Information Do We Collect?
We collect several types of information from and about users of our platform, including:
- Personal Identification Information: Name, address, email address, phone number, date of birth, and Social Security Number.
- Financial Information: Bank account details, payment information, transaction history, and retirement account information.
- Health Information: If applicable, health-related information that may be required to provide certain services in compliance with HIPAA.
- Technical Data: IP address, browser type, operating system, and usage data related to your interactions with our platform.
- Communication Data: Information provided when you interact with our conversational AI, such as chat logs and user preferences
- How Do We Use Your Information?
We process your information for various purposes, including:
- Providing Services: To create and manage your account, process transactions, and provide customer support.
- Communication: To communicate with you about updates, promotions, and important information related to your account.
- Compliance and Security: To comply with legal obligations, ensure platform security, and maintain SOC 2 compliance.
- Improvement of Services: To enhance our platform, including improving the functionality of our conversational AI.
- Health-Related Services: For services that involve health information, we comply with HIPAA regulations to ensure your data is protected.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide consent for specific purposes, such as receiving marketing communications.
- Contractual Necessity: To fulfill our contractual obligations to you.
- Legal Obligations: To comply with legal and regulatory requirements, including GDPR and HIPAA.
- Legitimate Interests: To improve our services and ensure the security of our platform.
Data Sharing and Third Parties
We may share your information with:
- Service Providers: Third-party vendors who assist in operating our platform and delivering services, subject to SOC 2 compliance and strict data protection agreements.
- Legal and Regulatory Authorities: When required by law, to comply with legal processes or regulatory requests.
- Healthcare Providers: In cases where health-related services are provided, in compliance with HIPAA regulations.
- Business Partners: With your explicit consent, to offer additional products or services that may be of interest to you.
Data Security
We implement industry-standard security measures, including encryption, access controls, and regular audits, to protect your personal data. Our platform is SOC 2 compliant, ensuring that your information is handled with the highest level of security.
Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Specific retention periods depend on the type of data and the context of its processing.
Your Rights
Depending on your location, you may have the following rights concerning your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of any inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal limitations.
- Withdrawal of Consent: Withdraw your consent for data processing at any time.
- Data Portability: Request transfer of your data to another service provider.
- Opt-Out: Opt out of receiving marketing communications from us.
HIPAA Compliance
For services that involve the collection and processing of health-related information, we comply with the Health Insurance Portability and Accountability Act (HIPAA). We ensure that your health data is handled with the utmost care and confidentiality.
International Data Transfers
If you are accessing our platform from outside your country, please be aware that your data may be transferred to, stored, and processed in other countries. We ensure that such transfers comply with GDPR and other applicable data protection regulations.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, technical, or regulatory reasons. We will notify you of any significant changes and provide you with the opportunity to review the updated policy.
Contact Information for Data Privacy Inquiries
For questions about this policy, including our use of AI technologies and third-party data processing, or to withdraw your consent, please contact us at info@myplankeeper.com.
Contact Us
For any privacy-related inquiries, please contact us at info@myplankeeper.com.