RICHROADS
PRIVACY & DATA

Privacy Notice

RichRoads is designed to minimize sensitive data exposure while still giving customers a useful planning history.

Information we use

Information RichRoads does not require in this V1

RichRoads does not connect directly to your bank, brokerage, payroll, tax, or credit-report accounts. The customer support console is designed not to expose recovery keys, raw private tokens, card numbers, or API secrets.

How information is used

Information is used to calculate your planning snapshot, create and reopen your Blueprint, maintain Progress Vault and Pro, send service communications you enable, prevent abuse, support customers, and operate billing and security.

AI Coach processing

If you choose to use the RichRoads Pro AI Coach, RichRoads sends your Coach question and a limited financial-planning context to the OpenAI API to generate a response. That context may include your RichRoad Score, stage, goals, self-reported financial amounts, debt figures, saved progress or Check-In values, Adaptive Roadmap changes, and structured Business Opportunity details you choose to save. RichRoads is designed not to send your purchase email, recovery key, customer session token, Stripe identifiers, payment-card data, or API secrets as AI Coach context. OpenAI states that API inputs and outputs are not used to train OpenAI models by default unless the API customer opts in to data sharing. Coach conversation history and generated Monthly Coach Reviews are also stored in RichRoads so the Coach can maintain continuity; authenticated Pro customers can clear that Coach history without deleting their Blueprint, Progress Vault, or Check-Ins.

Service providers

RichRoads may use hosting, database, payment, email-delivery, and AI-processing providers to operate the service. Payment-card data is handled by Stripe rather than stored in RichRoads application records.

Your controls

Authenticated customers can export their RichRoads application data, revoke customer sessions, turn review reminder emails off, and request deletion of RichRoads application records. Some payment, security, tax, fraud-prevention, or legal records may need to be retained by RichRoads or service providers for a limited period.

Security

RichRoads uses private sessions, hashed access tokens, rate limits, no-store responses for sensitive routes, security headers, and server-side access checks. No internet service can promise absolute security.