Privacy Policy

The numbers you enter for an analysis. Month and year of birth (yours, and your spouse's when you file jointly), filing status, state, income, account balances, the age withdrawals begin and similar scenario inputs. We use them to run the analysis and send the results back. If you don't save a scenario, we don't store these inputs, except as part of a website chat conversation (below).

Saved scenarios. If you sign in and save a scenario, on the website or from a chat, we store its inputs, its results, the name you give it and when you saved it, linked to your account.

Account details. Accounts are optional. If you create one, our sign-in provider stores your email address, your name if you give one, and your sign-in method. We receive an account ID and your email address and name.

Technical data. We use your IP address to apply daily usage limits. These counters are kept in memory and reset every day. Our hosting providers keep standard request logs (IP address, time, requested URL, user agent) for operations and security.

Website usage and errors. On the website we measure which pages and features are used, collect error reports and record session replays (a recording of clicks, scrolling and page changes, with what you type in form fields masked), so we can find bugs and improve the tool. If you are signed in, these are linked to your account ID and email.

Feedback and problem reports. If you send feedback or report a problem, on the website or by asking Claude or ChatGPT to send it, we keep what you write and any email address you choose to leave, so we can read it and reply. Reports sent from the website are linked to that visit's session replay; reports sent from a chat are linked to your account only if you are signed in.

Website chat messages. When you use the chat on the website, your messages are sent to Anthropic's Claude API to generate replies. To find and fix problems with the assistant's answers, we keep a record of each conversation in Langfuse: your messages, the replies, the calculations the assistant ran, and their token counts and cost. Email addresses and phone numbers are removed before it is sent. The record is linked to that visit's analytics ID, not your name or account, and is kept until you ask us to delete it. The usage analytics we keep for each reply (the model, its token count and cost, how long it took and any error) never include your messages or the replies.

When you use the app in Claude or ChatGPT, the assistant sends our tools only the scenario values needed for each request. Our server does not read, request or store your conversation history, memory or files. Anything you type in the chat is handled by Anthropic or OpenAI under their own privacy policies.

With each request, the assistant also sends a one-sentence description of why it is using the tool, which it is asked to write without personal details. We keep it with usage analytics, along with the tool used, how long it took and whether it worked, to learn how the app is used. We don't keep the scenario values or the results.

Signing in from a chat is only needed to save, list or open saved scenarios. When you sign in, Claude or ChatGPT receives an access token for your Roth Conversions Optimizer account, scoped to your profile and email.

• To run the analysis you ask for and show you the results.
• To save, list and reopen scenarios you choose to save.
• To apply fair usage limits and protect the service from abuse.
• To find and fix bugs and understand which features are useful.
• To answer you when you contact support.

We don't sell your data, share it for advertising, or use your financial inputs to market anything to you.

We use these service providers, each only for the purpose listed:

• Clerk: accounts and sign-in.
• Railway: hosts our API, MCP server and database of saved scenarios.
• Vercel: hosts the website and measures page performance.
• PostHog: feedback and problem reports, website usage analytics, session replays, and error reports for the website and API.
• Anthropic: generates replies for the chat on the website.
• Langfuse: stores website chat conversations so we can review and improve the assistant's answers.

We may also disclose information if the law requires it, or to protect the service and its users.

• Saved scenarios: until you delete them or delete your account.
• Account details: until you delete your account.
• Usage-limit counters: reset daily, never written to our database.
• Hosting request logs: kept by our hosting providers for up to 30 days.
• Website chat conversations: until you ask us to delete them.
• Usage analytics, session replays and error reports: up to 12 months.
• Feedback and problem reports: until they are resolved, and at most 12 months.
• Unsaved analysis inputs: not stored after the response is sent, except inside a website chat conversation.

• Use the analysis without an account. Signing in is only needed to save.
• Delete any saved scenario on My scenarios, or your whole account in Account settings. Deleting your account removes your account details and every saved scenario right away.
• Ask us to delete the usage analytics, session replays, chat conversations or feedback linked to you, or for a copy of your data, by emailing support@rothconversionsoptimizer.com. We respond within 30 days.
• Disconnect the app in Claude or ChatGPT at any time from that app's connector or app settings.
• Block analytics with your browser's tracking protection or an ad blocker.

The tool never asks for account numbers, Social Security numbers, passwords or other credentials, and you should not enter them. It is not directed at children under 13.

All traffic uses HTTPS. Saved scenarios are only returned to the signed-in account that saved them. To report a security issue, email support@rothconversionsoptimizer.com.

If we change this policy we'll update the date at the top, and for significant changes we'll note it on the website. Questions about privacy: support@rothconversionsoptimizer.com.