Privacy Policy

Last updated: August 18, 2026

Who we are

RetirementAdvisor Pro provides retirement, Medicare and Social Security planning software and educational content to financial professionals. This policy explains what we collect from visitors to www.retirementadvisorpro.com, why, who it is shared with, and what you can do about it.

The controller responsible for your information is IRMAA Certified Planner, 4 Standish Road, Lynnfield, MA 01940.

RetirementAdvisor Pro is a software and education provider. We are not a registered investment adviser, broker-dealer, insurance agency, law firm or accounting firm, and nothing on this site is investment, tax or legal advice. See our Disclosures.

Information we collect

Information you give us.

  • Name, email address and firm name, when you request a demo or contact us
  • Account and billing details, if you become a customer
  • Anything you choose to write in a message or enquiry form

Information collected automatically.

  • IP address, device type, browser and operating system
  • Pages viewed, time on page, and the site or campaign that referred you
  • A randomly generated visitor identifier stored on your device, used to connect repeat visits. This is only created where you have allowed analytics.
  • Advertising click identifiers passed in the URL by Meta and Google. These are only retained where you have allowed advertising.

We do not knowingly collect Social Security numbers, financial account numbers, health records or client data through this website. Client planning data entered into the application itself is governed by your customer agreement, not by this website policy.

This site is not directed to children under 16 and we do not knowingly collect information from them. If you believe a child has provided us information, write to support@retirementadvisorpro.com and we will delete it.

Why we use it

  • To respond to demo requests and enquiries, and to provide the service
  • To take payment and maintain financial records
  • To understand how the site is used and improve it
  • To measure advertising and identify business visitors, where allowed
  • To secure the site and prevent abuse
  • To meet legal and record-keeping obligations

We do not sell your personal information for money. We do share it with advertising partners in ways that some state laws define as a “sale” or “share” for cross-context behavioural advertising — see the next two sections, and how to opt out below.

Cookies, tracking and website visitor identification

Analytics and advertising technologies load only after you allow them, and you choose the purposes separately. Essential technologies needed to serve the site and prevent abuse are always active. You can change or withdraw your choice at any time.

Your choice is stored for 180 days, after which we ask again. If we add a vendor, previous choices are reset and we ask again.

The full vendor table — what each one receives and how long they keep it — is in our Cookie Policy.

Our website visitor identification provider collects information only from confirmed United States IP addresses, and does not collect from visitors in the European Union, the United Kingdom or Canada.

Who we share it with

We share personal information with the service providers below, each for the stated purpose only. We also disclose information where required by law, to protect our rights, or in connection with a merger or sale of the business.

RecipientPurposeWhat they receive
Google Analytics 4analyticsUnderstand which pages are used and how visitors arrive.IP address (truncated), device and browser, pages viewed, referral source
Ahrefs AnalyticsanalyticsSearch and marketing performance measurement.Pages viewed, referral source, country, device type
Meta (Facebook) Pixel and Conversions APImarketingMeasure advertising campaigns and build advertising audiences.Hashed email address, hashed phone number where provided, click identifiers (fbc/fbp), IP address, user agent, pages viewed, purchase amount
Instantly Website Visitor ID (Leadsy.ai)marketingIdentify the business or organisation associated with a visit, for business-to-business marketing.IP address and associated company and professional contact information. Restricted to confirmed United States IP addresses.
RewardfulmarketingAttribute referrals and affiliate commissions.Referral identifier, pages viewed, conversion events
VercelessentialHosting and content delivery. Required to serve the site.IP address, user agent, request logs
Cloudflare TurnstileessentialDistinguish humans from bots on forms. Required to prevent abuse.IP address, user agent, challenge interaction signals
GoHighLevelessentialCustomer relationship management for demo requests and enquiries.Name, email address, firm, enquiry details, campaign source
StripeessentialPayment processing for subscriptions. Required to take payment.Name, email address, billing details, payment card data (handled by Stripe)

How long we keep it

CategoryExamplesRetention
Demo and contact enquiriesName, email address, firm name, messageUntil deletion is requested, or 36 months after last contact
Customer account and billing recordsName, email address, billing details, subscription historyDuration of the subscription, then 7 years for financial records
Website usage and attributionPages viewed, referral source, campaign parameters, visitor identifier14 months
Advertising identifiersMeta click identifiers, hashed email address shared for measurement14 months, and only where advertising consent was given
Server and security logsIP address, user agent, request metadata30 days
Consent recordsPurposes allowed, timestamp, policy versionStored in your browser for 180 days. Where activity is recorded, the consent that applied is stored alongside it for the life of that record.

Where a longer period is required by law — tax, financial or contractual record-keeping — that period applies instead.

Your rights, and how to use them

Depending on where you live, you may have the right to:

  • Know what personal information we hold about you, and get a copy
  • Correct information that is inaccurate
  • Delete your information
  • Receive your information in a portable format
  • Opt out of the sale or sharing of your information for targeted advertising
  • Opt out of marketing communications at any time
  • Withdraw consent for cookies and tracking technologies
  • Not be discriminated against for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lower quality of service because you made a request.

How to make a request

Email support@retirementadvisorpro.com with the subject line “Privacy Request”, and tell us which right you want to exercise.

We will acknowledge your request and respond within 45 days. If we need more time, we will tell you why before that deadline.

Verifying it is you. Before we act on a request to access or delete, we ask you to confirm the request from the email address we hold, and may ask for one additional piece of information we already have on file. We will not ask for more than we need.

Authorised agents. You may use an agent to make a request on your behalf. We will ask for written permission signed by you, and may still ask you to verify your own identity directly.

If we say no. You may appeal by replying to our decision with the subject line “Privacy Appeal”. A different person will review it and we will respond within 45 days with our decision and the reasons for it. If we deny the appeal, you may contact your state Attorney General.

Opting out of targeted advertising

There are three ways to opt out, and any one of them is enough.

  • Choose Reject all, or turn off the Advertising purpose, in our cookie banner — reachable any time from Cookie Preferences in the footer.
  • Turn on Global Privacy Control in your browser or extension. We treat a GPC signal as a valid opt-out of the sale and sharing of personal information, automatically and without you having to ask. This applies to residents of California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon and Texas, and we honour it for everyone.
  • Email support@retirementadvisorpro.com and ask us to opt you out.

Visitors outside the United States

RetirementAdvisor Pro is operated from the United States and intended for United States financial professionals. Our services are not directed to individuals in the European Economic Area or the United Kingdom, and our website visitor identification provider does not collect information from those regions.

If you access the site from outside the United States, your information will be transferred to and processed in the United States, where data protection law differs from that of your country. If you are in the EEA or the UK and want to know what we hold, have it deleted, or object to processing, write to support@retirementadvisorpro.com and we will honour the request. You also have the right to complain to your local supervisory authority.

How we protect it

We use encryption in transit, access controls, and vetted service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Our security practices and how to report a vulnerability are described on our Security page.

Changes, and how to reach us

If we change this policy we will update the date at the top of this page. Material changes reset stored cookie choices, so you will be asked again.

Questions or requests: support@retirementadvisorpro.com
IRMAA Certified Planner, 4 Standish Road, Lynnfield, MA 01940