Privacy Policy

1. What we collect

• Account information: your first and last name, email address, and — if you provide them — phone number, medical or dental specialty, and practice type.
• Documents you upload: tax returns or related financial documents you choose to submit for automated reading.
• Financial figures: values you enter manually, or values extracted from your documents and confirmed by you, such as filing status, wage income, business net profit, and property basis.
• Diagnostic history: the estimates generated for you and when they were generated.
• Consent and audit records: the version of the terms you accepted, whether you opted in to be contacted, and the date, time, and optionally the IP address and browser user agent of that acceptance.
• Basic usage records: sign-in events and diagnostic submissions, kept for security and operational purposes.

2. How we use it

We do not use your uploaded documents or financial figures for advertising, and we do not use them to train third-party models.

• To generate your diagnostic estimate.
• To maintain your account and your saved result history so you can sign in later and see past results.
• To secure the service, investigate misuse, and maintain required consent records.
• Only if you affirmatively opt in via the separate consent-to-contact checkbox: to allow GenWealth 360 to follow up with you about your results or related services.

3. Storage and security

PLACEHOLDER: the specific retention period for uploaded documents and diagnostic inputs is to be finalized as a matter of policy and counsel review. The intent is to retain information only as long as needed for the purposes described above or as required by law.

• Passwords are stored only as salted one-way hashes and are never recoverable in plain text.
• Uploaded documents are stored outside any publicly served directory, under randomly generated filenames, and are not accessible by guessing a web address.
• Access to stored documents and figures is limited to your own account and to authorized GenWealth 360 personnel who need it for the purposes described above.
• Data is transmitted over encrypted connections.

4. Sharing

We do not sell your personal information to third parties. We may share information with service providers who host or operate the service on our behalf, and where required by law or to protect our legal rights.

5. Your choices

• You may decline the consent-to-contact checkbox and still see your diagnostic result.
• You may request access to, correction of, or deletion of your account information and uploaded documents by contacting GenWealth 360.
• You may withdraw contact consent at any time.

6. Scope of this draft

PLACEHOLDER: because the intended audience is physicians and dentists and the documents involved are sensitive financial records, the final policy must be reviewed for the applicability of HIPAA, the Gramm-Leach-Bliley Act, state privacy statutes including the California Consumer Privacy Act, and any state data-breach notification duties. This review has not yet been performed.