OptiRoth Privacy Policy

Effective date: October 13, 2026

Erisman Data Technologies LLC, an Arizona limited liability company ("we", "us"), runs OptiRoth at https://optiroth.com. This policy explains what information we collect, how we use and protect it, and your choices. It is part of our Terms of Service.

Who this is for. OptiRoth is a planning calculator for financial professionals. It is not for consumers or children. We do not knowingly collect information from anyone under 18 as a user, and we do not provide the Service to the general public. The client information in OptiRoth is entered by the advisor, not by the client. We have no relationship with your clients.

1. The short version

We collect what we need to run your account and your plans. We do not sell data, share it for marketing, or use analytics, advertising or tracking cookies.
Client data you enter is yours. We use it only to provide and secure the Service.
The only third parties that handle data for us are Cloudflare, Google Workspace (our email), and, when you subscribe, Paddle, our reseller and merchant of record (plus Google or Apple only if you choose that sign-in). Only Cloudflare carries Client Data, in transit. Our developers can access the server and its data to build and maintain the Service, as with any hosted software.
You can delete plans and client folders at any time. Deleted data leaves the live database immediately and leaves encrypted backups within up to 30 days.
Please do not enter Social Security numbers, account numbers or similar identifiers. Use initials or case labels for clients.

2. What we collect

A. Account information (about you, the advisor)

Email address, name, company name.
Password: stored only as a salted scrypt hash. We never store or see your password in readable form.
If you choose Google or Apple sign-in: the identity information that provider shares with us to sign you in (your email address, your name if the provider shares it, and the provider's account identifier for you).
Your professional credential: its kind (CRD number, NPN, CPA license, attorney bar number or enrolled agent number), the number, the issuing state for a license, and when you gave it. We use it to confirm that you are a registered or licensed professional, may check it against public records, and use it to keep each credential on one account.

B. Client data you enter ("Client Data")

Client names or case labels, birthdates, IRA balances and basis, Social Security benefit amounts, wages, retirement dates, state of residence, living expenses, cash, and the plans the Service computes from them, organized in per-client folders.
This may be nonpublic personal financial information of your clients. You are responsible for having authority and consent to enter it (see our Terms).
On a team plan, the team's admin can see the client folders and plans that advisors on the team create, the names and emails of the team's advisors, and each advisor's activity: how many plans they have saved, how many calculations and High precision runs they ran this month, and when they last signed in.

C. Cookies and device storage

One session cookie (HttpOnly, Secure) that keeps you signed in.
localStorage in your browser keeps unsent form values on your own device. This stays on your device; we do not receive it unless you submit the form. These values belong to the account that typed them: they are cleared when you sign out, or when a different account signs in on that browser.
We do not use analytics, advertising or tracking cookies.

D. Technical data. Our server and Cloudflare handle your requests, so your IP address and request details pass through them. Apart from the agreement records in item G, the OptiRoth application does not keep request or access logs. It counts failed sign-ins by IP address in memory for 15 minutes to block password guessing; this is not written to disk. If a calculation fails, a technical error message, without the plan's inputs, is written to the server's system log. Cloudflare may generate its own logs under its own terms.

E. Communications. If you email us, or send a problem report from the site, we keep the message and our reply. A problem report also records your email address and the page you sent it from. If a team admin invites you by email, we keep your email address with that license and send you the invitation. Cloudflare Email Routing forwards messages sent to [email protected] to our Google Workspace mailbox, and Google Workspace sends the emails we send you. Our emails never contain client names or other Client Data.

F. Billing. Subscriptions are sold by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment details, billing address and tax information directly, under its own privacy policy; we never receive or store card numbers. From Paddle we receive what we need to run your subscription: Paddle's customer and subscription identifiers for your account, your plan, its status and renewal dates. To start a checkout we send Paddle your account email and an identifier that links the purchase to your account.

G. Records of your agreement. When you create an account, accept the Terms or an updated version of them, or subscribe or change a subscription, we record the date and time, the Terms version, the exact wording you agreed to, and your IP address, so we can show what you agreed to. This is the only place the application stores an IP address.

3. How we use information

To create and secure your account, sign you in, and run the Service (calculate, display and store plans).
To keep the Service secure, fix problems, prevent abuse, and enforce our Terms.
To contact you about your account: security notices, incident notices, changes to the Service or Terms, and support replies.
To comply with law and respond to valid legal process.
We do not use Client Data for marketing, advertising, or to train models, and we do not sell or share personal information for cross-context advertising. We do not combine OptiRoth data with data from ControlTree, our other, unrelated data product.

No sale. No sharing for marketing. We disclose information only to:

Cloudflare, which provides the proxy/tunnel and TLS connection through which you reach the Service. Because Cloudflare sits in the path of traffic, it can technically process the content of requests as they travel to our server. See Cloudflare's privacy policy.
Paddle, when you subscribe: your account email and the identifier that links your purchase to your account, so Paddle can sell, bill and support your subscription. Paddle does not receive Client Data. See Paddle's privacy policy.
Google or Apple, only if you choose to sign in with them. They tell us who you are; we do not send them Client Data.
Google Workspace, which sends our email to you and receives your emails to [email protected]. We do not send it Client Data.
Legal and safety. When law or valid legal process requires, or to protect rights, safety or security. Where law allows, we will tell you before disclosing your Client Data.
Business transfer. If we sell or reorganize the business or the Service, data may transfer to the successor, which must honor this policy for existing data, and we will notify you.
You and your firm, as you direct.

Our Terms (Section 12) set out service-provider and data-protection commitments for advisors whose firms are covered by SEC Regulation S-P, the FTC Safeguards Rule or similar laws.

5. Where data lives, and how we protect it

The application and database run on a server we operate in Arizona, reached through Cloudflare, which provides TLS.
Passwords are stored as salted scrypt hashes. Sessions use an HttpOnly, Secure cookie.
Developer access. Our developers, and the software tools they use to build and maintain the Service, can access the server and its data. We access Client Data only to run, support, fix and secure the Service.
Nightly backups are encrypted (AES-GCM, with a private key we control) and kept on separate local storage. We may add an encrypted offline drive.
What we do not claim: we do not have a SOC 2 or similar report, we do not claim the live database is encrypted at rest, and we do not provide 24/7 monitoring. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

Incidents. If there is a breach of security affecting information on our systems, we will notify affected advisors by email as soon as practicable and, for Client Data, no later than 72 hours after we become aware, and we will meet our legal duties under applicable law, including Arizona's breach law (A.R.S. 18-552). Please keep your account email current.

6. Retention and deletion

You control Client Data. You can delete plans and client folders yourself. Deletion is immediate in the live database.
Backups. Encrypted backups that still contain deleted data are kept for up to 30 days, then removed. We do not restore deleted data from backup for ordinary use. Backups are used only to recover from a failure of our systems.
Inactive accounts. If an account without a paid plan or team license is not signed into for two years, we email a notice, and 30 days later we delete the client folders and plans saved in it. Signing in before then keeps them.
Account closure. When you close your account or ask us in writing, we delete your account and Client Data from the live database within 30 days, subject to the 30-day backup window.
Limited exceptions. We may keep limited information longer if the law requires, or to resolve a dispute or enforce our terms, such as the fact that an account existed, our messages with you, and the agreement records described in Section 2, item G, which we keep for up to six years after your account closes and then delete.

7. Your choices and rights

Access, correct or delete your account information and plans in the Service, or email [email protected].
Ask us to export or delete your data. We will verify it is you first, using your account email.
Opt out: we send only service and security messages. We do not send marketing.
Privacy rights laws. Depending on where you live, laws such as California's CCPA/CPRA may give you rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, and we are below the size thresholds that make most such laws apply to us. We will treat your good-faith request like one made under those laws wherever we reasonably can. If you are a client of an advisor and want to see or delete your data, please contact your advisor, who controls it; we will help the advisor respond.
Cookies: because we use only an essential session cookie, we do not show a cookie banner. Browser Do Not Track and Global Privacy Control signals: we do not track, so there is nothing to opt out of.

8. Children

The Service is for professionals and not directed to anyone under 18. We do not knowingly collect information from children as users. Client Data may include birthdates of minors only if an advisor enters them; the advisor is responsible for having authority to do so. If you believe a child created an account, contact us and we will delete it.

9. Our role

For Client Data, we act as a service provider to the advisor, who decides what to enter and why. For account information, we act on our own behalf to run the Service. Our Terms govern the details.

10. International

The Service is operated from the United States and intended for U.S. professionals and their U.S. clients. If you use it elsewhere, your information will be processed in the United States.

11. Changes to this policy

We may update this policy. For material changes we will notify you by email at least 30 days before they apply, and ask you to accept the updated Terms, which include this policy, the next time you sign in. The effective date at the top shows the latest version.

12. Contact

Erisman Data Technologies LLC (Arizona), doing business as OptiRoth, and also as ControlTree for an unrelated data product.

Business address: provided on request to [email protected]

Email: [email protected]

Website: https://optiroth.com