OptiRoth

OptiRoth Terms of Service

Effective date: October 13, 2026

These Terms are an agreement between you and Erisman Data Technologies LLC, an Arizona limited liability company ("we", "us"), for your use of OptiRoth at https://optiroth.com (the "Service"). You accept these Terms when you tick the box saying you agree to them (when you create an account, the first time you sign in with Google or Apple or join a team, the first time you sign in after we change the Terms, or when you subscribe), and by using the Service after that. If you accept for a firm, you confirm you can bind it, and "you" includes the firm.

2. What the Service does, and its limits

The Service is calculation software. It applies the tax, Social Security and Medicare rules it models to the facts and assumptions you enter, and reports the Roth IRA conversion amounts and Social Security claiming ages that produce the highest modeled after-tax net worth at the end of a plan. It uses deterministic assumptions that you enter (for example, investment returns that the tool limits to 0-9% per year, and inflation), 2026 federal and state tax law, Medicare IRMAA, and required minimum distributions. It shows a year-by-year plan and plain-English reasons. The assumptions and rules behind each result are listed with it in the Service.

You understand that:

3. Eligibility and your account

"Client Data" means information you enter or create in the Service about your clients or prospects, including names or case labels, birthdates, IRA balances and basis, Social Security benefit amounts, wages, retirement dates, state of residence, living expenses, cash, and the plans computed from them. Client Data stays yours (Section 11).

Team plans. On a team plan, the client folders an advisor creates while on the team, with the plans and comparisons in them, are Client Data of the firm that holds the team plan. The team's admin can view them, can assign them to another advisor on the team, and keeps them when the advisor leaves the team or the team plan ends. Folders an advisor created before joining the team stay with that advisor.

You represent, warrant and agree that:

  1. You have the authority and all consents, notices and legal bases needed under law, your agreements with clients, and your firm's policies (including the Gramm-Leach-Bliley Act, SEC Regulation S-P, the FTC Safeguards Rule, and state laws, as they apply to you) to enter Client Data into the Service and have us process it as described here.
  2. Data minimization: enter only what you need. We recommend you use case labels, initials or other pseudonyms instead of full names. Do not enter Social Security numbers, tax ID numbers, account numbers, passwords, driver's license numbers, or health information. The Service does not need them.
  3. You are responsible for your own compliance duties as a financial professional, including vendor due diligence on us, client privacy notices, recordkeeping, supervision, and any notices to clients or regulators after a data incident. Section 12 describes what we will do to support you.
  4. You will not use the Service in violation of your firm's policies or your regulators' rules.

5. Acceptable use

You will not, and will not allow others to:

We may suspend access immediately if we reasonably believe you have breached this Section or that your account is a security risk.

6. Plans, fees and billing

7. Our intellectual property; your feedback

We own the Service, its software, calculation methods, design and text. We give you a limited, non-exclusive, non-transferable, revocable license to use the Service for your professional work under these Terms. You may keep and use the plans and outputs generated for your clients in your practice. If you send us suggestions, you grant us a perpetual, royalty-free license to use them without obligation to you.

8. Privacy

Our Privacy Policy explains what we collect and how we handle it. It is part of these Terms.

9. Disclaimer of warranties

THE SERVICE AND ALL OUTPUTS ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, TITLE AND NON-INFRINGEMENT, TO THE FULLEST EXTENT PERMITTED BY LAW. We do not warrant that the Service will be uninterrupted, error-free, secure, or free of harmful components, that outputs will be accurate, complete, or current, that they comply with any law or regulatory standard, or that any plan will produce any result. This Section does not reduce the commitments in Section 12 as written, but liability for breaching them is subject to Section 10.

10. Limitation of liability

To the fullest extent permitted by law:

  1. No indirect damages. We are not liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost clients, lost investment or tax outcomes, loss of goodwill, or the cost of substitute services, even if told they were possible.
  2. Cap. Our total liability to you for all claims relating to the Service or these Terms will not exceed the greater of (a) the amount you paid for the Service (through Paddle or otherwise) in the 12 months before the event giving rise to the claim, and (b) US$100. The cap applies to all claims, including claims under Section 12. It does not apply to liability that cannot be limited by law, such as for fraud or willful misconduct.
  3. Your advice and your clients. We are not responsible for advice you give, decisions you or your clients make, or losses or tax outcomes that follow from relying on outputs. You are responsible for verifying outputs before relying on them.
  4. These limits apply under any legal theory. Some laws do not allow certain limits, so they apply only to the extent allowed.

11. Your data, our use of it

12. Service provider and data-protection terms (for regulated advisors)

This Section is for advisors whose firms are covered by SEC Regulation S-P (17 CFR 248.30), the FTC Safeguards Rule (16 CFR Part 314), or similar laws and who treat us as a service provider that receives, maintains or processes client "customer information." It forms a data-protection addendum to these Terms for that purpose.

Roles. You are the covered institution or its personnel and decide what Client Data to enter. We process Client Data only on your instructions as set out in these Terms and the product's functions, as a service provider.

Our commitments

  1. Limited use. We will use and disclose Client Data only to provide the Service to you, to maintain its security, to comply with law, or as you direct. No sale, no marketing, no use for advertising or tracking.
  2. Safeguards. We maintain administrative, technical and physical safeguards appropriate to the Service, as described honestly in Section 13 and our Privacy Policy. We will not give you inaccurate descriptions of our security.
  3. Incident notice within 72 hours. If we become aware of a breach of security that resulted in unauthorized access to or use of Client Data on a system we maintain, we will notify you by email at your account address as soon as practicable and no later than 72 hours after becoming aware. The notice will state what we then know: what happened, when, what categories of Client Data and which of your accounts or records are involved, what we have done to contain it, and a contact for follow-up. We will update you as we learn more and reasonably cooperate with your investigation and your notice obligations to clients, regulators and others. You decide whether, when and how to notify your clients and regulators, and that duty stays with you unless we agree otherwise in writing. We do not notify your clients on your behalf. We will notify you, as Arizona law (A.R.S. 18-552) requires of a person maintaining data, as soon as practicable after discovery of a breach.
  4. Subprocessors. The only third parties that handle Client Data on our behalf are Cloudflare (traffic proxy/tunnel and TLS), and Google or Apple only if you choose those sign-in methods (they handle your sign-in identity, not Client Data). Google Workspace carries our email: the messages we send you (password resets and plan-ready notices) and the messages you send to [email protected]. Our notices do not contain Client Data; please do not put Client Data in an email to us. Paddle handles payment and does not receive Client Data. We will tell you before adding another subprocessor that would receive Client Data, by email or notice in the Service, and you may object by closing your account. We stay responsible for these subprocessors' handling of Client Data as the Service's provider.
  5. Confidentiality. Only people at our company who need access to operate, secure or support the Service may access Client Data, and they are bound to keep it confidential.
  6. Return and deletion. You can delete Client Data yourself at any time. After you close your account, or on your written request, we will delete your Client Data from the live database within 30 days, and remaining encrypted backups expire within up to 30 days after deletion. While your account is open, we will send you your plans as a data file on request.
  7. Due diligence and records. On reasonable request (not more than once a year, except after an incident) we will answer written questions about our safeguards and give you information reasonably needed for your vendor oversight and recordkeeping. We do not currently hold a SOC 2 report or other third-party security certification, and we do not offer round-the-clock monitoring; you should weigh this in your own vendor assessment.
  8. Legal process. If we receive a subpoena or demand for your Client Data, we will, where the law allows, tell you promptly so you can respond, and disclose only what we are legally required to.
  9. Regulator access. We will reasonably cooperate if a regulator with authority over you requests information about our handling of your Client Data, to the extent permitted by law.

Your commitments. You will use the Service consistent with Sections 4 and 5, keep your credentials secure, give us a current security contact email, and tell us promptly of any suspected account compromise.

If your firm requires its own data-processing agreement, contact us. If it conflicts with this Section, the signed agreement controls only for that firm.

13. Security: what we do and do not claim

We describe this so you can make an informed decision.

14. Term, suspension and termination

15. Indemnity

You will defend and indemnify us and our members and agents against third-party claims, and the resulting losses and reasonable legal costs, arising from (a) your Client Data and your lack of authority or consent to enter it, (b) your advice, recommendations or use of outputs with clients, or (c) your breach of Sections 4 or 5. This does not apply to the extent a claim is caused by our breach of these Terms, our gross negligence or our willful misconduct.

16. Governing law and disputes

17. General

18. Contact

Erisman Data Technologies LLC (Arizona), operating OptiRoth and also doing business as ControlTree for an unrelated data product.

Business address: provided on request to [email protected]

Email: [email protected]

Website: https://optiroth.com