Privacy Policy

1. Introduction

EndowCast ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Monte Carlo simulation and portfolio analytics platform (the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account (name, email address, organization name)

• Create simulation inputs and portfolio parameters

• Subscribe to paid plans (billing information processed by Stripe)

• Contact us for support or inquiries

• Participate in surveys or provide feedback

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information, including:

• Log data (IP address, browser type, device information, operating system)

• Usage data (pages visited, features used, time spent, simulation runs)

• Cookies and similar tracking technologies

2.3 Financial Data

We use Stripe as our payment processor. We do not store your complete credit card or bank account information. Stripe processes and stores payment information in accordance with PCI-DSS standards. We receive limited information such as the last four digits of your card and transaction status.

2.4 Portfolio and Simulation Data

We collect and store the portfolio parameters, asset allocations, and simulation inputs you provide to generate Monte Carlo analyses. This data is associated with your organization and is not shared outside your organization without your consent.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, operate, and maintain the EndowCast platform

• Account Management: To manage your account, process subscriptions, and track usage quotas

• Simulations: To perform Monte Carlo simulations and generate portfolio analytics

• Billing: To process payments and manage subscription billing

• Communication: To send you service updates, security alerts, and support messages

• Improvement: To analyze usage patterns and improve our Service

• Security: To detect, prevent, and address technical issues and fraudulent activity

• Compliance: To comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Within Your Organization

Organization owners and administrators can view usage data and team member information for users within their organization.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing and subscription management

• AWS: Cloud infrastructure and hosting services

• Email Services: Transactional email delivery

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government investigations).

4.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest

• Secure authentication with password hashing (bcrypt)

• Regular security assessments and updates

• Access controls and role-based permissions

• Secure cloud infrastructure with AWS

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. We will retain and use your information as necessary to:

• Comply with legal obligations

• Resolve disputes and enforce agreements

• Maintain business records and analytics

When you request account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Data Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information

• Correction: Request correction of inaccurate information

• Deletion: Request deletion of your personal information

• Portability: Request a copy of your data in a structured format

• Objection: Object to processing of your information

• Restriction: Request restriction of processing

• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@endowcast.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of cookies we use:

• Essential Cookies: Required for the Service to function (authentication, session management)

• Analytics Cookies: Help us understand how users interact with the Service

• Preference Cookies: Remember your settings and preferences

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11. California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold

• Right to delete personal information

• Right to opt-out of the sale of personal information (we do not sell personal information)

• Right to non-discrimination for exercising CCPA rights

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page

• Updating the "Last Updated" date

• Sending you an email notification for material changes

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: