Privacy Policy

1. Who We Are

This Privacy Policy describes how Northsight Holdings LLC, a Wyoming limited liability company operating under the trade name “FedHorizon” (“we,” “us,” or “our”), collects, uses, and protects information about you when you use fedhorizon.com and any associated products or services (the “Service”).

By using the Service, you agree to the collection and use of information as described in this Policy. This Policy is incorporated into and subject to our Terms of Service.

Independent status: FedHorizon is an independent private company and is not affiliated with, endorsed by, or sponsored by OPM, the U.S. Government, or any federal agency.

2. Information We Collect

2.1 Information You Provide Directly

When you use the Service, you may provide:

• Retirement planning inputs such as your retirement system (FERS), years of service, high-3 salary, planned retirement date, and age — used solely to generate your report
• Email address, if you ask us to email you your report, opt into communications, or purchase a report
• Payment information processed securely by Stripe, Inc. — we never store your full card number or CVV (only when you buy a paid report — free reports involve no payment)
• Any messages or inquiries you send us via email or contact forms
• Beta feedback you choose to send through the feedback form (“Send feedback”, or “Send beta feedback” during the beta) or the “How useful was this report?” prompt — your message and rating, plus an email address only if you give one for a reply. Feedback is stored with the page it was sent from, the app version, and a general device type (mobile, tablet, or desktop) — never your retirement inputs
• Optional pricing survey: if you answer the optional pricing question at the end of a report, we store your answer, any comment you write, the general type of report (for example, “standard”), and a one-way code derived from your report link that prevents duplicate answers. We do not store your report link, retirement inputs, name, or email with your answer.

2.2 Information Collected Automatically

When you visit the Service, we or our service providers may automatically collect:

• Device and browser type, operating system, and IP address
• Pages visited, time spent on pages, and referring URLs
• General geographic location (city/region level, derived from IP address)
• Cookies and similar tracking technologies as described in Section 5

Estimate and report inputs: Retirement planning inputs you enter into the free Instant Estimate tool are sent to our calculation engine solely to generate your results, and are not stored on our servers. Your browser keeps a copy on your own device so your results are still there when you come back; you can clear it by clearing this site’s data in your browser. Report inputs are retained for up to 30 days after delivery to support your report, then permanently deleted.

Your report link: each report lives at a private, unguessable web address. Anyone you share that link with can view the report until it is deleted 30 days after delivery, so share it only with people you choose (for example, your spouse or advisor). Download the PDF to keep a copy.

Hosting logs: like any website, our hosting providers keep standard request logs — including IP address and the web address of each page loaded, which for the Instant Estimate results page can include the numbers you entered — for a short period for security and troubleshooting. We do not use these logs to profile you, and they are not shared with advertisers.

2.3 Information We Do Not Collect

We do not collect your Social Security Number, full date of birth, government employee ID, agency affiliation, or any classified or sensitive government information. The retirement planning inputs you provide are estimates used solely to generate your report and are not verified against any government database.

3. How We Use Your Information

We use the information we collect to:

• Generate and deliver your retirement scenario reports and other purchased content
• Process payments and send purchase confirmations and receipts (paid reports only)
• Respond to your questions, support requests, and feedback
• Send you service-related communications (purchase confirmations, policy updates)
• Send optional marketing emails only if you have opted in — you may opt out at any time
• Improve the accuracy, reliability, and usability of the Service
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with applicable legal obligations

We do not use your retirement planning inputs to build profiles, make automated decisions about you, or share your data with any government agency.

4. How We Share Your Information

4.1 Service Providers

We share information with a limited set of trusted third-party vendors who help us operate the Service. These vendors are contractually obligated to use your information only as directed by us and may not use it for their own purposes. Current key vendors include:

• Stripe, Inc. — payment processing for paid reports (not involved in free reports)
• Vercel, Inc. — website hosting and infrastructure, and cookieless page-view analytics (Vercel Web Analytics)
• Railway — hosting for our calculation engine, which computes your estimates and reports and requests the AI narrative
• Supabase, Inc. — database and authentication services
• Upstash — abuse protection (rate limiting); holds your IP address for about one minute
• Anthropic, PBC — AI-generated narrative content within reports. We do not send personally identifying information (such as your name or email) to the AI layer. Retirement planning inputs processed through Anthropic’s API are subject to Anthropic’s API data use policy, which prohibits using API inputs to train Anthropic’s models. Your financial inputs are not used to train AI.
• Resend — sends report and service emails
• Beehiiv — our newsletter, only if you opt in
• Google Fonts — delivers the site’s typefaces; like any web request, it receives your IP address

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, prevent fraud, or respond to a government request.

4.3 Business Transfers

In the event of a merger, acquisition, financing, bankruptcy, restructuring, or sale of assets, customer information may be transferred as part of the transaction. We will notify you via email or a prominent notice on the Service before your information becomes subject to a different privacy policy.

4.4 What We Never Do

• We do not sell your personal information to any third party
• We do not share your data with advertisers or data brokers
• We do not disclose your retirement planning inputs to any government agency, your employer, or any other party without your explicit consent

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. The types we use include:

• Essential cookies: required for the Service to function, including session management
• Analytics cookies: a first-party cookie (fh_sid) holding a random, anonymous session ID, so we can see which steps visitors complete (for example, “started the estimate,” “opened a report”), which site referred them, and where errors occur. These records never include your retirement inputs, salary, balances, name, or email. We use privacy-respecting analytics that do not fingerprint individual users
• Page-view analytics: Vercel Web Analytics counts page views without cookies. Before anything is sent, we remove the parts of a page address that could contain your inputs or a private report link, so it records only which page was viewed — never the numbers you entered or your report’s address
• Payment cookies: set by Stripe on checkout pages to enable secure payment processing (paid reports only)

We do not use advertising cookies or cross-site behavioral tracking cookies. You can control cookie settings through your browser. Disabling essential cookies may prevent certain features from working.

Do Not Track: Our Service does not currently respond to browser Do Not Track (DNT) signals, as there is no consistent industry standard for how DNT signals should be interpreted. We do not use advertising or cross-site tracking cookies regardless of DNT status.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Policy, subject to the following:

• Purchase records and receipts (paid purchases only): retained for 7 years to satisfy tax and accounting obligations — this data cannot be deleted on request due to legal requirements
• Retirement planning inputs used to generate a report: retained for 30 days after report delivery, then permanently deleted
• Support communications: retained for 2 years
• Beta feedback: retained for the duration of the beta and up to 12 months after it ends, then deleted; you may ask us to delete yours at any time
• Pricing survey answers: retained for the duration of the beta and up to 12 months after it ends, then deleted
• Usage analytics (anonymous first-party events, such as which pages were viewed and which form steps were completed): retained for 13 months, then deleted
• Usage and error records: anonymous (session ID only, no retirement inputs) and kept to improve the Service
• Estimate session data: inputs entered into the free Instant Estimate tool are never written to a database — they exist only in your browser and in the single request used to compute your results
• Calculator tool inputs (Pension Present Value, Where to Retire, Break-Even Calculator, Reserve/Guard Pension): these tools send your entered numbers to our calculation engine to compute a result, but nothing is written to a database — inputs exist only for the duration of that single request and are never stored

When we delete data, we remove it from our active systems within 30 days of the deletion trigger. Residual copies in encrypted backups are purged on our standard 30-day backup rotation schedule. Deletion requests submitted under Section 9 will be fully honored — including backup purge — within this window, except for data subject to legal retention obligations noted above.

7. Data Security

We implement reasonable technical and organizational safeguards to protect your information, including:

• Encrypted transmission via HTTPS/TLS for all data in transit
• Encryption at rest for sensitive stored data
• Access controls limiting employee access to personal data on a need-to-know basis
• Payment data handled exclusively by Stripe under PCI-DSS compliance — we never receive or store raw card data

No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, contact us immediately at hello@fedhorizon.com.

8. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable law. Our breach response process includes:

• Notification within 72 hours of discovering a breach where feasible, and no later than required by applicable state law
• Notification delivered via email to the address you provided, or by prominent notice on the Service if email is unavailable
• Notice will describe: the nature of the breach, the categories of data affected, the steps we are taking to address it, and what you can do to protect yourself

We periodically review our security practices and will respond promptly to any suspected incident. If you suspect your data has been compromised, please contact us immediately at hello@fedhorizon.com.

9. Your Rights and Choices

Regardless of your location, you have the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your personal information, subject to our legal retention obligations (see Section 6 for specific categories that must be retained)
• Opt-out of marketing: unsubscribe from marketing emails at any time via the unsubscribe link in any email or by contacting us
• Data portability: request your data in a portable format where technically feasible

To exercise any of these rights, contact us at hello@fedhorizon.com. We will respond within 30 days. We may need to verify your identity before processing your request.

10. Children’s Privacy

The Service is not directed to individuals under the age of 18. Use of the Service requires users to be at least 18 years of age, consistent with our Terms of Service. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected information from an individual under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at hello@fedhorizon.com.

11. Third-Party Links and Services

The Service may contain links to third-party websites, including OPM resources, financial planning tools, or government sites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. For material changes, we will provide notice via email (if we have your address) or a prominent notice on the Service at least 30 days before the change takes effect. For non-material changes, we may update the Policy without prior notice. Your continued use of the Service after notice constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

FedHorizon, a DBA of Northsight Holdings LLC
Privacy inquiries: hello@fedhorizon.com
Website: fedhorizon.com/privacy

We take privacy concerns seriously and will respond to all inquiries within 30 days.