State Consumer Privacy Statement
Effective date: August 1, 2026
Supplements the Plan With Ivy Privacy Policy for residents of California, Colorado, Connecticut, Utah, and Virginia.
This Statement describes the categories of personal information Top Secret Ventures LLC ("Company," "we," "us") collects about Plan With Ivy users, why we collect it, who we share it with, and the rights available to you under the California Consumer Privacy Act (as amended by the CPRA) and comparable laws in Colorado, Connecticut, Utah, and Virginia. It should be read together with the main Privacy Policy.
Categories of Personal Information We Collect
| Category | Examples | Do we collect it? |
|---|---|---|
| Identifiers | Name, email, phone number, account username | Yes |
| Financial information | Self-reported account balances, income, Social Security estimates, pension information, real estate values | Yes — entered directly by you; not obtained from any financial institution |
| Account credentials | Login credentials for your Plan With Ivy account | Yes |
| Commercial information | Subscription and billing history | Yes |
| Internet or network activity | Pages viewed, session activity, clickstream, device/browser information | Yes |
| Geolocation | Approximate location derived from IP address | Yes, approximate only — we do not collect precise geolocation |
| Inferences | Retirement scenario outputs generated from the information you provide | Yes |
| Sensitive personal information | Financial account information, account login credentials | Yes (see below) |
| Protected classifications, biometric information, health information | — | No — we do not knowingly collect these categories |
A note on financial information specifically: every financial figure in your profile is entered by you. We do not link to, aggregate data from, or receive statements or balances directly from any bank, brokerage, retirement plan administrator, or other financial institution.
Sensitive Personal Information
Your financial account information and account login credentials qualify as sensitive personal information under the CCPA. We use this information only to provide, maintain, and improve the Services — primarily to generate your retirement projections — and we do not use it to infer characteristics about you beyond what you've told us, nor do we use it for purposes unrelated to providing the Services. You have the right to limit our use of sensitive personal information to these purposes; see "Your Rights" below.
Categories of Sources
We collect personal information:
- Directly from you — when you create an account, build your profile, or contact us
- Automatically — through your use of the Services (cookies, analytics, device data)
- From service providers acting on our behalf (for example, payment processors confirming a transaction occurred)
We do not purchase personal information from data brokers, and we do not receive personal information from financial institutions or account-aggregation services.
Business or Commercial Purposes for Collection
We collect and use personal information to: provide and maintain the Services; generate retirement projections and scenarios; process payments; provide customer support; secure the Services and prevent fraud; comply with legal obligations; and improve and develop the Services, including through anonymized or aggregated analysis.
Sale and Sharing of Personal Information
We do not sell personal information for money.
We do not sell or share personal information, including for cross-context behavioral advertising.
Categories of Third Parties We Disclose Personal Information To
- Cloud hosting and infrastructure providers
- Payment processors
- Customer support platforms
- Analytics providers
- AI infrastructure providers who process inputs/outputs to generate projections and explanations, under contract terms limiting their use of the data
- Law enforcement or regulators, when legally required
- A successor entity, in the event of a merger, acquisition, or sale of assets
Automated Decision-Making Technology (ADMT)
Plan With Ivy uses AI to generate retirement projections and scenario comparisons based on the information in your profile. As of the effective date of this Statement, these features are intended to inform your own decision-making rather than to make a decision about you, and a human is not automatically removed from the loop — you review and act on the projections yourself.
If a future feature uses automated processing to make or substantially assist a "significant decision" about you (for example, a decision affecting your access to a financial product or service, made by the technology with no meaningful human review), we will, before turning it on: provide you with a pre-use notice describing how the technology works and what it means for you; offer you the ability to opt out, except where an exception applies; and provide a way to request access to information about how the technology reached an output about you.
Your Rights
If you are a California resident, you have the right to:
- Know / Access — request the categories and specific pieces of personal information we've collected about you
- Delete — request deletion of your personal information, subject to certain legal exceptions
- Correct — request correction of inaccurate personal information
- Opt out of sale or sharing — see above; we do not sell or share personal information
- Limit use of sensitive personal information — request that we limit use of your sensitive personal information to what's necessary to provide the Services
- Non-discrimination — we will not deny you the Services, charge you a different price, or provide a different level of service because you exercised a privacy right
- Appeal — if we deny a request, you may appeal the decision
Colorado, Connecticut, Utah, and Virginia residents have similar rights under their respective state laws, including rights to access, correct, delete, and port personal information, and to opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions producing legal or similarly significant effects.
How to Exercise Your Rights
You can submit a request by:
- Emailing info@planwithivy.com, or
- Mailing a request to Top Secret Ventures LLC, 30 N Gould St #3927, Sheridan, WY 82801, USA
We will verify your identity before processing a request that requires verification, generally by confirming information already associated with your account. You may designate an authorized agent to submit a request on your behalf; we may require proof of the agent's authority and separately verify your identity.
We will respond to verifiable requests within the time required by applicable law (generally 45 days, extendable once by an additional 45 days with notice to you).
Retention
We retain the categories of personal information above for as long as your account is active, and for 30 days after account deletion to allow for account recovery, except where a category is subject to a different, more specific retention period described in the main Privacy Policy (for example, AI conversation transcripts) or where longer retention is required for legal, tax, security, or fraud-prevention purposes.
Contact
Questions about this Statement or requests to exercise your rights can be directed to:
Top Secret Ventures LLC
30 N Gould St #3927
Sheridan, WY, 82801, USA
info@planwithivy.com