Privacy Policy

9to95 is a retirement projection calculator. With one subscription you will be able to use it in two ways: through your own AI assistant, which calls the calculator on your behalf, or in our own web app, which you operate yourself after signing in. This policy covers both, and the 9to95.com website. It explains what we collect, what we never store, where your plan lives, and who else is involved. "We" and "us" mean the company named at the end of this policy.

1. The short version

• We do not store your plan. Your scenario (ages, balances, income, spending, assumptions) is sent to the calculator, used to run a calculation, and then discarded. The result of a completed simulation is kept in the server's memory for up to 15 minutes, so that an identical repeat request is answered from memory and is not run or counted against your allowance twice. It is identified only by a one-way fingerprint of the request, not by your name or account, is never written to disk or to a log, and no result is stored beyond that. In the web app we also keep, under your account, a receipt for each seeded simulation you have completed: a one-way fingerprint of the request and a note that it finished, with nothing from your plan and no result. It lets an identical repeat go uncounted for as long as you have an account, and it is deleted with your account.
• In the web app, your plan and the results of simulations the app has completed are kept in your own browser, on your own device, and your plan in any file you choose to save. We do not hold a copy. If you clear your browser or lose the device, we cannot get them back; a simulation can simply be run again.
• We do not write the contents of your requests to our logs.
• The web app records which of its screens you open, as one line per screen with your account identifier, held by our hosting provider for 7 days; we keep weekly counts from it and nothing else.
• The only personal information we keep is your account record, a record that you agreed to automatic renewal, including when you started a free trial, a count of how much you use the calculator each day, receipts for the seeded simulations you have completed in the web app, the one-way codes that let us review repeated free trials, the screen lines our hosting provider holds for 7 days, and a small amount of billing and support information, all listed in section 2. After an account is deleted we keep only its consent record and a one-way fingerprint of its user name, as section 7 explains.
• The web app sets one cookie, to keep you signed in. Nothing else is set by us; the sign-up page's bot check may set a short-lived Cloudflare cookie, as described under No trackers. There are no advertising cookies and no third-party analytics or trackers anywhere on 9to95.
• When your subscription, free trial or complimentary access ends, your account is frozen and its record is deleted 90 days later.
• We do not sell your information, share it for advertising, or use it to train AI models.
• If you use 9to95 through an AI assistant, your conversation happens in that assistant. Its provider keeps its own copy under its own rules, which we do not control.

2. What we collect and keep

This is what we will collect and keep once subscriptions open.

Your account record.

• Your email address, which you give when you create the account. We use it for the account messages listed in section 5, including the link to reset a forgotten password, the confirmation of a change of address and the notice to the old address that it was changed. We do not use it for marketing unless you ask for product news.
• How you sign in: a one-way hash of your password. We never store a password in readable form, and we never see it.
• The connections you have approved between your AI assistant and the calculator, and the hashed sign-in tokens that keep those connections working. We also keep the registration that your assistant's software sends when it connects, which describes that software (its name and the addresses it returns to), not you.
• Your plan (annual or monthly), your subscription status and your renewal date, or, during a free trial, the date it ends, or, if we have given you complimentary access, the date we set for it to end. The app does not show that last date, but it is part of your record and we will tell you it if you ask.
• How you reached us, if the link you used or a code you entered says so: one word, such as "ads" or "referral", and any referral code, recorded once when the account is created and not changed after.
• The date you accepted our Terms and which version.

Your consent record. The law requires us to be able to show that you agreed to automatic renewal. We keep that proof as a separate record that contains only: the subscription identifier Paddle gave your subscription; the date and time you agreed; the plan and price you were shown, the length and end date of any free trial, and any discounted first-year price and the regular price it renews at; which version of the checkout disclosure and of the Terms you agreed to; the dates and types of the trial, renewal and price-change notices we sent you; and the date your subscription ended. It does not contain your email address, your name or your sign-in details. It can be connected to you only through Paddle's billing records.

Access logs. For each call to the calculator, whether your assistant makes it or you make it from the web app, and for each screen you open in the web app, our server writes one short line: the time, your account identifier, the name of the tool or screen that was used (taken from a fixed list, never from what you typed), whether the call succeeded, and how long it took. The line does not contain what was sent or what was returned: no scenario, no figure from it, no result, no page address and no IP address. For a large simulation, the server writes one more line, with no account identifier, that records how the work was shared between computers: how many were used, the number of trials, how long each step took and, while we test this, a short check code that shows whether two computers got the same answer and cannot be turned back into any figure. We keep no copy of these lines ourselves. They are held by our hosting provider as described in section 7. Before these lines expire, once a week, we work out from them how many accounts used each screen and tool, and which screen was open last before a sign-out, before a session ended, or before a subscription was cancelled, as counts only. We keep the counts and nothing else from the lines.

Usage counts. To apply the limits on the calculator described in our Terms, we keep, for each account, the number of simulation trials run on the current day. The count is one number per account per day. It contains nothing from your plan and no result. Each day's count is deleted the next day. While a long calculation is running, the server also holds a running count of its trials in memory, so that it can be charged to the day's allowance.

Simulation receipts. When you run a seeded Monte Carlo simulation in the web app, including the standard simulation the Overview screen starts by itself, we keep a receipt for it under your account identifier: a one-way fingerprint of the request (your plan as you sent it, any what-if settings, the random seed, the return method and the number of trials) and a note of whether the run completed. The fingerprint cannot be turned back into your plan, and the receipt holds no figure from your plan and no result. Its only purpose is to tell that a later request is an identical repeat, or a standard Overview refresh of a plan you have already run with at least as many trials, so that it is not counted against your daily allowance again, even after the 15 minutes described below have passed or the server has restarted. A receipt for a run that failed or was cancelled is removed. Receipts are kept in the same store as usage counts, on our server, which is located in the United States, and are deleted with your account record. Simulations run through your AI assistant do not create receipts.

IP addresses. Our server holds the IP address of each connection in memory only, to limit abuse such as repeated failed sign-ins and to limit how often the demo can be called from one address. It is not written to a log or a file and is discarded when the server restarts.

The demo. The demo needs no account and no sign-in. It runs only the invented sample households that come with it and cannot accept figures of your own, so you give it no information about yourself. When the demo is used we record the same access-log items as for any other call (time, tool name, whether it succeeded, how long it took), with no account identifier because there is none. We do not ask demo visitors for a name or an email address. If you reach the demo through an AI assistant, section 4 applies to that conversation.

Billing information from Paddle. Paid orders are sold by Paddle, our reseller and merchant of record. Paddle collects your payment details and keeps them under its own privacy policy. We never receive your full card number. A free trial is started at Paddle's checkout, so Paddle holds your payment details and a billing record from the day the trial starts, although nothing is charged until it ends. When you start a trial, we may check Paddle's records to see whether that email address has had a 9to95 trial before. Paddle shows us your email address, the country and postal code you gave at checkout, what you bought, and whether payments succeeded, failed or were refunded.

Repeated free trials. To review free trials that may belong to one person, we keep, for 30 days after a trial starts, a one-way code made from the IP address used to create the account and, when Paddle supplies them, from the card's brand, last four digits and expiry month. The codes cannot be turned back into the address or the card. When two trials on different accounts share a code, our operator is told that they share a signal, and nothing else; access is never changed by this, because shared households and cards are often legitimate. The codes are deleted 30 days after the trial starts, or sooner when the account is deleted.

Messages you send us. If you email us, we keep the message and our reply. Please do not send account numbers, balances or other financial details by email. We do not need them to help you.

The websites. The 9to95.com pages are plain pages. They set no cookies, run no scripts, and load nothing from any other company. The web app is different because it is an application: it runs our own scripts, sets the sign-in cookie described below, and keeps your plan in your browser's storage. Neither uses advertising cookies or third-party analytics. The address of the web app will be published here before subscriptions open. Our web host counts the requests made to each page of the website, by day, by the page a visitor came from (the address a browser sends with each request, if it sends one) and by any campaign or referral marker in the link that was used. We read those counts to see how people find 9to95. They are numbers only: we do not receive or keep a list of individual visits, and no cookie or script is involved.

The web app

Where your plan is kept. When you build a plan in the web app, it is saved in your browser's own storage (a database the browser keeps for our site) on the device you are using. It is not saved on our servers. Nobody at 9to95 can see it, copy it, restore it or delete it. The app also keeps in your browser the plans you have saved for comparison, which plan and screen you had open, and your display settings. The app also keeps in your browser the results of seeded Monte Carlo simulations it has completed, so that the Overview screen can show a result without running the simulation again. Each is filed under a one-way fingerprint of your account and of the plan it was run for, and under the version of the calculator that produced it; a newer version does not reuse it. These are the results we sent to your browser; they are not sent back to us, we hold no copy, and nobody at 9to95 can see, restore or delete them. You remove them by clearing this site's data in your browser's settings.

What is sent to us. Each time the app needs a calculation, whether you asked for one or the Overview screen started its standard simulation by itself, the app sends the plan, with any what-if settings, to the calculator. The calculator runs the numbers, sends the result back to your browser, and discards the plan. This is the same calculator, with the same rule, that an AI assistant calls. A long calculation may run in the background while you keep working. Its inputs and its result are then held in the server's memory until your browser collects the result, and for no longer than two minutes. If the calculation was a historical backtest, one figure from its result, its historical success rate, stays in memory for the rest of those two minutes after your browser has collected the result, so that a comparison with a Monte Carlo simulation you ask for next can use it; it is dropped at once if the backtest fails, is cancelled or is deleted. They are then deleted, except that a copy of a completed simulation's result is kept as the next paragraph describes. They are never written to a log or a file, and a server restart leaves nothing behind. If you type figures from a filed tax return into the screen that checks the calculator against a return, they are handled exactly like the plan: sent for the calculation and discarded.

Repeated simulations. When a Monte Carlo simulation finishes, the server keeps its result in memory for up to 15 minutes, whether you ran it from the web app or through your AI assistant. If an identical request arrives in that time, it is answered from memory instead of being run again, and it is not counted against your allowance a second time. The stored result is identified only by a one-way fingerprint of the request (the plan as the calculator read it, together with the run settings), not by your plan itself, your name or your account. Reading a stored result does not extend the 15 minutes. At most 64 results are held at once, and the oldest unused one makes way for a new one. The web app's server also keeps up to two further results for your account that have just finished, so that a second screen of the same plan can use the run instead of repeating it. These two are also marked with a one-way code of your account identifier, which cannot be turned back into it, so that a third result of yours replaces your oldest; when the memory set aside for these results is full, the oldest result of anyone's makes way. They are held for the same 15 minutes, in memory only, never written to disk or to a log, and lost when the server stops. Nothing in this memory is written to disk or to a log, and it is lost whenever the server stops. A simulation you ask to run with a new random draw is never kept. In the web app, an identical repeat of a seeded simulation is not counted even after those 15 minutes, because of the receipt described above; if the result is no longer in memory it is computed again without being counted, unless your browser already holds it, in which case no request is sent to us at all.

Files you save. You can save your plan to a file on your own device and open it again later, on this device or another. That file is yours. It is not sent to us when you save it. It is not encrypted. Anyone who has the file can read your plan, so keep it somewhere safe.

Reports. If you ask for a PDF or spreadsheet report, the server builds the file in a temporary folder, sends it to your browser, and deletes its copy at once, whether or not the send succeeded. We do not keep reports, and we cannot send you one again later. Run it again if you need it.

Sign-in session. When you sign in, the app sets one cookie, named __Host-retire_web, that keeps you signed in. It holds a random session token and nothing else: no name, no email address, no plan data. It is marked Secure, HttpOnly and SameSite, which means it travels only over encrypted connections, cannot be read by scripts, and is not sent when another website links to ours. A session lasts at most 12 hours and ends after 2 hours without use, or when you sign out. Our server stores only a keyed hash of the token. During the sign-in step itself the sign-in form sets one more short-lived cookie that protects the form against forged submissions; it is removed when you sign in. These cookies are strictly necessary to provide a service you have asked for, so no cookie consent is requested and no banner is shown. We will add a consent step if we ever add a cookie that is not strictly necessary.

No trackers. The web app runs our own scripts only. The one exception is the sign-up page, which loads a bot-check script from Cloudflare, our web host, so that automated sign-ups cannot use up the confirmation-email allowance. Cloudflare receives the IP address and browser details of whoever opens that page, and may set a short-lived cookie for the check; it is a security check, not analytics or advertising, and Cloudflare does not get your name, email address or anything you type. No other page loads anything from any other company. Its security policy, enforced by your browser, allows no script, font, image or connection from any other company other than that one Cloudflare bot-check script on the sign-up page. It loads no advertising, no third-party analytics, no session recording and no social media code. It does not track you across other websites, and no other company collects information about you through the app. Because we do not track visitors over time or across other sites, there is nothing for a "Do Not Track" or similar browser signal to switch off, and we do not change our behaviour in response to one.

If you lose the browser copy. Your plan is deleted from your browser if you clear your browsing data, use a private or incognito window, remove the browser, or lose or reset the device. Some browsers also remove a website's stored data by themselves after a period in which you have not visited it. We cannot restore a plan in any of these cases. Save your plan to a file if you want to be sure of keeping it. Simulation results saved in your browser go the same way. The app runs the simulation again, and the receipt means an identical repeat is not counted.

Shared computers. The plan and the saved simulation results stay in the browser after you sign out, so that they are there when you come back. Anyone who can use that browser can read them. On a computer other people use, delete the plan from the app before you leave, sign out, and clear this site's data in the browser's settings, which also removes the saved results.

When your account ends. Deleting your account record does not reach into your browser. A plan saved in your browser or in a file, and any simulation results saved in your browser, stay there until you delete them; clearing this site's data in your browser removes them. The simulation receipts described above are deleted with the account record.

3. What we never store

• Your scenario, in whole or in part: names, dates of birth, balances, income, spending, Social Security estimates, assumptions. In the web app it is kept in your browser, not by us. A one-way fingerprint of a request, kept as a simulation receipt, is not a copy of the scenario and cannot be turned back into one.
• Any projection or simulation result, beyond the time needed to calculate it and hand it to you and, for a completed simulation, the 15 minutes described in section 2 during which its result is held in memory, identified as section 2 describes and never written to disk or to a log, so that an identical repeat is not run twice.
• The content of requests or responses in logs, error reports or analytics.
• Your conversation with your assistant. We never receive it. We receive only the tool requests your assistant chooses to send.
• Bank, brokerage or other financial account credentials or connections. The Service does not link to financial accounts.

Because we do not keep your scenario, and keep a result only briefly and in memory, we cannot send them to you, restore them, or delete them later. They exist on our systems only while a calculation runs, while its result waits to be delivered to you, for the 15 minutes after a simulation finishes during which its result is held in memory, and while a report you asked for is being built and sent. The one exception is described in section 6: a computer that ran part of a simulation can be paused with traces of it still in its memory.

4. Your AI assistant and its provider

If you use 9to95 through an AI assistant that you chose, such as Gemini, Claude or ChatGPT, everything you type to your assistant, the scenario it writes, and the results we send back all pass through your assistant and may be stored by its provider, according to the settings and terms of your account with that provider. The provider decides for itself how that information is used and how long it is kept. It is not our service provider and we do not control it.

If you want to limit what is kept about your plan, look at your assistant provider's privacy settings and data controls. Deleting a conversation, or turning off history or model training where the provider offers that, is done there and not with us.

When you use the web app there is no assistant in between. What you enter goes only to our calculator.

5. How we use what we keep

• To create and secure your account and sign you in, including sending a password-reset link and confirming a change of email address.
• To check that you have an active subscription or free trial, to give each person one free trial, and to apply the usage limits described in our Terms.
• To send account messages: receipts and confirmations, renewal reminders, notices that your access has ended and when your account record will be deleted, notices of price or terms changes, security notices and replies to your questions.
• To keep the Service running, investigate faults and prevent abuse.
• To meet legal obligations and to establish or defend legal claims.
• To see how people find 9to95 and whether they go on to subscribe. Each week we count how many people visited each page, created an account, opened checkout, started a trial, subscribed, renewed, cancelled or were refunded, and by which route. We work these counts out from the records listed in section 2 and keep only the counts.

We send product news or marketing email only if you have asked for it, and every such email has an unsubscribe link and our postal address. Account messages are not marketing and are sent while you have an account. We do not use what we keep to profile you, to make automated decisions about you, or to train any AI model.

6. Who we share information with

We do not sell personal information, and we do not share it for advertising. We disclose it only to:

• Paddle (Paddle.com Market Limited and its affiliates, including Paddle.com Inc. for buyers in the United States), which sells subscriptions as merchant of record, takes payment, handles sales tax, refunds and billing support, runs the customer portal where you cancel or change your card, and uses its own privacy policy for the information it collects. Paddle becomes involved only when subscriptions open.
• Our hosting provider and computing providers: the companies that run the server the calculator and the web app operate on, and any computers we use to run part of a calculation. They carry your connection to the calculator, hold our server's access-log lines and keep encrypted backup copies of our account store, both as section 7 describes, and may record the address of each connection in their own network systems. A calculation, or part of one, may run on more than one computer and at more than one such provider. A computer that runs part of a simulation receives your plan, including any names you typed into it, but not your account, your sign-in details or your IP address. Our software on it keeps the plan and its numbers in memory only, writes none of them to a log or a file, and discards them as soon as its part is done. The provider may pause a computer that is not in use and keep its memory as it was, so traces of the last calculation can remain in that memory while the computer is paused. Section 11 says what we do and do not promise about location.
• Cloudflare (Cloudflare, Inc.), which serves the 9to95.com website pages and runs the bot check on the sign-up page and, in doing so, processes the requests your browser makes for them, including your IP address, under its own privacy policy.
• Our email provider: an email delivery provider that sends account and renewal email for us and hosts our support mailbox. It receives your email address and the content of those messages, and may use them only to deliver mail for us.
• Authorities or other parties when the law requires it, for example in response to a valid subpoena or court order, or when needed to protect the Service or its users from fraud or attack. Because we do not store scenarios, and hold a result only in memory for minutes, we have none to produce.
• A successor, if the business is sold or reorganized. The successor must honor this policy for information collected under it.

We name the providers you meet directly, Paddle and Cloudflare, and describe the others by what they do for us. Paddle sells to you on its own account as merchant of record and is not our service provider; its own privacy policy governs what it collects. Every service provider that handles personal information for us, named or not, must work under a written contract that allows it to use the information only to provide its service to us, and that requires it to hold any company it uses in turn to the same limit. Your AI assistant's provider is not our service provider; section 4 explains its role.

7. How long we keep it

These are the periods that will apply from the day subscriptions open.

• Account record: while you have a subscription, a free trial or complimentary access. When any of these ends, your account is frozen: it cannot be used and we do nothing with it except hold it. We delete the account record, including your email address, sign-in details and assistant connections, 90 days after the day your access ended. If you ask us to delete it sooner, we will do so within 30 days of your request. An account that never starts a trial or subscription is deleted 90 days after the day it was created, or, for an account that existed before this rule took effect, 90 days after the day it took effect.
• Retired user names: a one-way fingerprint of a deleted account's user name, kept indefinitely so that the same name cannot be registered again and inherit that account's subscription. It cannot be turned back into the name and holds nothing else.
• Consent record: three years after your subscription ends, because the law requires us to be able to show that you agreed to automatic renewal. It contains only the items listed in section 2 and no email address, so it stays after the account record is deleted.
• Access logs: our hosting provider holds our server's log lines where we can search them for 7 days; after that we can no longer see or retrieve them. We keep no copy and send them nowhere else. If we ever export log lines to investigate a fault or an attack, we delete the export within 90 days. The hosting provider also keeps aggregate traffic counts (numbers of requests and response times, not individual requests) for about 15 days. It may also keep its own records of activity on its systems for its security monitoring; we cannot see those records and do not control how long it keeps them.
• Usage counts: each day's count is deleted the next day. Any count still held is deleted with your account record.
• Simulation receipts: kept while you have an account, so that an identical repeat is never counted twice, and deleted with your account record. A receipt for a run that did not complete is removed at once.
• Backups: our hosting provider makes a daily encrypted backup copy of the store on our server that holds account records, sign-in details, usage counts and simulation receipts, and keeps each copy for up to 5 days before it expires. So anything we delete from that store, including an account record or a day's usage count, is gone from the backups within that further period. We use these copies only to recover the store after a failure.
• Calculations in progress: inputs and results of a background calculation are held in memory for at most two minutes after it finishes, and are deleted as soon as your browser collects the result, except that a historical backtest's success rate is kept for the same two minutes whether or not the result has been collected, so that a follow-up Monte Carlo comparison can use it; it is dropped at once if the backtest fails, is cancelled or is deleted.
• Reports: deleted from our server as soon as they have been sent to you.
• Plans and saved simulation results in the web app: we never have them. They stay in your browser, and your plan in any file you save, until you delete them.
• IP addresses: held in our server's memory for rate limiting only, and discarded on restart. Our hosting provider may record the IP address of each connection in its own network systems; we cannot see those records, do not copy them, and do not control how long the provider keeps them.
• Support email: 24 months after the conversation ends. If you wrote to us, your messages and the address you wrote from stay in our support mailbox for that time, even after your account record is deleted. Ask us and we will delete them sooner.
• Repeated-trial codes: 30 days after the trial starts, or deleted with the account record.
• Billing records: Paddle keeps transaction records for as long as tax and financial law requires.
• Scenarios: not kept at all.
• Results: a completed simulation's result is held in the server's memory for up to 15 minutes after it is computed, so that an identical repeat is not run or counted twice. It is identified only by a one-way fingerprint of the request, or, for the two results the web app's server keeps for a second screen, by that and a one-way code of your account identifier, is never written to disk or to a log, and is lost when the server stops. No other result is kept on our systems; results the web app saves in your own browser are described in section 2.
• Weekly counts: kept indefinitely. They are numbers of visits or accounts per week, per page, screen, tool or route, and contain no account identifier, no email address and nothing from any plan.

8. Security

We keep as little as possible, which is the strongest protection we can offer. Beyond that: every connection to the Service is encrypted in transit; passwords are stored only as one-way hashes, and sign-in tokens and session tokens only as keyed hashes, so a copy of our sign-in store cannot be used to sign in; that store and its backup copies are encrypted when stored; the web app runs under a strict browser security policy that allows no outside script; sign-in attempts are rate-limited; and access to the systems that run the Service is limited to the people who operate it, except that our hosting provider's staff can reach the underlying machines under the provider's own access controls and audit logging. We review these safeguards when the Service changes.

No system is perfectly secure. If a security breach affects your personal information, we will notify you as the law requires, including under New York's breach notification law.

9. Your choices and rights

Whatever state you live in, you may ask us to:

• tell you what personal information we hold about you, where it came from, what we use it for and whom we have disclosed it to, and give you a copy in a portable form;
• correct it;
• delete your account and the information tied to it.

Email privacy@9to95.com from the address on your account. That is how we verify that the request is yours; we will not ask you for more than that unless we cannot match the address. You may also have someone make the request for you if they show us that you authorised them. We will answer within 30 days. We will not treat you differently, charge you more or give you less for making a request. If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why. If you disagree with our answer, reply and ask us to review it; a different person will look at it and reply within 30 days, and we will tell you how to complain to your state's attorney general if you are still not satisfied.

For California residents. The California Consumer Privacy Act gives you the rights above by name: to know, to access, to correct, to delete, to data portability, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be discriminated against for using them. We give every one of them to everyone, as described above. In the terms the Act uses, the categories of personal information we will collect are: identifiers (your email address and account identifier and the retired-name fingerprints); account sign-in credentials, which the Act treats as sensitive personal information and which we use only to sign you in; commercial information (your free trial, your subscription and its history, and how you reached us with any referral code); and internet activity (the access-log and screen lines, weekly counts, usage counts and simulation receipts described in section 2, and the repeated-trial codes) and the contents of plans you send for calculation (which can include names, dates of birth and financial figures), used only to run the calculation and not kept. We collect them from you and from Paddle. We disclose them only to the service providers described in section 6, for the purposes in section 5. We do not sell personal information and we do not share it for cross-context behavioral advertising, we have not done so, and we will not do so, so there is nothing to opt out of and no "Do Not Sell or Share" link is needed. We do not use or disclose sensitive personal information for any purpose other than signing you in, so there is nothing to limit. We do not sell or share the personal information of anyone under 16.

For payment information held by Paddle, you can also contact Paddle at https://paddle.net.

10. Children

The Service is for adults. You must be at least 18 to have an account. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a child has given us information, email privacy@9to95.com and we will delete it.

11. Where we operate

The Service is operated from the United States and is offered only to people who live in the United States. Today the server that runs the calculator and the web app is located in the United States, our most recent check found the computers that run parts of large simulations located in the United States too, and the 9to95.com pages are served by Cloudflare, whose network answers your browser from the location nearest to you. We state these as the facts today, not as a promise: we do not promise that every part of the Service will always run on computers in the United States. A service provider described in section 6 may process information outside the United States. The provider of the computers that run parts of large simulations does not let us choose where they run and does not promise a location, so their location can change without notice to us. Wherever a provider works, we require it to use your information only to provide its service to us, under a written contract that limits what it may do with the information, and section 6 describes every kind of provider we use. If we add a provider that does something materially different with your information, section 12 says how we tell you. If you use the Service from another country, your information is processed in the United States and wherever our providers operate, and we do not offer the protections that the laws of other countries may require of businesses that market to their residents.

12. Changes to this policy

If we change this policy, we will post the new version here with a new effective date and keep the previous version available on request. If a change is material, for example if we ever began to store scenarios, added a cookie that is not strictly necessary, or recorded more about how you use the app than this policy describes, we will email you at least 30 days before it takes effect, and we will not apply it to you without that notice. If you do not agree to a material change, you may cancel, and our Terms say what refund you get.

13. Contact

9to95 LLC, a New York limited liability company
Mailing address: 418 Broadway STE R, Albany, NY 12207
privacy@9to95.com