FreedomOps — Privacy Policy
Effective Date: August 5, 2026 Last Updated: August 5, 2026 Data Controller: myFreedomOps LLC, Fort Irwin, CA Privacy Contact / DPO: sedjro@myfreedomops.com
1. Overview
This Privacy Policy explains how myFreedomOps LLC collects, uses, shares, and protects information when you use FreedomOps (the "Service"). By using the Service, you agree to this Policy.
2. Information We Collect
Information you provide: - Account data: name, email, password (hashed), phone, MFA details. - Profile data: financial goals, household details, employment/military status. - Financial data you enter: accounts, balances, transactions, debts, budgets, goals. - Military data (optional): Leave and Earnings Statement (LES) details, rank, branch, BAH/TSP figures, PCS information. - Communications: support requests and feedback.
Information about your accounts: You enter account balances, debts, and transactions yourself, or import them from a file you upload. FreedomOps does not connect to your bank. We have no aggregation provider, we never ask for or receive your online banking credentials, and no financial institution shares data with us. If we add account linking in future, this Policy will be updated before that feature is enabled.
Leave and Earnings Statements: If you use the LES import, your LES PDF is read in your browser and is never uploaded to us. Only the pay figures you choose to save are transmitted, and identifying details on the statement — your name, the masked Social Security number, and your duty ZIP code — are excluded from what is sent.
Information collected automatically: IP address and user agent, recorded against sign-in and other security events in an audit log, plus server request logs kept by our hosts. We do not use analytics or advertising SDKs.
Information from third parties: none. We do not obtain data about you from identity-verification, fraud-prevention, credit-bureau, or data-broker sources.
3. How We Use Information
We use information to: (a) provide, operate, and secure the Service; (b) display dashboards, analyses, and reports from the figures you enter; (c) generate AI-based analyses when you request them; (d) communicate with you and send alerts you enable; and (e) comply with legal obligations. We do not process payments and we do not profile you for advertising. We process data on the legal bases of contract performance, your consent, our legitimate interests, and legal compliance (where GDPR applies).
4. AI Processing
Certain features send your financial data to AI services (Anthropic, which provides the Claude models used by the AI advisor) to generate analyses and recommendations. We configure these services so that, to the extent supported, your data is not used to train third-party foundation models. Confirm the exact data-handling terms with your AI provider and reflect them here.
5. How We Share Information
We share information only as described here: - Service providers/subprocessors: Vercel (web hosting), Render (API hosting), Supabase (database hosting, AWS us-east-2), Anthropic (AI features), and Resend (transactional email). We use no aggregation, analytics, advertising, or payment processors. - Legal and safety: to comply with law, enforce our Terms, or protect rights and safety. - Business transfers: in a merger, acquisition, or asset sale, with notice. - With your direction/consent: e.g., exporting reports.
We do not sell your personal information for money. If any sharing qualifies as a "sale" or "sharing" under the CCPA/CPRA, we will provide the required opt-out. We do not share your financial data for advertising, and we run no advertising on the Service.
6. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Service, then for the period required to comply with legal, accounting, or reporting obligations. You may request deletion as described in Section 8. Backups, where retained, are purged on a rolling schedule not exceeding 30 days.
7. Security
We implement administrative, technical, and physical safeguards including encryption in transit (TLS) and at rest, access controls and role-based access, MFA, encryption at rest managed by our database host, logging and monitoring, and least-privilege practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. Report security concerns to admin@myfreedomops.com.
8. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your data, and to withdraw consent or object. California residents (CCPA/CPRA) have rights to know, delete, correct, and opt out of sale/sharing and certain profiling, and not to be discriminated against for exercising rights. EEA/UK residents (GDPR) have corresponding rights and may lodge complaints with a supervisory authority. To exercise rights, contact sedjro@myfreedomops.com; we will verify your identity before responding. You can delete your account in-app.
9. Cookies and Tracking
We use two first-party cookies, both strictly necessary: one holding your refresh token so you stay signed in, and one flagging that a session exists. We set no analytics, advertising, or third-party tracking cookies, so there is no non-essential tracking to consent to. Clearing cookies in your browser signs you out.
10. Children's Privacy
The Service is not directed to children under 18, we do not knowingly collect their data, and the Terms require account holders to be 18 or older. If you believe a child provided data to us, contact sedjro@myfreedomops.com and we will delete it.
11. Financial Data and GLBA
As a provider of financial services tools, we may be subject to the GLBA. Our privacy practices for nonpublic personal information are described in this Policy. We are not a bank, lender, or other financial institution.
12. International Transfers
We process and store data in the United States (AWS us-east-2). If you access the Service from outside the U.S., you consent to transfer and processing in the U.S., subject to appropriate safeguards (e.g., Standard Contractual Clauses) where required.
13. Changes to This Policy
We may update this Policy. Material changes will be communicated through the Service or by email, and the "Last Updated" date will change.
14. Contact
Privacy questions or requests: sedjro@myfreedomops.com · Fort Irwin, CA.
Users stationed outside the United States. FreedomOps is built for U.S. service members, and service members are routinely stationed overseas — including in the EU and the UK. We therefore do not claim the Service is offered only to people in the United States. All processing takes place in the United States. Where UK or EU data protection law applies to you, our lawful basis is your consent and your performance of the contract formed by these documents, and you may exercise your rights by writing to the address above.
We have not appointed a representative in the EU or UK under Article 27 of the GDPR. If you believe your circumstances require one, write to us at the address above and we will respond.