RothGPT (“RothGPT,” “we,” “us”) provides Roth conversion analysis through a web application at https://www.rothgpt.com and through a Model Context Protocol (MCP) connector usable inside Claude. This policy explains what we collect, how we use it, who we share it with, and your choices. It applies to both the website and the connector.
Account information. When you sign in, our authentication provider (WorkOS) gives us your verified email address and a stable user identifier. We do not receive or store your password — authentication is handled entirely by WorkOS.
Profile information you provide. Birth date, filing status, and (if married) spouse birth date.
Financial inputs you provide. The figures needed to model a Roth conversion — e.g., traditional and Roth account balances, Social Security benefit and start age, expected return, inflation and Social Security growth assumptions, distribution method and ages, other taxable income, Medicare coverage, and tax-payment source. These are self-reported planning inputs; we do not connect to your financial institutions and we do not access real account balances, transactions, or credentials.
Calculation results. The analysis and reports we generate from your inputs.
Payment information. If you purchase a paid plan, payments are processed by Stripe. We receive subscription status and limited transaction metadata; we do not receive or store full card numbers.
We do not sell your personal information, and we do not use your financial inputs to train AI models.
When you use RothGPT inside Claude via our connector, you authenticate with the same WorkOS login, and Claude accesses your RothGPT data on your behalf to run analyses and present results. The connector is a relay: it sends your inputs to our backend to compute results and returns those results to your Claude conversation. Your use of Claude itself is governed by Anthropic's privacy policy.
We share information only with service providers that help us run RothGPT, under their respective terms:
We may also disclose information if required by law or to protect the rights, safety, or security of our users or the service.
Your data is stored in a PostgreSQL database hosted on Render. Data is transmitted over encrypted HTTPS connections. Access to production systems is restricted. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.
We retain your account and inputs for as long as your account is active so you can return to your analysis. You may request deletion of your account and associated data at any time (see Contact). On deletion, we remove your account, profile, inputs, and stored reports, except where we must retain limited records to comply with legal or tax obligations.
Depending on where you live, you may have additional rights (e.g., access, portability, deletion) under laws such as the GDPR or CCPA. Contact us to exercise them.
RothGPT is intended for adults making retirement-planning decisions and is not directed to anyone under 18. We do not knowingly collect information from children.
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice in the app.
Questions or requests (including data access or deletion):
privacy@rothgpt.com