Privacy Policy

This RCIA Privacy Policy explains how Velomon, LLC ("Velomon," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information in connection with the RCIA Service, related websites, checkout pages, intake forms, communications, advisor review, and report delivery.

1. Scope

This Policy does not replace any separate privacy notice that applies to a regulated financial institution, investment adviser, insurance professional, tax professional, employer, or other third party.

When a separate notice applies to a particular relationship or category of information, that notice may control that relationship or information.

2. Information We Collect

We may collect the following categories of information:

• Identity and contact information. Name, email address, telephone number, mailing address, date of birth or age range, and account identifiers.
• Household and demographic information. Marital or partnership status, dependents, residency, employment, anticipated retirement dates, and other household details relevant to the assessment.
• Financial and planning information. Income, assets, liabilities, benefits, pensions, retirement accounts, Social Security estimates, insurance information, tax-related assumptions, spending needs, and other financial data you choose to provide.
• Case and report information. Intake responses, assumptions, notes, advisor or agent communications, requested revisions, case status, and generated reports.
• Transaction information. Purchase amount, transaction date, order identifier, refund status, and limited payment metadata. Full payment-card data is generally handled by the payment processor.
• Account, device, and usage information. Login events, authentication status, IP address, browser or device type, pages or features used, timestamps, security logs, and diagnostic data.
• Communications. Messages, support requests, feedback, consent records, and other communications with Velomon or an assigned advisor or agent.

Please do not submit Social Security numbers, full payment-card numbers, account passwords, private cryptographic keys, or other information that the intake does not request.

If such information is needed for a separate regulated service that falls outside the scope of the RCIA, follow the secure process specified for that service.

3. Sources of Information

We collect information directly from clients and purchasers, from assigned advisors or agents, from authorized household members, automatically through the platform, and from service providers that support payments, hosting, security, communications, analytics, and report delivery.

4. How We Use Information

We may use personal information to:

• create and administer accounts and RCIA cases;
• process purchases, refunds, and transaction records;
• collect and validate intake information;
• assign and support advisor or agent review;
• generate, revise, close, reopen, archive, and deliver reports;
• communicate about authentication, security, service status, support, and updates;
• protect clients, Velomon, and the platform from fraud, misuse, and unauthorized access;
• maintain audit logs, troubleshoot, test, analyze, and improve the Service;
• comply with law, legal process, professional obligations, and records-retention requirements; and
• send marketing communications when permitted, subject to your right to opt out.

5. How We Disclose Information

We may disclose personal information in the following circumstances:

• Assigned advisors and agents. To perform review, request clarification or revisions, communicate with the client, and receive the final report.
• Service providers. To vendors supporting payment processing, customer relationship management, hosting, cloud storage, authentication, security, communications, document generation, analytics, and technical support. Service providers may use information only for contracted services or as otherwise permitted by law.
• Professional and legal advisers. To attorneys, accountants, auditors, insurers, security professionals, and other advisers who assist Velomon and are subject to appropriate confidentiality obligations.
• Legal, safety, and compliance purposes. To comply with law, subpoena, court order, regulatory request, or legal process; to enforce agreements; or to protect rights, safety, property, and security.
• Business transactions. In connection with a merger, financing, reorganization, sale, transfer, bankruptcy, or similar transaction, subject to appropriate protections and applicable law.
• With consent or at your direction. When you authorize a disclosure, ask us to share a report, or direct us to interact with another professional.

Velomon does not sell personal information for money and does not use RCIA financial information for unrelated targeted advertising.

If Velomon changes these practices, this Policy and any legally required choice mechanism will be updated before the change applies.

6. Cookies, Analytics, and Similar Technologies

The website or platform may use cookies, local storage, pixels, logs, and similar technologies to support authentication, preferences, security, performance, and analytics.

Browser settings may allow you to block or delete cookies, but doing so may prevent certain features from working.

Where required, Velomon will request consent or provide additional choices.

7. Data Security

Velomon uses administrative, technical, and physical safeguards designed to protect personal information, taking into account the sensitivity of the information and the nature of the Service.

Safeguards may include access controls, multi-factor authentication, encryption in transit and at rest where appropriate, activity logging, vendor oversight, backups, staff training, and incident-response procedures.

No system is completely secure. You are responsible for protecting your credentials and devices, using available multi-factor authentication or passkeys, and notifying Velomon promptly if you suspect unauthorized access.

Do not send sensitive financial information through ordinary email unless Velomon specifically instructs you to do so.

8. Retention and Deletion

Velomon retains personal information for as long as reasonably necessary to provide and support the RCIA Service, maintain case and report history, comply with legal or professional obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security and audit records. Retention periods vary by information type and business need.

Closing or archiving a case does not automatically delete its information.

When information is no longer reasonably needed, Velomon will delete, de-identify, or securely dispose of it in accordance with applicable law and records-management practices. Backup copies may remain for a limited period and will be protected from ordinary use.

9. De-Identified and Aggregated Information

Velomon may create aggregated or de-identified information that cannot reasonably be linked to an identifiable person and use it for analytics, quality assurance, security, product improvement, benchmarking, and other lawful purposes.

Velomon will not attempt to re-identify de-identified information except to test whether de-identification measures are effective or as permitted or required by law.

10. Your Choices and Privacy Rights

You may update certain information through the platform or by contacting Velomon.

You may opt out of marketing emails using the unsubscribe link, but you may continue to receive transactional, security, case, or legal communications.

Depending on your state of residence and whether a privacy law applies to Velomon, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information; to opt out of certain sales, targeted advertising, or profiling; and to appeal a denied request.

Velomon does not discriminate against a person for exercising an applicable privacy right.

To submit a request, email [email protected] with the subject "Privacy Request" and describe the request.

Velomon may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, subject to verification.

If Velomon denies a request, you may appeal by replying with the subject "Privacy Appeal" and explaining the basis for the appeal. Velomon will respond within the period required by applicable law.

11. Financial Privacy and Regulatory Notices

Because the RCIA Service involves financial planning information, some information may be subject to federal or state financial privacy, data security, or professional rules depending on Velomon’s activities and the role of an assigned advisor or agent.

If the Gramm-Leach-Bliley Act, an investment-adviser privacy rule, an insurance privacy rule, or another sector-specific law applies, Velomon or the regulated professional may provide a separate privacy notice. That notice will control for the information and relationship it covers.

12. Children’s Privacy

The RCIA Service is not directed to children under 18, and Velomon does not knowingly permit minors to purchase the Service.

A parent, guardian, or authorized adult may provide limited information about dependents when relevant to a household assessment. If you believe a child provided information directly without appropriate authorization, contact Velomon.

13. Processing Location

Velomon and its service providers may process and store information in the United States and other locations where they operate.

When required by law, Velomon will use appropriate measures for cross-border transfers.

By using the Service, you understand that privacy protections may differ from those in your location.

14. Third-Party Websites and Services

The Service may link to or integrate with third-party websites and services.

This Policy does not govern the independent privacy practices of those third parties. Review their policies before providing information directly to them.

15. Changes to This Privacy Policy

Velomon may update this Policy to reflect changes in the Service, technology, law, or data practices.

The updated Policy will state a new effective date.

Velomon will provide additional notice of material changes when required by law or when reasonably appropriate for active users.

16. Contact Us

For privacy questions, requests, or complaints, contact: