Privacy Policy

The short version

The calculator runs in your browser. The numbers you type are not sent to our servers unless you choose to save a scenario, email yourself a results link, buy a report, upload an equity statement, ask the assistant, or add a holding to your portfolio.

We never ask for brokerage logins, account numbers, Social Security numbers, or other financial credentials, and we never sell your personal information.

Your saved scenarios and portfolio holdings are private to you. Our own staff, including administrators, cannot open them.

Anyone who has a share link can see the scenario it points to, so only share links with people you trust. Share links stop working after 30 days, and you can turn one off at any time.

Information we collect

Account information: your email address and name when you create an account or sign in with Google.

Content you save: scenarios (including every grant, planning-tool entry such as your last day at work or a tender offer price, and the dates you enter), purchased reports, and pre-IPO holdings you add to your portfolio (company, share count, cost basis, and notes).

Equity statements you upload: if you use "Import from your equity portal," the file you choose (for example a Carta, Shareworks, or E*TRADE export or screenshot) is stored in private storage that only our systems can open. We read the grant details from it (company name, grant types, share counts, strike prices, and vesting dates) and fill them into your calculator. The extracted numbers are not saved to your account unless you save the scenario. Please remove account numbers and other identifiers from the file before uploading.

Purchase records: the plan you bought, the amount, and the order and subscription IDs. Card and billing details are entered on our payment provider's checkout page and are never stored by us.

Messages and sign-ups: the email address, topic, and message you send through the contact form, and the email address you give when you join the newsletter.

Emailed results links: if you email yourself a link to your results, we store the calculator inputs behind that link for 90 days so it keeps working, then delete them. We don't keep your email address with them, only a one-way hash used to limit abuse. Anyone with the link can see those numbers.

Assistant questions: the questions you ask the assistant and, for Premium users, a summary of your current calculator results so the answer can use your numbers. We keep only a daily count of questions, not the questions themselves.

Usage data: pages viewed, features used, device and browser type, and approximate location derived from your IP address. We use this to understand which features help people and to fix problems.

How we use it

To run the service: sign you in, save and load your scenarios, deliver what you bought, and price holdings in your portfolio.

To communicate with you: reply to messages, send receipts and account notices, send quarterly tax deadline reminders (on by default with a paid plan, and you can turn them off in your account), and send the newsletter if you signed up. Every newsletter includes an unsubscribe link.

To keep the service secure and improve it: prevent abuse, debug errors, and measure which pages and tools are useful.

Service providers we share data with

Base44 hosts the site, stores account data and saved content, handles sign-in, and sends email on our behalf.

Base44 Payments (powered by Wix) processes payments and subscriptions. Its privacy policy governs the card and billing details you enter at checkout.

Google (sign-in with Google) receives the data needed to authenticate you if you choose that option.

Google AdSense may show ads on educational pages. When ads are enabled, Google and its partners may use cookies to serve ads based on your visits to this and other sites. You can opt out of personalized advertising at adssettings.google.com.

AI and search services are used to look up recent secondary-market prices for companies in your portfolio. Only the company name and website are sent; your share counts and cost basis are not.

AI document-processing services read equity statements you choose to upload, only to extract your grant details. The file is shared with them through a short-lived private link that expires within minutes.

AI language-model services receive the questions you ask the assistant (and, for Premium users, the results summary described above) to write an answer.

We may also disclose information when the law requires it, to protect our rights or users' safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

Cookies and local storage

We use cookies and your browser's storage to keep you signed in, remember preferences such as dark mode and reduced motion, and keep your calculator inputs while you move around the site. Unsaved inputs are cleared when you close the browser tab.

Advertising partners may set their own cookies on pages that show ads. You can block or delete cookies in your browser settings, though some features may stop working.

How long we keep data

We keep account data and saved content for as long as your account is open. Purchase records are kept as long as tax and accounting law requires. Contact messages are kept for up to two years. Uploaded equity statements stay in private storage until you ask us to delete them through the contact page. Emailed results links are deleted after 90 days. You can delete saved scenarios and holdings yourself at any time, or delete your whole account from your account page.

Your rights and choices

You can export your saved data or delete your account and everything you've saved yourself, from your account page. Purchase records are kept as long as tax law requires but are no longer linked to your account.

You can also ask us to access, correct, export, or delete your personal information by writing to us through the contact page. We'll respond within 30 days.

If you live in California, Colorado, Connecticut, Virginia, or another state with a consumer privacy law, you have these rights under that law, and we will not discriminate against you for using them. We do not sell personal information or share it for cross-context behavioral advertising, except as described for Google AdSense above, which you can opt out of.

Security

Data is sent over encrypted connections and stored with access controls, so each user can only see their own saved content, and our administrators cannot open users' scenarios, holdings or emailed results. No system is perfectly secure, so please don't put sensitive identifiers in notes or scenario names.

Children

VestMath is not directed to children under 16, and we do not knowingly collect their information.

Changes and contact

If we change this policy in a material way, we'll update the date at the top and, for significant changes, notify signed-in users by email.

Questions? Reach us through the contact page.