Privacy Policy

Last updated: September 28, 2026

Introduction

invio is a personal finance automation platform operated by Citizen Group LLC, a Wyoming limited liability company ("we," "us," or "our"). This Privacy Policy describes how we collect, use, and protect your personal information when you use invio, including the website at goinvio.com and related services (the "Service").

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Password (stored in hashed, salted form—we never store your plain-text password)

Profile and Financial Information

To provide personalized planning tools, you may choose to provide:

  • Age and target retirement age
  • Risk tolerance and allocation preferences
  • Broker and account information
  • Investment accounts (types, balances, contributions, fund allocations)
  • Debts (amounts, interest rates, minimum payments)
  • Savings goals
  • Other assets (e.g., home value)
  • Pension and Social Security estimates

Strategy and Calculation Data

We store investment strategies, forecasts, FIRE and withdrawal calculations, and related projections that you generate using the Service.

Subscription Information

If you subscribe to a paid plan, we store your subscription tier, status, and Stripe customer/subscription identifiers. Payment processing is handled by Stripe; we do not store full credit card numbers.

Community Content

If you use the community features (questions, answers, ideas, bugs, comments, votes), we store that content and associate it with your account.

Technical and Usage Data

We use session cookies to keep you logged in. Our servers may automatically record information such as IP address, browser type, and usage patterns when you access the Service.

How We Use Information

We use your information to:

  • Provide, operate, and improve the Service
  • Process payments and manage subscriptions
  • Respond to support requests
  • Secure the Service and prevent abuse
  • Comply with legal obligations
  • Send service-related communications (e.g., password reset, account alerts)

We do not use your financial data for advertising or sell your personal information to third parties.

Information Sharing

We share data only with service providers necessary to operate invio:

  • Cloudflare — Hosting, database (D1), object storage (R2), and Workers. Cloudflare processes data to deliver the Service.
  • Stripe — Payment processing. Stripe collects and processes payment information; their privacy policy applies to that data. See stripe.com/privacy.
  • Cloudflare Email Workers — Sending transactional emails (e.g., password reset, email change verification).

We do not sell personal information. We do not share your personal information with third parties for their advertising or marketing purposes.

Cookies

We use essential cookies to maintain your session and keep you logged in. These cookies are necessary for the Service to function. We do not use cookies for advertising or tracking.

Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. You can delete your account at any time in Settings → Your Data. Your account closes right away, and we permanently delete your data 30 days later, unless you cancel the deletion before then. Our payment provider, Stripe, keeps invoices and payment records as required by tax and accounting law.

Data Security

We use industry-standard measures to protect your data: HTTPS encryption, secure password hashing (PBKDF2 with salt), and access controls. While we strive to protect your information, no method of transmission or storage is 100% secure.

Your Rights

Depending on where you live, you may have the right to:

  • Access and portability — Get a copy of the personal information we hold about you, in a machine-readable format
  • Correction — Request correction of inaccurate or incomplete information
  • Deletion — Request deletion of your personal information
  • Opt-out of sale — We do not sell personal information; no opt-out is needed
  • Non-discrimination — Exercise your rights without discrimination

You can exercise access, portability, and deletion yourself, anytime, in Settings → Your Data: download everything you entered and everything we calculated from it, as spreadsheets (CSV) and one machine-readable file (JSON), or delete your account.

California residents: Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), you have the right to know, correct, and delete your personal information. To exercise these rights, contact us at our Contact page or email support@goinvio.com.

Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your rights, contact us at our Contact page or support@goinvio.com.