Privacy Policy

1. Data controller

The data controller is Let's Go FIRE, a French micro-entreprise registered under SIREN number 104241609, with registered office at 58 rue de Monceau, 75008 Paris (France).

Data protection contact: support@letsgofire.com. If a data protection officer is later appointed, contact details will be published in this policy.

2. Data collected

• Account and identity data: email, user ID, language, settings, subscription status.
• Voluntarily entered data: age, retirement horizon, wealth, income, expenses, portfolio, allocations, goals, residence or retirement country and simulation assumptions.
• Payment data: payment status, plan, transaction identifiers and necessary billing data. Full payment card numbers are processed by the payment provider and are not stored by Let's Go FIRE.
• Support data: support messages, refund requests, complaints and technical or commercial exchanges.
• Technical data: IP address, logs, device, browser, security events, errors, necessary cookies and preferences.

3. Purposes and legal bases

• Account creation and management: performance of contract.
• Simulations, cloud saving and premium features: performance of contract.
• Payment, billing, subscription management and fraud prevention: performance of contract, legal obligations and legitimate interest.
• Customer support and complaint handling: performance of contract and legitimate interest.
• Security, abuse prevention, technical diagnosis and service improvement: legitimate interest.
• Marketing emails, non-essential cookies and prospecting where required: consent or applicable legal basis depending on country.
• Accounting, tax, authority requests and legal duties: legal obligation.

4. Financial data and no sensitive banking credentials

Financial and wealth data entered into the service may be confidential and is processed with an appropriate level of protection. It is not used to provide regulated advice and is not sold to third parties.

Unless a future feature is explicitly presented and consented to, Let's Go FIRE does not request bank login credentials and does not collect full payment card numbers.

5. Recipients, processors and transfers

Data may be accessed, within their roles, by authorized publisher staff, hosting, database, authentication, payment, email, support, analytics, security, accounting, legal advisers and competent authorities where required by law.

Currently expected providers include Supabase for authentication and database, Creem for payment, and hosting and email providers to be completed according to your real setup.

Some providers may process data outside the European Union or European Economic Area. In that case, transfers are protected by an adequacy decision, European Commission Standard Contractual Clauses or other appropriate safeguards provided by applicable law.

6. Retention periods

• Account data: for the life of the account, then deleted or anonymized within a reasonable period after deletion request, unless legal retention applies.
• Simulation data: for the life of the account or until deletion by the user where available.
• Billing and accounting data: applicable legal period, generally up to ten years under French accounting and tax obligations.
• Technical and security logs: limited period proportionate to security, diagnosis and evidence purposes.
• Marketing data: until consent withdrawal or expiry of the applicable legal period.

7. User rights

Users in the European Union have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Under French law, they may also issue instructions about their data after death.

Users outside the European Union may exercise mandatory rights provided by applicable local law. Requests can be sent to support@letsgofire.com.

In France, users may lodge a complaint with the CNIL. In the European Union, users may contact the competent data protection authority in their country of residence.

8. Security and automated outputs

Let's Go FIRE implements reasonable technical and organizational measures to protect data: encrypted communications, access controls, environment separation, security logging and least privilege where applicable.

Simulations and scores generated by the service are indicative algorithmic outputs. They do not produce automatic legal effects for the user and do not constitute regulated automated decision-making with similarly significant effects.

Users should protect their credentials and report suspected unauthorized access to support@letsgofire.com.

9. Minors, cookies and changes

The service is intended for people aged at least 18. Minors must not create an account or subscribe to a paid offer.

Cookies and trackers are described in the Cookie Policy available at /legal/cookies.

This Policy may be updated to reflect legal, technical or functional changes. Important changes will be brought to users' attention by appropriate means where required by law.

10. Contact

For questions or rights requests: support@letsgofire.com.