Privacy Policy

1. Who we are

Take Root Abroad is operated by Ten Eleven Twelve LLC. This policy explains what we collect, why, how we protect it, and your rights. By using the Service you also agree to our Terms of Service.

2. Information we collect

We collect only what the Service needs to work:

• Account: your name, email, and password (stored only as a secure hash).
• Planning inputs: your quiz answers and segment, chosen corridor and city, household roster (adults, children, pets), and the financial figures you enter for the GO/HOLD (income, budget, cash). These are the values you type in; we do not pull your bank or brokerage accounts.
• Documents: files you choose to upload to your document vault.
• Usage: basic technical and usage data (for example, log and device information) to run and secure the Service.

3. How we use it

To provide the Service (build your plan, compute your costs and taxes, keep corridor facts current), to operate billing, to secure and support your account, to improve the product, and to comply with law. We do not sell your personal information.

4. The document vault

Documents you upload are encrypted. Each workspace has its own encryption key, and that key is itself wrapped by a PIN that only you set and hold, using a key-management service and a server-side secret. In practical terms, your documents are encrypted at rest and unreadable without your PIN. We cannot recover your PIN for you; if you lose it, the vault cannot be unlocked. When you delete your account or a document, the underlying encrypted data is deleted.

5. Who we share it with (processors)

We share data only with the service providers we need to run the Service, under their terms, and only as necessary:

• Stripe - payment processing (handles your card; we do not store full card numbers).
• Numbeo - cost-of-living data (we send a city name to retrieve prices; we do not send your personal data).
• Resend - transactional email (account verification, alerts).
• Google Cloud - hosting, database, encrypted file storage, and key management.

We may also disclose data if required by law. We do not sell your data or share it for third-party advertising.

6. Retention

We keep your data while your account is active and as needed to provide the Service and meet legal, tax, and accounting obligations. When you delete your account, we delete or de-identify your personal data, except where we must retain limited records by law.

7. Your rights

Depending on where you live (including under the GDPR and California's CCPA/CPRA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can delete your account and its data from your settings, or contact us to exercise any right. We will not discriminate against you for exercising these rights.

8. Cookies and sessions

We use strictly necessary cookies to keep you logged in and to secure the Service. We do not use third-party advertising or cross-site tracking cookies.

9. International transfers

We operate in the United States, and our providers may process data in the US and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

10. Children

The Service is for adults and is not directed to children under 16. We do not knowingly collect personal data from children. A household roster may include a child's name for planning; that is entered by the adult account holder and is treated as that adult's planning data.

11. Changes

We may update this policy. If we make a material change, we will update the date above and, where appropriate, notify you.

12. Contact

Privacy questions or requests: hello@takerootabroad.com.