Privacy Policy

Introduction

At Goalpost Finance, we take your privacy seriously. This policy explains what we collect, why, who processes it on our behalf, and how long we keep it. It covers both the public website and the secure client portal that coaching clients use. The portal holds detailed financial information, so sections 2 and 3 are the ones that matter most if you are a client. Bank connections are optional. You can work with us using manual entry and statement uploads without connecting a financial institution.

1. Information We Collect From Website Visitors

• Contact and booking forms: your name, email address, phone number, and anything you write in the message field.
• Guides, calculators and gated content: your email address when you request a downloadable resource or unlock a gated page.
• Calculator and Before You Borrow inputs: figures you type are processed in your browser to display a result. Before You Borrow does not transmit your dollar amounts or generated result when you request a conversation; it sends only your contact details, the general topic, and any note you write. Some standalone calculators may transmit a short result summary only when you explicitly request an emailed plan.
• Website analytics: pages visited, time on page, referring source, approximate location, and device or browser information, collected through Google Analytics and Google Ads tags.
• Prospect records: if you enquire, we keep your contact details, how you found us, the status of the conversation, and our own notes about it.

2. Information We Collect From Coaching Clients

Coaching clients receive access to a secure client portal. The portal holds substantially more sensitive information than the public website. We collect and store the following categories:

• Identity and contact: name, email address, phone number, city and state, best time to reach you.
• Household details: marital status, number of dependents and their ages, and housing status.
• Income: your monthly income, a partner's or spouse's income where you provide it, pay frequency, income type, and other income sources.
• Expenses: line-item amounts including rent or mortgage, car payment, utilities, insurance, phone, transportation, internet, groceries, dining out, childcare, subscriptions, and other categories you add.
• Budget figures: allocations across housing, transportation, food, personal and health, debt and savings, and entertainment, plus a checking account balance and the date you reported it.
• Debt details: each creditor's name, account type, starting and current balances, APR, promotional rates and expiry dates, minimum payments, and payoff priority.
• Transactions: where you choose to share them, individual transaction records including account name and type, date, merchant or description, amount, and the category assigned.
• Documents you upload: statements and other files you add to the portal, together with the file name, category, size and type.
• Coaching records: session dates, topics covered, action items and whether they are complete, goals you set and their target dates, and notes carried into the next session.
• Coaching working notes: Sam keeps private preparation notes on client and debt records to coach effectively. These are internal working notes and are not visible in your portal view.

Optional bank connections. If you choose to connect accounts, we use Plaid to receive information you authorize from your financial institution. This may include the institution and account names, account types and masked account numbers, current or available balances and credit limits when available, and transaction dates, amounts, descriptions, merchants, categories and pending or posted status. We also keep connection status, permission and update records to operate the connection.

We use this information to help you and your coach review spending, compare activity with your plan and discuss cash flow. Bank information can be delayed, incomplete or corrected later. We retain the received financial information in the portal as described below.

You sign in through Plaid or your institution during connection. Do not send bank passwords or verification codes to Goalpost Finance LLC. Goalpost does not receive your bank password through this connection; it receives a secure connection token and the authorized data. This feature does not authorize Goalpost to move money or pay bills. Connecting is optional, and manual entry and statement uploads remain available.

Optional debt details. If you separately choose to share debt information through Plaid, we may receive supported credit-card and loan balances, interest rates, minimum or scheduled payments, payment dates, statement or payoff balances, and overdue status. We explain this option in My Debts and ask you to authorize the additional access through Plaid or your financial institution. We use these details for your coaching and debt-plan review. Bank information stays separate from your saved plan until you or your coach reviews and applies selected changes. Availability and update timing depend on the lender; missing details may need manual entry. The household visibility, security, disconnection and deletion practices below apply to this information too.

3. Household and Partner Access

Where couples are coached together, more than one sign-in can be linked to the same client record. Anyone linked to that record can see the financial information within it. If you want to add or remove a linked person, or you want a linked person's access ended, contact Goalpost Finance LLC directly and we will action it. Please consider carefully before inviting someone to a record that contains your financial information.

Information from a connected account is visible to Sam and the people linked to your household portal record, even if only one person connected the bank. Connect only accounts you are authorized to share with that household. A bank password is not shared with other household members. Contact Goalpost Finance LLC if you need to change household access or discuss deletion of shared records.

4. How We Use Your Information

• Delivering coaching: building your plan, reviewing and categorizing spending, discussing cash flow and debt-payoff strategies, tracking progress, and preparing for sessions. Where you opt into bank connections, we use the received information for those same coaching purposes.
• Communication: responding to enquiries, confirming appointments, and support between sessions.
• Email: sending educational content and updates through Brevo. You can unsubscribe from any email.
• Scheduling: managing bookings through Calendly.
• Website improvement and advertising measurement: understanding which pages and sources bring people to us.
• Legal compliance: meeting applicable legal and regulatory obligations.

We do not use client financial details or calculator inputs to market third-party products. Website contact information may be used to respond to your request and, where you requested a resource or subscribed, to deliver Goalpost educational email that you can unsubscribe from.

5. Service Providers

We use the following providers to operate our services. Their privacy policies describe how they handle information for their services:

• Supabase: hosts the client portal database, authentication, and uploaded document storage. Supabase Privacy Policy
• Netlify: hosts the website and processes form submissions. Netlify Privacy Policy
• Brevo: email delivery and marketing. Brevo Privacy Policy
• Calendly: appointment scheduling. Calendly Privacy Policy
• Google: Google Workspace for business email, and Google Analytics and Google Ads for website measurement. Google Analytics Privacy
• Microsoft: Microsoft Advertising's Universal Event Tracking (UET) measures visits and actions on the public website to help evaluate advertising. Microsoft Privacy Statement
• Plaid: connects financial accounts when you choose to use the feature and provides the information you authorize. Plaid's own collection and use are described in its End User Privacy Policy. Goalpost's use of the information we receive is described in this policy.
• Stripe: processes coaching subscription payments. Stripe Privacy Policy

Google Analytics and advertising tags run on the public website. They are not used inside the client portal.

We may also provide the minimum information necessary to authorized legal or security advisers, incident responders or our cyber-insurance provider to address an incident or claim, or disclose information where required by law. We review the purpose and restrict access. This does not authorize selling client financial information or using it to market financial products.

6. Referral Sources

We record how a prospective client found us, which may include the name of a person or business who referred them. Goalpost Finance does not pay or receive referral fees, commissions, or kickbacks in either direction. We do not share your financial information with a referral source, and we do not confirm to them whether you became a client.

7. Cookies

Our website uses cookies to support analytics and advertising measurement. Most browsers let you control or block cookies through their settings, though some website features may not work properly without them.

8. Data Security

The client portal requires an individual account to sign in. Database access is governed by row-level security rules, so a signed-in account can only reach records it is authorised for. Uploaded documents are held in access-controlled storage. Data is encrypted in transit.

Security is a continuing process rather than a finished state. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password for your portal account and tell us immediately if you believe it has been compromised.

Two-step verification is required before connecting a bank and for access to the coach portal and households retaining connected-bank information. Clients using only manual records may choose to enable it. Verification codes or recovery materials should never be sent to Goalpost Finance LLC in ordinary email or chat.

9. Data Retention and Deletion

We keep financial information for your coaching relationship and use the following schedule after it ends:

• Financial documents you upload: permanently deleted from Goalpost systems within 30 days after coaching ends, consistent with our Terms. You may request earlier deletion.
• Other financial and coaching records, including imported bank history: sensitive financial information is deleted within 30 days after coaching ends. We keep only your name, contact details, service dates and selected general goal labels for 12 calendar months to support a possible return to coaching, then delete them unless coaching resumes. General goal labels exclude financial amounts, account and debt details, and sensitive financial notes. You may request earlier deletion of this limited profile.
• Connection credentials: removed when disconnection is confirmed, except restricted information needed to finish an unresolved removal request.
• Consent and deletion records: portal bank-consent records are deleted with the financial record. We retain restricted internal deletion markers and completion dates to prevent erased records from returning through a restored backup. Those markers contain no contact details, original goals, coaching notes or financial content. Separate billing records and records we are required by law to retain are handled for those purposes.

Disconnecting and deleting are different. Disconnecting requests an end to new bank updates but keeps information already imported into your portal. To request deletion of that history, other portal information or uploaded files, email sam@goalpostfinance.com. We verify the request and explain its scope, any justified retention and completion status. Where records are shared, we verify the request and consider each linked person’s rights before acting. We explain the scope of deletion and any necessary limits.

Recovery copies containing financial information are encrypted, restricted to recovery use and kept for no more than 30 days. Their expiry does not extend the 30-day deletion deadline after coaching ends: copies containing information due for deletion must be removed by that deadline. Before a recovery copy is returned to service, completed deletion requests are reapplied.

Plaid and your financial institution maintain their own systems and records. Disconnecting Goalpost does not delete your financial institution's records. You can manage Plaid connections and ask Plaid about its own data through Plaid Portal or its privacy channels. This does not replace a request to Goalpost to delete the copies we hold.

10. Your Privacy Rights

You have the right to:

• Access the personal information we hold about you, including everything in your portal record
• Request correction of inaccurate information
• Request deletion of your information, subject to any legal retention requirement
• Request a copy of your information in a portable form
• Opt out of marketing communications at any time
• Unsubscribe from our newsletter using the link in any email

To exercise any of these, email sam@goalpostfinance.com. Goalpost Finance LLC handles these requests directly.

11. Do Not Sell My Personal Information

Goalpost Finance does not sell, trade or rent your personal information. We do not disclose client financial details or calculator inputs to lenders, banks, insurers, credit repair firms or other product sellers for their marketing or sales. We share information for the service, authorization, legal and incident-response purposes described in this policy.

12. If Something Goes Wrong

If we become aware of a security incident affecting your personal information, we will notify affected people without undue delay and describe what happened, what information was involved, and what we are doing about it. To report a suspected security problem, email sam@goalpostfinance.com with "Security" in the subject line.

13. Children's Privacy

Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children. Where a client tells us the ages of dependents as part of household budgeting, that information relates to the client's own household finances and is not collected from the child. If we become aware that we have collected information directly from a child under 13, we will delete it.

Optional bank connections are offered only to clients aged 18 or older who are authorized to connect the accounts they select. This restriction does not change the availability of separate educational services.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last Updated" date. Where a change materially affects how we handle client financial information, we will tell active clients directly.