Privacy Policy

Introduction

401kPro Inc., doing business as PlanSync AI (“PlanSync AI,” “we,” “us,” and “our”), together with its subsidiaries, divisions, and affiliates, recognizes the importance of protecting the privacy of the personal information you provide to us. Accordingly, we have developed this Privacy Policy (the, or this, “Policy”) so that you can make educated and informed decisions about the personal information that you entrust to us by engaging our services on the websites, social media, email exchanges, applications, integrations, mobile apps, and other online services on which this Policy is posted or linked (the, or our, “Service” or “Services”), and understand how we collect, use, disclose, and otherwise manage this information. Your use of the Service is conditioned upon your agreement to this Policy and our Terms of Service. If there are any terms in this Policy or in our Terms of Service to which you do not agree, you must discontinue your use of the Service. Before using our Service, please read this Policy carefully as it contains important information on who we are and how and why we collect, store, use, and share your personal information. This Policy also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint. PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTAND, AND AGREE TO THE TERMS OF THIS PRIVACY POLICY. This Policy is written in the English language. We do not guarantee the accuracy of any translated versions of this Policy. To the extent that any translated versions of this Policy conflict with the English language version, the English language version of this Policy shall control.

Children and Individuals Under the Age of Eighteen

Our Services are not intended for or directed to persons under eighteen years of age. IF YOU ARE UNDER THE AGE OF EIGHTEEN YOU ARE NOT AUTHORIZED TO USE THE SERVICES, EVEN IF YOU HAVE OBTAINED PARENTAL CONSENT TO DO SO. We do not knowingly collect, request, process, or disclose data of children on our Services. We do not intend to collect children’s personal information as defined by the U.S. Children’s Privacy Protection Act (“COPPA”) (“Children’s Personal Information”). Upon notice that a child has provided us with personal information, or that another party has otherwise provided us with a child’s personally identifiable information, we will delete the child’s personally identifiable information from our records. If you are a parent or guardian and believe we have collected personal information on a child, please contact us at privacy@plansync.ai and we will remove such data. Additionally, while aspects of the Service permit you to submit or connect information about others, including plan and participant data, you are strictly prohibited from providing any information about anyone under the age of 18. You are responsible for ensuring that information you provide or connect does not include data about individuals under 18, and if we become aware that we have received information about an individual under 18, we will delete it. Your provision of plan, participant, and related sensitive information is otherwise governed by the section titled “Restrictions on Providing Personal Information of Others” below.

Collection of Personal Information

Information you provide to us

401kPro will collect personal information from you directly when you interact with our Service, contact us, use our services, create an account, subscribe, share reviews, sign up to receive offers or emails from us, complete surveys, or order or purchase our products and services. By providing us such information, you represent and warrant that it is true, accurate, and current, and that you will notify us if such information becomes out of date.

Information provided or connected by our customers

Much of the information processed through the Service is provided at the direction of our customers, who are financial advisors, plan sponsors, and similar professional users. Customers affirmatively choose what information to provide, whether by uploading it directly or by connecting an authorized third-party integration such as a payroll system. This information may include investment and fund data, plan design data, plan and participant census data, and related retirement plan information. PlanSync AI does not independently solicit or collect this information; it is supplied or connected by the customer to enable the Service. By providing or connecting this information, the customer represents and warrants that it has the authority and any necessary consents to do so, and is responsible for the accuracy and lawful basis of the data it provides, including obtaining any consents required from plan participants or other individuals whose information it provides.

Information we obtain indirectly

We may receive business contact information about advisors, plan sponsors, and similar professional prospects from third-party data providers and partners for the purpose of marketing our Service. We may combine this with information we already maintain. Such data is limited to professional contact details and business interests and does not include plan participant information. We may also receive personal information about you from users of our Service to the extent that you have consented to our receipt of such information from such users. If you believe that a user has provided your personal information to us without your consent, please contact us at help@plansync.ai.

Information collected automatically

When you use our Service, we collect certain information about you, including usage data, device data, and technical data about your equipment, automatically through our use of cookies, server logs, and other similar technologies. For additional information, please see our the “Cookies and Other Technologies” section below.

Information from email and calendar integrations

If you choose to connect an email or calendar account to the Service (for example, Gmail or Google Workspace, or Microsoft Outlook or Microsoft 365), we may access and collect information from those accounts to provide the features you enable. This may include your contacts, calendar entries and meeting details, and metadata from messages you send or receive. We access this information only as needed to provide those features, and our use of it is further governed by the section titled “Email and Calendar Integrations; Google and Microsoft API Limited Use” below.

Categories of Personal Information Collected and Purpose for Collection

Categories of Personal Information Collected

PlanSync AI collects, and within the last twelve months has collected, the following categories of personal information: (1) identifiers and contact information including your name, email address, street address, city, state, country of residence, and zip code; (2) authentication information, including the user name and password that you use to register an account on the Service; (3) demographic information, including age and gender; (4) comments, reviews, suggestions; (5) personal preferences including product preferences, online preferences, and interests; (6) online behavior information including online activity, preferences, and time spent viewing features; and (7) device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, general geolocation, information about how and when you use our Service and other technical information; and (8) plan, payroll, and participant data provided or connected by our customers, which may include name, contact information, date of birth, employment status, hire date, compensation, and plan eligibility attributes. (9) email and calendar integration data, where you connect an email or calendar account, which may include your contacts, calendar entries, meeting details, and metadata from messages you send or receive.

Certain features of the Service allow you to upload documents (such as emails, PDFs, Microsoft Word documents, text messages, or other types of documents). If you provide these documents to the Service, PlanSync may extract, collect, process, and store any personal data contained in these documents. Certain features of the Service may permit you to submit free-form text feedback or responses. If you provide personal information of any type or nature in such responses, PlanSync may extract, collect, process, and store such personal data. You agree that you have full control over the personal information provided to PlanSync via these means, and by providing such information you consent to PlanSync’s collection, processing, storage, and use of such personal information in accordance with this Privacy Policy. If you do not want or agree to PlanSync’s collection, processing, storage, or use of personal data submitted via these means, do not submit it to the Service. We use third party processors to collect payment information, such as a valid credit card number, type, expiration date or other financial information, to process payments for customer transactions. This information is required to be submitted as part of our checkout process. We do not have access to any of this financial information; it is submitted directly to our third-party payment processing company, which uses the information to process your payment. The use and storage of that information is governed by Stripe Services Agreement and Stripe Privacy Statement. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, and except as otherwise stated in a separate agreement, PlanSync AI does not seek to collect sensitive personal information such as your Social Security, driver’s license, state identification card, or passport number; your account login, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; your racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of your mail, email, and text messages, unless we are the intended recipient of the communication; your genetic data; your biometric information for the purpose of uniquely identifying you; and personal information collected and analyzed concerning your sex life or sexual orientation. Plan, payroll, and participant data provided or connected by customers may include sensitive elements such as date of birth and compensation, and we process that data to provide the Service as described in this Policy. We ask that you not send nor disclose this sensitive personal information to us. However, if you voluntarily upload documents containing sensitive personal data, or otherwise submit this data to our Service, we may process this data solely for the purpose of extracting relevant information to maintain your records within the Service or provide the Service to you. We do not sell or share sensitive personal data. PlanSync AI does not use sensitive personal information for advertising and does not sell it. We may analyze and classify participant data to provide the Service and to surface insights and segments to advisors, who decide what actions to take, and we do not use it to make automated decisions that produce legal or similarly significant effects on individuals. We do not use participant data to train or fine-tune artificial intelligence models without consent, and any such use would be limited to de-identified data. If you have provided sensitive personal data and wish to have it deleted or removed, please contact us at help@plansync.ai.

Purpose for Collection

PlanSync AI only collects and processes the minimum amount of personal information from you that is necessary to the purposes of our information processing activities and retains such information only if, and to the extent, required to fulfill such purposes. Our information processing activities include conducting our business and providing the Service, the fulfillment of our contracts or agreements with you, processing orders, personalizing your experience on our website, marketing, customer communications and support, user verification, payment processing, quality management services, Service maintenance and improvements, and complying with legal requirements. If you are an employee, we may also collect and process personal information, including the categories of sensitive personal information described above. Where applicable, if PlanSync AI intends to further process your personal information for a purpose other than that for which the personal information was initially collected, PlanSync AI shall, prior to such processing, provide you with any relevant information on such additional purpose, and, to the extent required by applicable law, obtain your consent for this. The personal information that we collect may be required for us to provide the Service. If you decline to provide us with requested personal information, we may be unable to provide some or all of the Service to you.

Disclosure of Personal Information

PlanSync AI does not trade, rent, or sell your personal information to third parties, share your personal information with third parties for cross-context behavioral advertising, or process it for targeted advertising or consumer profiling. and in the preceding twelve months we have not sold or shared any personal information. We may share or disclose, and have within the preceding twelve months shared or disclosed, your personal information for the following purposes:

• Third Parties Providing Services on Our Behalf. We may share information with vendors, suppliers, and similar third parties (collectively, “Service Providers”) who perform services and functions on our behalf to support our interactions with you. For example, we use Stripe to process payments on our behalf, Dealfront (also known as Leadfeeder) to identify the organizations that visit our website, and Formspree to process contact and early-access form submissions. These Service Providers include cloud hosting and database infrastructure providers, payment processing providers, payroll and HR data integration providers, email delivery and communication providers, product analytics and website performance providers, and our professional advisors such as legal, accounting, and compliance professionals. We maintain a current list of our Service Providers and will provide it to customers upon request. Our Service Providers may also help us facilitate or improve the Service, provide customer support and communicate with you, perform website-related services (e.g., without limitation, maintenance services, database management, web analytics, and improvement of the Service’s features), or assist PlanSync AI in analyzing how the Service is used. These Service Providers have access to your personal information only to perform these tasks on PlanSync AI’s behalf and do not have the right to use personal information we share with them beyond what is necessary to assist us. Additionally, these Service Providers must adhere to confidentiality, security, and legal obligations in a way that is consistent with this Policy and any applicable law.

While we have not shared or disclosed your personal information for the reasons listed below within the last twelve months, we may also share or disclose your personal information for the following purposes:

• Aggregate Information. We may also share non-identifying information, such as aggregate statistics or usage information, with third parties in order to demonstrate how 401kPro is used, spot industry trends, or provide marketing materials for 401kPro. Any aggregated information shared in this way will not contain any personally identifiable information, and 401kPro is not limited in its use of aggregate information that does not permit direct association with any specific individual, such as the number of users of our services and the geographic distribution of our users.
• Your Consent to Have Your Personal Information Shared. 401kPro may share personal information with third parties when we have your consent to do so. If you agree to have your personal information shared with a third party, your personal information will be disclosed to the third party and will be subject to the privacy policy and business practices of that third party. To the extent that we obtain your consent to process your personal information, you may withdraw this consent at any time by emailing us at: help@plansync.ai.
• Legal Disclosure. 401kPro cooperates with government and law enforcement officials and private parties to enforce and comply with the law. Accordingly, we may disclose any information about you to government or law enforcement officials or private parties as 401kPro, in its sole discretion, believes necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of 401kPro, a user of the Service, or a third party, to protect the safety of the public or any person, to take emergency action, or to prevent or stop activity 401kPro considers to be or to have the potential to be, illegal, unethical, or legally actionable. In addition, 401kPro may disclose information about you to counter or prevent any malicious access or use of the Service or to prevent harm or loss to any user of the Service.
• Transfer in the Event of Sale or Change of Control. 401kPro may provide your personal information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of 401kPro’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information maintained by the Service is among the assets transferred. In such a case, unless prohibited by applicable law, your information would remain subject to the privacy policy applicable at the time of such transfer, unless you discontinue use of our Service.

Retention of Personal Information

We retain personal information for as long as necessary to provide the Services, maintain our relationship with the customer (such as the advisor or plan sponsor), and fulfill the purposes described in this Policy. Where personal information relates to retirement plan administration, recordkeeping, benchmarking, or compliance, we retain it for the period reasonably required for our customers to meet their legal and regulatory recordkeeping obligations, including obligations under the Employee Retirement Income Security Act of 1974 (ERISA), which can require retention of plan-related records for at least six years and, for records used to determine participant benefits, for longer periods. Prospect and marketing contact data is retained on a shorter cycle. We delete or de-identify personal information once these purposes are satisfied and applicable retention periods have lapsed, subject to the exceptions described elsewhere in this Policy.

Restrictions on Providing Personal Information of Others

Certain features of the Service may enable you to provide the personal information of third-party individuals, including the names and email addresses of company benefit plan administrators, advisors, and managers. By providing the personal information of third-party individuals, you represent and warrant that you have obtained their explicit consent to do so. You are not permitted to provide such information about third-party individuals without their consent. If you believe that a user of our Service has provided your personal information without your consent, please contact us at help@plansync.ai. In no event are you permitted to provide us with the personal information of any individual under eighteen years of age, even if you have that individual’s consent, or the consent of their parent or legal guardian. Except for plan, payroll, and participant data that customers provide or connect to enable the Service, you are not permitted to provide sensitive personal information or other personal financial information about any individual, including any benefit plan participant or enrollee, without the authority and any consents required under applicable law. For plan, payroll, and participant data, the customer is responsible for ensuring it has the authority and any necessary consents to provide or connect that data, as described above. Users of PlanSync are responsible for ensuring that any personal information, including sensitive personal or financial information of any individual (such as benefit plan participants or enrollees), is shared with the appropriate consent and in compliance with applicable privacy laws. PlanSync AI collects participant data that customers provide or connect, including through authorized payroll integrations, which may include name, contact information, date of birth, employment and compensation data, account balances, and plan eligibility attributes. PlanSync AI does not collect Social Security numbers through these integrations. If users choose to upload or connect participant information, including survey responses, they must ensure they have the necessary legal authority to do so. Users remain responsible for obtaining any required consent from individuals before submitting or connecting their information to PlanSync AI. Under no circumstances should users upload or share the following types of sensitive personal information unless explicitly required for their use of the platform and in compliance with applicable laws:

• Social Security numbers, driver’s license numbers, or other government-issued identification numbers.
• Financial account information, including bank account numbers or payment credentials.
• Protected health information (PHI) as defined by HIPAA.
• Information related to racial or ethnic origin, religious beliefs, or sexual orientation unless voluntarily disclosed by a participant in a census or survey response.

PlanSync AI processes participant data to provide the Service, including to help advisors manage plan-related data and to surface insights and segments that advisors use to decide what actions to take. PlanSync AI does not use participant information for advertising and does not sell it, and it does not make automated decisions that produce legal or similarly significant effects on participants. PlanSync AI does not use participant data to train or fine-tune artificial intelligence models without consent, and any such use would be limited to de-identified data.

Cookies and Other Technologies

We may use “cookies” to operate and customize the Service and the information we present to you. We may also use web beacons, pixel tags, analytics software, log files, or other similar technologies to collect certain information about your activity and interactions with our communications and the Service, and to keep track of analytics and statistical information that enables PlanSync AI to maintain and improve the Service. We do not use these technologies for cross-context behavioral advertising. You may, however, disallow receiving cookies at any time through your web browser. Similarly, you may set your mobile device to refuse to provide certain information, but certain features of the Service may not work without such information. It is not our intention to use cookies to retrieve information that is unrelated to our Service or your interaction with our Service. While we do not currently sell or share personal information, we do recognize do-not-track and opt-out preference signals, such as the Global Privacy Control, on browsers, browser extensions, or devices that support such a signal. Such signals will be automatically linked to your browser or device identifier, and we will process them as a valid, automatic request to opt-out of the sale and sharing of your personal information in the event personal information is ever shared or sold. We also use a website visitor identification service, Dealfront (also known as Leadfeeder), which uses cookies and IP address information to identify the business or organization associated with a visit to our website. We use this service for business-to-business marketing and sales outreach to organizations, not to build advertising profiles about you as an individual, and we do not use it for cross-context behavioral advertising. Where your browser or device sends an opt-out preference signal such as the Global Privacy Control, this service is not loaded. If you would like more information about who we share our data with and why, please contact us at help@plansync.ai.

Email and Calendar Integrations; Google and Microsoft API Limited Use

When you connect a Google account (Gmail or Google Workspace) to the Service, our access to and use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you enable. We do not transfer or sell this data except as necessary to provide those features, to comply with applicable law, or in connection with a merger or acquisition with appropriate notice. We do not use this data for advertising. We do not allow humans to read this data unless we have your affirmative consent for specific messages, it is necessary for security or to comply with applicable law, or the data has been aggregated and de-identified. We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. When you connect a Microsoft account (Outlook or Microsoft 365) to the Service, our access to and use of information received through Microsoft APIs is limited to providing and improving the features you enable, is subject to applicable Microsoft terms, and follows the same limitations described above. We do not use Microsoft user data for advertising or to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models, and we do not transfer or sell it except as necessary to provide the features, to comply with applicable law, or in connection with a merger or acquisition with appropriate notice. You can revoke our access to your email or calendar accounts at any time through your Google or Microsoft account settings or by disconnecting the integration within the Service. Revoking access stops further collection but does not affect information already processed in accordance with this Policy.

Linked Sites

Our Service may contain links to other websites owned and operated by third parties, including without limitation websites belonging to software providers referenced on the service (each a “Linked Site”). When you click on a link to a Linked Site, you will leave our Service and go to that Linked Site, and another entity may collect personal information or anonymous data from you. We have no control over, do not review, and cannot be responsible for, these Linked Sites or their content. Please be aware that the terms of this Policy do not apply to these Linked Sites or their content, or to any collection of your personal information by third parties through the Linked Sites. PlanSync AI is not responsible for the privacy practices or the content of such Linked Sites. Please be aware of where you are at all times. PlanSync AI expressly disclaims any liability that may arise from your use or provision of any of your information whatsoever to Linked Sites. You understand and agree that by clicking on a link to a Linked Site that you have left our Service.

User Contributions

Some features of the Service may now or in the future allow you to provide content, such as written comments or reviews, product images, or interactive responses to content such as quizzes or surveys, to be published or displayed on public areas of the Service (“User Contributions”). Be careful about giving out information in public areas of the Service. The information you share in public areas may be viewed by any user of the Service. We cannot control the actions of other users of the Service with whom you may choose to share your User Contributions.

Removing Your Information and Opting Out of Certain Emails

If you give PlanSync AI your contact information, and you wish to have your name and contact information removed from PlanSync AI’s database, please send us an email to help@plansync.ai, and we will remove your name and contact information from where possible. We may need to retain this information to some extent in connection with past orders or other transactions with the Service. Additionally, when you register, subscribe, create an account, sign up to receive offers or emails from us, or otherwise communicate with us through our Service, you may “opt out” of receiving future communications from us for direct marketing purposes by indicating that you decline such communications. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or contacting us at help@plansync.ai.

Changes To Our Privacy Policy

We reserve the right to change or modify this Policy or our Service at any time, and any changes are effective upon being posted unless we advise otherwise. If we make any material changes to this Policy, we may notify you by email or post notice on the Services before the change becomes effective. We encourage you to frequently review the Services for the latest information on our privacy practices. Use of information we collect now is subject to the version of the Policy in effect at the time such information is used. You are bound by any changes to this Policy when you use the Service after such changes have been first posted. If you do not accept the terms of this Policy, we ask that you do not register with us and that you do not use our Service. Please exit the Service immediately if you do not agree to the terms of this Policy.

Security

If you choose to provide us with your personal information, you understand that we are transferring it to 401kPro’s locations and systems in the United States or to the locations and systems of 401kPro’s service providers around the world. 401kPro uses reasonable security measures to protect the loss, misuse, and alteration of the information under its control. For example, we use technical and organizational safeguards, such as encryption protocols for sensitive information, such as credit card or other payment information. Such measures may change from time to time, depending on industry standards and perceived security risks. However, despite such security measures, 401kPro cannot guarantee the security of your information and disclaims liability for loss, misuse, and alteration of your information under its control to the maximum extent permitted under applicable law. By using the Service, you agree to assume any security risk related to personal information. You should report any security violations to us by sending an email to help@plansync.ai. The security of your 401kPro account relies on your protection of your user profile information. You are responsible for maintaining the security of your user profile information, including your password and for all activities that occur under your account. You may not share your password with anyone. We will never ask you to send your password or other sensitive information to us in an email. Any email or other communication purporting to be from one of our websites requesting your password, or otherwise asking you to provide sensitive account information via email, should be treated as unauthorized and suspicious and should be reported to us immediately by contacting us. If you believe someone else has obtained access to your password, please change it immediately by logging in to your account and report it immediately by contacting us at help@plansync.ai. Data Breach Notification. In the event of a data breach affecting your personal information, we will notify affected individuals without unreasonable delay and within the timeframes required by applicable law, including, where applicable, the timeframe required under Florida’s Information Protection Act. Where required, we will also notify the relevant state authorities. Our notice will describe the incident and the steps you can take to protect yourself. Vulnerability Reporting. If you believe you have identified a security vulnerability in the Service, please report it to us at help@plansync.ai. We appreciate responsible disclosure and will review reports promptly. Please do not access, modify, or delete data belonging to others or disrupt the Service when investigating or reporting a potential vulnerability.

Consent to Processing and International Transfers

PlanSync AI is a U.S.-based business. We primarily process and store information about users of the Service on servers located in the United States. As a result, your personal information may be subject to data protection and other laws that may differ from your country of residence. Your personal information may be disclosed in response to inquiries or requests from government authorities or to respond to judicial process in the countries in which we operate. By using the Service, or by providing us with any information, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as, or equivalent to, those in the country where you reside or are a citizen.

Special Notice for California Residents

If you would like to submit a Consumer Request, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a Consumer Request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information if we cannot verify that the person making the Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. “Personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include publicly available information.

• Request to Correct. You may correct or update your personal information at any time by logging into your account or by contacting us.
• Request to Access. You may submit a Consumer Request to obtain a copy of or access to the personal information that we have collected on you.
• Request to Know. You may submit a Consumer Request to receive information about our data collection practices.
• Right to Know what Personal Information is being Collected. You may request information on the categories of personal information we have collected about you; the categories of sources from which the personal information is collected; our business or commercial purpose for collecting, selling, or sharing personal information; the categories of third parties to whom we have disclosed personal information, if any; and the specific pieces of personal information it has collected about you.
• Right to Know what Personal Information is Sold or Shared and to Whom. You may also request the categories of personal information that we have collected about you; the categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared, and the categories of personal information that we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

Please note that the categories of personal information, sources, and disclosure will not exceed what is contained in this Policy. Additionally, we are not required to retain any information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. We are also not required to reidentify personal information if it is not stored in that manner already, nor is it required to provide the personal information to you more than twice in a twelve-month period.

• Request to Limit the Use of Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may request that we limit the use or disclosure of your sensitive personal information.
• Request to Delete. You may request that we delete personal information we have collected from you. Subject to certain exceptions set out below we will, on receipt of a verifiable Consumer Request, delete your personal information from our records, direct any service providers to do the same, and notify all third parties to whom we have shared your personal information to delete it unless this proves impossible or involves disproportionate effort. Please note that we may not delete your personal information if it is necessary to:
• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated by the consumer within the context of a business’

ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.

• Help to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for those purposes.
• Debug to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
• Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the ability to complete such research, if the consumer has provided informed consent.
• To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business and compatible with the context in which the consumer provided the information.
• Comply with a legal obligation.
• Right to Access Information About Automatic Decision-Making. We do not currently engage in automated individual decision-making. However, in the event we ever do so, we will inform you of such change and you may request information about and opt out of such automated decision-making.
• Right to Data Portability. You may also request that we transfer your personal information to another entity, to the extent such transfer is technically feasible.

We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your personal information.

Special Notice for Colorado Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal. If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Colorado Attorney General.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Connecticut Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be

available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.

• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal. If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Connecticut Attorney General or submit a complaint online at https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Delaware Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising, consumer profiling, or automated decisionmaking.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Delaware Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Florida Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual” and includes pseudonymous data when such data is used with additional information. “Personal data” does not include deidentified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Requests to Opt-Out. You may submit a request to opt out of the sale of your personal data; however, we do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling. We also do not collect, use, or disclose sensitive personal information (also referred to herein as “sensitive data”), but if you believe that we may have collected any other sensitive data about you, such as precise geolocation, you may withdraw your consent to any use or disclosure of your sensitive data and opt-out of the collection and processing of such sensitive data. We further do not collect personal data through the operation of a voice recognition or facial recognition feature; however, you may also opt out of such collection in the event we do use such features.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Florida Attorney General.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a consumer request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Indiana Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy or representative summary of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Indiana Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Iowa Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising.
• Appeal. If we notify you that no action is to be taken in response to your request to access, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Iowa Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Kentucky Residents

Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable natural person.” “Personal data” does not include de-identified data or publicly available information.

• **
• Request to Access.** You may submit a request to confirm whether we are processing your personal data or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• **
• Request to Correct.** You may correct or update your personal data at any time by logging into your account or by contacting us.
• **
• Request to Delete.** You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• **
• Request to Opt-Out.** You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• **
• Appeal.** If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Kentucky Attorney General or submit a complaint online at https://www.ag.ky.gov/about/Office-Divisions/OCP/Pages/default.aspx.
• **
• Withdraw Consent for Your Sensitive Personal Information.** Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have

collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information. If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Maryland Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within
• 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Maryland Attorney General. **
• Withdraw Consent for Your Sensitive Personal Information.** Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Minnesota Residents

Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable natural person.” “Personal data” does not include de-identified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal. If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Minnesota Attorney General or submit a complaint online at https://www.ag.state.mn.us/Office/Complaint.asp.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Montana Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Montana Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Nebraska Residents

Personal information or “personal data” means “any information, including sensitive data, that is linked or reasonably linkable to an identified or identifiable individual, and includes pseudonymous data when the data is used by a controller or processor in conjunction with additional information that reasonably links the data to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal. If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Nebraska Attorney General.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Nevada Residents

We do not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us at consumerrequest@plansync.ai or use this form. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.

Special Notice for New Hampshire Residents

Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified or publicly available information.

• **
• Request to Access.** You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• **
• Request to Correct.** You may correct or update your personal data at any time by logging into your account or by contacting us.
• **
• Request to Delete.** You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• **
• Request to Opt-Out.** You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• **
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal.** If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the New Hampshire Attorney General or submit a complaint online at https://www.doj.nh.gov/consumer/complaints/.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for New Jersey Residents

Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable person.” “Personal data” does not include de-identified or publicly available information.

• **
• Request to Access.** You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• **
• Request to Correct.** You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• **
• Request to Opt-Out.** You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• **
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal.** If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the New Jersey Attorney General or submit a complaint online at: https://www.njconsumeraffairs.gov/Pages/Consumer-Complaints.aspx

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Oregon Residents

Personal information or “personal data” means “data, derived data or a unique identifier that is linked to or is reasonably linkable to a consumer or to a device that identifies, is linked to or is reasonably linkable to one or more consumers.” “Personal data” does not include deidentified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Oregon Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Rhode Island Residents

Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de-identified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Appeal. If we notify you that no action is to be taken in response to your request to

access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Rhode Island Attorney General or submit a complaint online at https://riag.ri.gov/forms/consumer-complaint.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur.

Special Notice for Tennessee Residents

“Personal information” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” Personal information does not include deidentified data, aggregated data, or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal information that we have collected on you including what the information is, how it’s been used, whether it’s been sold, and who it’s been disclosed to. Your personal information may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal information at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal information that you have provided to us. We will delete your personal information from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal information. We do not sell, rent, or lease your personal data to third parties and do not process your personal information for targeted advertising or consumer profiling.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Tennessee Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Texas Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual” and includes pseudonymous data when such data is used with additional information. “Personal data” does not include deidentified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Texas Attorney General.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Utah Residents

Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be

available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.

• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal

data as well as its processing for targeted advertising. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising.

• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Special Notice for Virginia Residents

Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable natural person.” “Personal data” does not include de-identified data or publicly available information.

• Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
• Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
• Request to Delete. You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
• Request to Opt-Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
• Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt-out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Virginia Attorney General or submit a complaint online at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.
• Withdraw Consent for Your Sensitive Personal Information. Except for plan, payroll, and participant data that our customers provide or connect to deliver the Service, which may include sensitive elements such as date of birth and compensation, we do not collect, use, or disclose sensitive personal information about you in your individual capacity. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.

If you’d like to make any of the above requests, you can contact us at consumerrequest@plansync.ai or use this form to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may offer a different price, rate, level, quality, or selection of goods or services to you.

Contacting Us

401kPro welcomes your questions and comments about privacy. If you would like to reach us, please email us at help@plansync.ai or contact us by mail at 405 Virginia Drive, Winter Park, Florida.