Privacy Policy
Last updated: April 23, 2026
Plain English, no legal gymnastics. This policy describes what Payback (operated by PG·Intel LLC) collects, how we use it, who we share it with, and the rights you have.
What we collect
Account information: Firm name, advisor name, work email, hashed password. No card number — Stripe handles billing directly.
Customer workspace data: Clients you add, advisor notes, scenario inputs, and saved scenarios. This data is stored to operate the Services for you.
Firm branding: Logo image and brand accent color you select in Firm Settings, used only to white-label your briefs.
Demo-request leads: Firm name, contact name, email, phone, client count, and any message submitted via the Book Demo form on the marketing site.
Specialist-introduction requests (Latitude): If you ask Latitude to introduce you to a relocation specialist, we store the details you enter (email, citizenship, timeline, and, only if you opt in, a net-worth band) together with the route and verdict of your brief, and we pass exactly those details to the specialist you asked to be introduced to. Latitude may receive a referral or advertising fee from that specialist. You can withdraw at any time by emailing sales@pgintel.dev, and we will not share your details.
Usage data: Basic diagnostic logs (routes visited, errors) for reliability and abuse prevention. We do not run third-party behavioral ad trackers.
How we use it
To operate the Services: authenticate you, render your workspace, generate briefs, send administrative email. To communicate with you about pilots, contracts, billing, and material changes to the Services. To improve the product in aggregate — never against a single identifiable Customer.
Who we share with
We use a short list of subprocessors to operate the platform: Neon (Postgres hosting), Vercel (web hosting), Stripe (billing), Resend (transactional email), Upstash (rate limiting), Sentry (error reporting), and PostHog (product analytics). We do not sell your data or share it with advertisers or data brokers.
Your clients' data
If you are a Customer using Payback to advise your own clients, the personal information you enter about those clients (name, email, profile) is yours to control. You are responsible for obtaining any consent required from your clients before entering their information. You may delete any client record at any time from Firm Settings; deletion is permanent within 30 days.
Data retention
We retain account and workspace data for as long as your subscription is active. After cancellation we retain data for 90 days in case of reactivation, then delete. You can request earlier deletion by email at any time.
Security
TLS in transit. Passwords hashed with bcrypt. Database access limited to our serverless functions and audited staff. We do not promise unbreakable security — no one can — but we apply current best practice and disclose material breaches to affected Customers within 72 hours of discovery.
Your rights
You may request: a copy of your data, correction of inaccurate data, or deletion of your account and all associated data. We honor GDPR and CCPA requests within 30 days. Email sales@pgintel.dev with the subject line “Data request”.
Changes
We will announce material changes to this policy by email or in-product banner. Continued use after the change constitutes acceptance.