Privacy Policy

1. Who we are

Cedarwise, Inc. is a Delaware corporation. This policy covers the Cedarwise website, including the free diagnostic, the paid membership, and the blog. Questions and data requests: support@cedarwise.ai.

2. The website and the diagnostic

The diagnostic asks band-level questions about your workplace benefits: ranges and choices, never your name, credentials, account numbers, Social Security number, balances, or exact salary. While you answer, your responses stay in your browser’s session storage under a randomly generated session ID, which is not derived from and is not linked to your identity. When you complete the diagnostic, your answers are stored under that same random ID so we can improve employer coverage. Unfinished questionnaires are never stored. An employer name we don’t recognize goes into our research queue.

If you ask us to email you a copy of your results, we store the address you provide with those results and use it to send you that report and occasional product updates. You can opt out at any time by replying to any message.

If you join the membership waitlist, we store the email address you provide and use it to send a confirmation and tell you when the paid membership opens. Joining the waitlist does not create a paid membership or authorize a charge.

We record anonymous usage events keyed to that same random session ID, and aggregate page analytics (visits, referring site, country, device type) that set no cookies and receive no answers or email addresses. We use no advertising trackers or pixels. Data is stored on servers located in the United States with industry-standard security measures; the site is served over TLS.

3. The membership

A paid membership is an account. We store the email address you sign in with, your subscription status, and the facts you enter or confirm so your benefits portal works: your employer, plan choices, elections, and contribution history. Every fact we hold about you is visible in the product, marked with where it came from, and correctable by you.

Our payment processing partner, Stripe, collects the payment information necessary to process your payment. Your card details go to Stripe directly and are never received or stored by Cedarwise; Stripe’s handling of them is governed by its own privacy policy. We send you sign-in links when you request them, and benefit reminders according to your preferences.

4. Storage and security

We protect your personal data with physical, technical, and administrative security measures appropriate to the type of data and how we process it, including encryption in transit (TLS 1.2+) and at rest (AES-256) on infrastructure hosted in the United States, and least-privilege access controls so each part of the service can read only what its role requires. No method of transmitting or storing data is completely secure; if we learn of a breach affecting your data, we will tell you.

5. Retention and deletion

Membership data is retained while your membership is active or paused, so a returning member finds their calendar as they left it. Canceling your subscription stops billing but does not delete your data; to delete it, email support@cedarwise.ai and we will delete or de-identify the personal data we hold about you, except records we must keep for security, fraud prevention, tax, or legal reasons. The same address answers access and export requests, and removes stored diagnostic answers.

6. Third-party services

We rely on service providers for cloud hosting and data storage, email delivery, payment processing, and analytics. Each receives only what its role requires, acts on our instructions, and none receives data for advertising. These providers process IP addresses as necessary to deliver and secure the service and to maintain short-term operational logs. We do not associate IP addresses with your responses.

7. What we never do

We do not sell your data, share it for marketing or advertising, or move money.

8. Changes

Material changes to this policy will be announced by email or in-product notice before they take effect.