Privacy Policy

About This Policy

Occam's Model is operated by Occam's Model, Inc., a Delaware corporation ("we", "our", "us"). This policy explains what we collect, how we use it, who receives it, how long we keep it, and the choices you have.

Occam's Model is intended for people in the United States. Our tax calculations and financial models are built for US law.

Children's Privacy

• You must be at least 16 years old to use Occam's Model
• We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share personal information of anyone under 16
• If we learn that someone under 16 has created an account, we will delete it
• A parent or guardian who believes their child has given us information can contact privacy@occamsmodel.com

Information We Collect

This section is our notice at collection. The table in Your US Privacy Rights lists each category with its purpose, who receives it, and whether it is shared for advertising. How long we keep each is in Data Retention.

Account Information

• Email address and username
• Name (optional)
• Age, country, state, and household size, if you enter them
• A password, stored only as a one-way hash
• The version of our Terms of Service you accepted, and when

Signing In With Google or LinkedIn

If you sign in with Google or LinkedIn, the provider sends us your name, email address, and a link to your profile photo. We keep your name, email address, your account ID with that provider, and the sign-in tokens, and we use them only to sign you in. We do not access anything else in your Google or LinkedIn account. Your relationship with them is governed by the Google Privacy Policy and the LinkedIn Privacy Policy.

Personal Financial Information

• Income sources and amounts
• Expense categories and amounts
• Tax information: filing status, dependents, deductions, and where you live
• Financial goals and targets

Business Information

• Your business's basics: name, industry, entity type, location, fiscal year, and the description you write
• Revenue, costs, marketing spend, operating expenses, assets, debt, working capital, and owner equity
• Business models you design for the future: pricing, clients, startup costs, and 24-month forecasts

Uploaded Files

When you upload spreadsheets to import your finances, we read them on our servers and do not keep the files. We keep the contents of their cells, along with the notes you add and your answers to follow-up questions, so you can review and confirm the import. Please remove anything personal, such as customer names or account numbers, before uploading.

Messages and Chats

• Questions you ask our AI chat, and its answers
• Messages with your expert, and notes from expert sessions
• Emails you send us

Payment Information

Stripe processes every payment. We never see or store card numbers or security codes. We receive your Stripe customer and subscription IDs, payment status, your plan, its renewal dates, and any plan change you have scheduled. Stripe's handling is governed by the Stripe Privacy Policy.

Using the Tools Without an Account

• Business generator: we store the business description you type, your monthly income target, and the models we build from them. The description and target are sent to Google Gemini to build those models. For abuse limits we store a keyed hash of your IP address, never the address itself. When the bot check is on, Cloudflare Turnstile receives your IP address and browser signals. Please do not enter personal details. Any file you attach before creating an account stays in your browser: we do not upload, read, or store it until you are signed in.
• Freedom Number calculator: your answers are kept with this browser's session until you create an account or they expire.

Log and Device Data

When you use the site, our servers record your IP address, browser and device type, the pages you request, and when. We also keep an audit log of account actions, such as sign-ins, changes, and actions an expert takes in your account, with the IP address and browser used.

How We Use Your Information

• Calculate your Freedom Number, tax estimates, financial summaries, assessments, forecasts, and scenarios
• Answer your questions through our AI chat and build models you ask for
• Provide expert support, sessions, and prepared work product to the clients who have them
• Save your progress and preferences
• Process payments and manage your subscription
• Send account, billing, and, if you allow it, marketing email (see Communications)
• Keep the service secure and prevent abuse
• Measure how the site is used and, with your permission, how well our ads work
• Improve the service

The license you give us to use your data, and our commitment not to use your financial data to train AI models, are in the Terms of Service. We never use your financial data for advertising.

Human Access to Your Data

1. Your assigned expert (Advisory subscribers, Partner clients, and anyone who accepts a consultant's invitation)

When an expert is linked to your account — because you subscribed to Advisory, because you entered into a Partner engagement, because you approved a consultant's invitation, or because we provisioned one at your request — that person can:

• View your financial data, including your Freedom Number profile, business models, and business diagnostics
• Open your account and work inside it on your behalf ("act as client"), which means they can view and change the same data you can. Actions they take are recorded in our audit log
• Exchange messages with you on your shared message board
• Keep private working notes about your engagement. These notes are visible to your expert and to us, but not to you

This access requires a link to your account, and it is default-deny — no consultant can reach your data without one:

• Purchasing an Advisory subscription creates the link. Your purchase is your consent
• Entering into a Partner engagement creates the link. Signing the engagement letter is your consent
• A consultant who invites you gets no access at all unless and until you explicitly approve the invitation
• You can end the relationship at any time from your account, which revokes the access
• Access also ends automatically when an Advisory subscription is canceled, lapses, or is refunded, or when a Partner engagement ends

2. Live expert sessions

This covers both one-off sessions you book as an add-on and the recurring working sessions included in a Partner engagement.

• We review your business models or business data to prepare for your session
• Sessions are held on Google Meet and may be recorded so you can refer back to them. We will tell you before recording begins

3. Work product prepared for Partner clients

• Where your engagement includes prepared work product, your advisor reads your financial data in order to build and maintain financial statements, models, and related working documents for you
• That work product is stored in your account and treated the same as data you entered yourself: it is yours, it is covered by every access and deletion right described below, and it is not shared with anyone except the service providers listed in this policy

4. Our staff

• People who work for Occam's Model can access your account data only to provide support, fix problems, secure the service, or meet a legal duty

In every case: this data is used only to provide the service, everyone with access is bound by confidentiality, and your business data is not shared with anyone except the service providers listed in this policy.

Who Receives Your Data

We do not sell personal information for money. We disclose it only:

• To the service providers below, which process it to run Occam's Model
• To an expert or consultant linked to your account (see Human Access to Your Data)
• To advertising partners, only with your Marketing consent (see Advertising and Analytics)
• When you ask us to
• When the law requires it, or to protect against fraud or security threats
• To a buyer or successor if our business is sold or merged, under this policy

Service Providers

Our servers and database are in the United States. Some service providers may process data in other countries. Each provider's own privacy policy governs what it does with the data; we are not responsible for their practices.

AI Providers

Google Gemini runs our AI chat and research, reads the spreadsheets you upload, and builds models from the free business generator. It receives:

• Your questions to the AI chat
• The figures and results from the tool you are asking about, such as forecasts, revenue and expense totals, margins, working capital, debt, and tax estimates
• Your business description
• The contents of spreadsheets you upload, your notes about them, and your answers to follow-up questions

Some AI advisors search the web with Google Search for market data and prices; the search uses your question's context, not your financial figures. Google keeps requests for a limited time to detect abuse and, on its paid service, does not use them to train its models. See the Gemini API Terms.

Anthropic Claude organizes your uploaded finances into a model of your business, and designs the future business you describe when you ask Occam to. It receives:

• The contents of the sheets you upload, exactly as they appear, including any names or other text in the cells, and totals our software computes from them
• Your notes about the files, your business description, who you sell to, how the business is taxed, and your answers to follow-up questions
• For a business design: what you asked for, your business name, industry, state, monthly income target, the figures already in that model, and your tax filing status and number of dependents

To check prices, Claude searches the public web with general questions plus your industry and state. Our software removes any question containing your business name, your name, or your financial figures before it is sent. Anthropic deletes these requests within 30 days unless it must keep them longer to enforce its usage policies or comply with law, and under its commercial terms does not train on them. If Claude is unavailable, the import or design does not run; your data is not sent to another AI provider instead. See the Anthropic Privacy Policy and Commercial Terms.

Neither AI provider receives your account email or password, and taxes are computed by our own software, not by an AI model.

Advertising and Analytics

These tools run only after you allow them in Your Privacy Choices. Nothing loads before you choose.

Google Analytics (Analytics)

Records the pages you visit, the steps and buttons you use, and purchases (plan and price). When you are signed in, it also receives your account number and plan type, never your name or email address. It never receives the financial figures you enter. Google's advertising features and Google signals are off. See the Google Privacy Policy.

Microsoft Clarity (Analytics)

Shows us how signed-out visitors use our public pages, through session recordings and heatmaps of clicks, scrolling, and mouse movement, so we can improve the site. It also receives the page address, your browser and device, and your IP address, and sets first-party cookies (see below). All on-screen text is masked. It never runs once you are signed in or inside the tools. Microsoft may use Clarity data for its own purposes, so Clarity does not run when your browser sends a Global Privacy Control signal. See the Microsoft Privacy Statement.

Meta Pixel and Conversions API (Marketing)

• The Meta Pixel runs only for signed-out visitors on our public pages and on the sign-up and sign-in pages, so Meta can measure visits from our ads
• When you create an account, our server tells Meta about the sign-up and sends a hashed copy of your email address, your IP address, your browser, the page address, how you signed up, and the _fbp and _fbc cookies
• Both run only with Marketing consent and never when your browser sends a Global Privacy Control signal. See the Meta Privacy Policy

Your Choices

You can allow or refuse Analytics and Marketing, and change your mind at any time, from the "Your Privacy Choices" link at the bottom of every page or the button below. We treat a Global Privacy Control signal as a request to opt out of sale and sharing: Marketing stays off and Clarity does not run.

Your Privacy Choices

Cookies and Browser Storage

Videos on our Learn articles are embedded from YouTube, which stores data in your browser once you play one. The bot check does not set a cookie. Turning off Analytics or Marketing removes those cookies.

Communications

Account and Billing Email

We send email needed to run your account, and you cannot unsubscribe from it: account verification, password resets and security alerts, receipts, renewal reminders, failed payments, cancellation and deletion confirmations, inactive-account warnings, and changes to our Terms or this policy.

Marketing Email

Product updates, tips, and offers. Every marketing email has an unsubscribe link and our postal address. You can also turn them off with the Product Updates and Offers setting in your Account Settings.

Data Security

• Data is encrypted in transit (HTTPS)
• Account and financial data is encrypted at rest, in our database and its backups
• Passwords are stored only as one-way hashes
• Signed-in sessions end after a period of inactivity
• Sign-in attempts are rate limited and logged

No system is perfectly secure. If a breach affects your personal information, we will notify you without undue delay and as required by law, including what happened, what data was involved, and what you can do.

Data Retention

Deleting Your Account

• How: use "Delete Account" in your Account Settings
• What is deleted, immediately: your account, your personal and business financial data, your AI chats, your message board history, and any private notes your expert kept. This cannot be undone
• Subscriptions: deleting your account cancels any active subscription immediately, without a refund (see the Terms of Service)
• Expert access: any consultant link on your account ends immediately

What remains for a time: audit and sign-in logs, web server logs, backups, Stripe's payment records, and a newsletter sign-up until you unsubscribe, each for the period in Data Retention. De-identified statistics that identify no person or business may also remain.

Your US Privacy Rights

Several US state privacy laws, including California's, give residents the rights below. These rights apply to all US users.

What We Collect and Why

How long we keep each category is in Data Retention. We use sensitive information only to sign you in.

Sale and Sharing

In the past 12 months we shared identifiers (hashed email, IP address, cookie IDs) and internet activity with Meta for advertising. We have not sold personal information for money. You can opt out of sharing from Your Privacy Choices (see Advertising and Analytics), and we honor Global Privacy Control signals.

Your Rights

• Know and access: what we collect, why, and who receives it, and a copy of your data
• Delete: your account and data, from Account Settings or by email
• Correct: most information directly in your account, or ask us by email
• Opt out of sale and sharing: from Your Privacy Choices, or with Global Privacy Control
• Non-discrimination: we will not deny service, charge a different price, or offer a lower quality of service because you used these rights

How to Make a Request

• On a paid plan, download your data with "Download My Data" in Account Settings
• Anyone can ask for a copy of their data, or make any other request, by emailing privacy@occamsmodel.com. We answer within 45 days
• We verify a request by matching it to the email address on your account
• An authorized agent can make a request for you with your signed permission; we may ask you to confirm your identity with us directly
• If we decline a request, you can appeal by replying to our answer or emailing privacy@occamsmodel.com with "Appeal" in the subject. We answer appeals within 45 days. If we deny your appeal, you can contact your state attorney general

Notice of Financial Incentive

On our pricing page we offer a welcome discount in exchange for your email address: a single-use code for 15% off your first payment on a paid plan, for first-time customers.

• What we collect: your email address and the campaign link you arrived from. We send the email address to Stripe to create your code, and we send you marketing email
• Value: we estimate the value of your email address as the value of the discount, 15% of your first payment, because that is what we offer for it
• Joining: entering your email address in the offer form is your agreement to these terms. The offer is optional
• Withdrawing: unsubscribe from any marketing email at any time

Changes to This Policy

We will give at least 30 days' notice of a material change to this policy, by email or in the app, before it takes effect, and update the date at the top of this page.

Contact Us

Occam's Model, Inc., a Delaware corporation
Email: privacy@occamsmodel.com
Website: occamsmodel.com