Privacy Policy

Last updated: May 3, 2026

1. Scope and overview

This Privacy Policy describes how Real Good Holdings, LLC, a Florida limited liability company ("RG Holdings," "we," "our," or "us"), collects, uses, stores, and shares information about users of our websites, products, and services (collectively, the "Services"), including the websites operated under our brands (such as 5daystoheloc.com, newpermitalerts.com, professionalimageworks.com, findkidtherapy.com, and our internal personal finance management tools).

By using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

2. Information we collect

Information you provide

• Contact information such as name, email address, phone number, and mailing address when you sign up, request a demo, or purchase a product.
• Account credentials for products that require an account, including username and a hashed password.
• Payment information processed by our third-party payment processors (Stripe, Gumroad, Etsy). We do not store full credit card numbers on our servers.
• Financial account data, when you choose to connect a bank or other financial institution through Plaid (see Section 3 below). This includes account balances, transactions, account holder names, and routing/account number metadata required to support household budgeting and cash-flow features in our internal personal finance management tool.
• User-generated content such as photos uploaded to our retouching, restoration, or AI portrait products.

Information collected automatically

• Device and log data: IP address, browser type, operating system, device identifiers, referrer URL, pages viewed, and timestamps.
• Cookies and similar technologies: we use cookies for session management, analytics, and (with consent where required) marketing measurement. You can disable cookies in your browser; some features may not work without them.
• Analytics: aggregated usage analytics through providers such as Google Analytics and Microsoft Clarity to understand how our Services are used.

3. Use of Plaid

Our personal finance management tool uses Plaid Inc. ("Plaid") to securely connect to financial institutions you authorize. When you connect an account through Plaid:

• You authenticate directly with your financial institution through Plaid's interface. Your bank login credentials are not transmitted to or stored by RG Holdings.
• Plaid provides us with the data you authorize, which may include account balances, transaction history, account and routing numbers (where available), and account holder identity attributes.
• We use this data only to power features you have requested in the personal finance dashboard, including budgeting, cash-flow forecasting, and account aggregation views.
• Plaid's handling of your data is also governed by Plaid's own end-user privacy policy, available at plaid.com/legal.
• You can revoke Plaid's access to any connected account at any time, either from within our application or via Plaid's portal at my.plaid.com.

4. How we use information

We use the information we collect to:

• Provide, operate, and maintain our Services;
• Process transactions and deliver products you have purchased;
• Power features such as cash-flow analysis, budgeting, and personalized recommendations within our personal finance tools;
• Communicate with you about your account, transactional notices, customer support, and product updates;
• Send marketing communications (only where you have opted in or where permitted by law); you can unsubscribe at any time;
• Detect, prevent, and respond to fraud, abuse, security incidents, and unlawful activity;
• Comply with legal obligations and enforce our Terms of Service.

5. Sharing and disclosure

We do not sell your personal information, and we do not share your financial account data with third parties for their own marketing purposes.

We share information only as necessary to operate the Services, specifically with:

• Service providers that process data on our behalf under written contracts (for example, hosting providers, email delivery services, Plaid, Stripe, analytics vendors). They are permitted to use the data only to perform services for us.
• Legal and safety: where required by applicable law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect rights, safety, or property.
• Business transfers: in the event of a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

6. Data storage and security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including:

• Encryption in transit: TLS 1.2 or higher for all connections to our Services.
• Encryption at rest: financial account data and other sensitive records are encrypted at rest in our databases and object storage.
• Access controls: production access is limited to authorized personnel using multi-factor authentication.
• Logging and monitoring of access to sensitive data.
• Vendor diligence: third-party processors are vetted for appropriate security and data protection practices.

No system is perfectly secure; we cannot guarantee absolute security. We retain personal information only for as long as necessary for the purposes described above, after which it is deleted or de-identified.

7. Your rights and choices

You may:

• Access, correct, or delete your personal information by emailing privacy@rgholds.com.
• Disconnect Plaid-linked accounts at any time from within our application or via Plaid's portal.
• Opt out of marketing communications via the unsubscribe link in any marketing email.
• Disable cookies in your browser.

8. California privacy rights (CCPA/CPRA)

California residents have the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to opt out of "sale" or "sharing" of personal information. RG Holdings does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. To exercise rights, contact privacy@rgholds.com. We will not discriminate against you for exercising these rights.

9. European privacy rights (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under applicable data protection laws including access, rectification, erasure, restriction, portability, and objection. The legal bases on which we process your personal data are: performance of a contract, your consent, our legitimate interests in operating and securing the Services, and compliance with legal obligations. Data may be transferred to and processed in the United States; where required, we rely on Standard Contractual Clauses or other approved mechanisms. Contact privacy@rgholds.com to exercise rights or to lodge a complaint with your local data protection authority.

10. Children

Our Services are not directed to children under 13 (or under 16 in jurisdictions where that is the applicable age). We do not knowingly collect personal information from children. If you believe we have, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice (for example, by email or in-product notice). Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

12. Contact us

For privacy questions, requests, or complaints, please contact:

Real Good Holdings, LLC
Attn: Privacy
Email: privacy@rgholds.com