Privacy & Information Practices

This Privacy Policy describes how we collect, use, protect, and disclose nonpublic personal information in connection with our advisory, insurance, and tax-related services.

Information We Collect

We collect nonpublic personal information that is necessary to provide financial advisory, insurance, and tax-related services. This information may include, but is not limited to:

• Personal identification and contact information
• Financial, investment, and tax-related data
• Insurance and benefits information
• Information provided through meetings, forms, or secure portals

Use of Information

Information collected is used solely for legitimate business purposes, including evaluating financial circumstances, providing advisory recommendations, coordinating services, complying with regulatory requirements, and maintaining client relationships.

Disclosure of Information

We do not sell, rent, or share nonpublic personal information with unaffiliated third parties for marketing purposes.

Information may be disclosed only as permitted or required by law, including to custodians, service providers, insurance carriers, tax software providers, or regulatory authorities, solely to facilitate services or comply with legal obligations.

Certain services may be delivered using platforms or entities in which the principals of Savino & Associates hold a financial interest. Information shared with those providers is limited to what is necessary to deliver the service, and is subject to the same restrictions set out in this policy. See our Disclosures for the related conflict of interest.

Notwithstanding the foregoing, phone numbers collected through our website or other communications channels, along with any associated opt-in or consent records for text messaging, are not sold, shared, rented, or disclosed to third parties for their independent use, marketing, or promotional purposes.

Text Messaging

Where you provide a mobile number and agree to be contacted by text, we may send messages relating to scheduling, document requests, and the servicing of your engagement. Message frequency varies. Message and data rates may apply.

Consent to receive text messages is not a condition of purchasing any product or service. You may opt out at any time by replying STOP to any message, or reply HELP for assistance. Opting out of text messages does not opt you out of other communications necessary to service your engagement.

Please do not send sensitive financial or personal information by text message. Text is not a secure channel.

Safeguarding Client Information

We maintain physical, electronic, and procedural safeguards designed to protect nonpublic personal information. Access to information is limited to personnel who require it to perform their professional duties.

Website & Communications

Our website may collect limited technical information, such as IP addresses or browser data, for operational and security purposes. We do not knowingly collect personal information through the website without voluntary submission.

This website does not use advertising or analytics tracking cookies. It does rely on a small number of third-party services, which receive limited technical information such as your IP address when the relevant page loads:

• Google Fonts, which serves the typefaces used across the site
• Calendly, which powers the scheduling tool on our contact page and is loaded only when you reach it
• Vercel, which hosts the site
• Resend, which delivers what you send through a form on this site to our office

Each of these providers handles information under its own privacy policy. Information submitted through a form on this website is transmitted to us and is not used for advertising.

Client Portal and Google Sign-In

Clients we invite may use the Savino Client Portal, a separate secure application at portal.savinoassociates.com, to exchange documents with us, read the reports we prepare, sign agreements, and pay invoices. Accounts are created by our office from the email address we already hold for you. The portal has no public sign-up, and no one can open an account without an invitation from us.

The portal is operated on our behalf by Vercel (hosting), Supabase (sign-in accounts and document storage), Stripe (card payments), and Resend (portal email). Each receives only what it needs to perform its function, and none of them is permitted to use your information for its own purposes.

You can sign in with an email address and password, or with the “Continue with Google” button. Signing in with Google is optional and is offered only to clients we have already invited. The rest of this section applies only if you use it.

When you sign in with Google, Google provides us with:

• your name, as it appears on your Google account
• your email address, and whether Google has verified it
• a link to your Google profile picture

We use your name and email address for one purpose: to match you to the portal account your invitation created, and to sign you in to it. The profile picture is held with the rest of your sign-in record and is not displayed anywhere in the portal. We never receive your Google password.

No other information in your Google account is requested or accessed. We do not read Gmail, Drive, Contacts, Calendar, Photos, or any other Google service, and the portal holds no permission that would allow it to. A Google address that matches no invitation is declined rather than given a new account.

Information received through Google sign-in is never sold, rented, or shared with third parties, and is not used for advertising, for marketing, or to train any artificial intelligence model. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect the portal from your Google account at any time on Google’s permissions page, myaccount.google.com/permissions. Doing so stops Google sign-in and nothing else: your portal account, your documents, and your history all remain, and you can continue to sign in with your email address and password.

We keep the name and email address received from Google for as long as your portal account exists. Close the account and the sign-in record goes with it. Documents and records we are required to keep by tax, insurance, or other regulation are retained as described below.

How Long We Keep Information

We retain client information for as long as the relationship continues and thereafter for the period required by applicable tax, insurance, and recordkeeping regulations, which for certain records is several years beyond the end of an engagement.

Inquiries that do not become engagements are retained only as long as needed to respond, and to keep a record of the contact.

Your Choices

You may request a copy of the personal information we hold about you, ask us to correct anything inaccurate, or ask that we stop contacting you for marketing purposes. Requests can be made using the contact details on this website.

Some information cannot be deleted on request where we are required to retain it by tax, insurance, or other regulation. Where that applies, we will tell you.

Clients also receive a separate privacy notice describing our information practices in connection with the services we provide. Where that notice and this page differ, the notice you were given governs your engagement.

Children’s Privacy

Our services are directed to adults. We do not knowingly collect personal information from children under 13 through this website. If you believe a child has provided information to us, contact us at info@savinoassociates.com and we will delete it.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in regulations or business practices. Any updates will be posted on this page.

Contact Information

Questions regarding this Privacy Policy may be directed to Savino & Associates through the contact information provided on this website.