Privacy
The plan lookup processes searches against public Form 5500 data. Information you submit through the plan-review form is stored privately and used to respond to your request.
Information you provide
The plan-review form asks for your name, company, email, optional phone number, and a short message. Do not include participant information, account numbers, Social Security numbers, or confidential plan documents.
Lookup data and requests
The plan lookup processes company-name searches and plan-page requests against stored public Form 5500 filing data. It keeps filing data or lookup results temporarily in server memory. Search terms and plan-page URLs may remain in browser history and hosting request logs. Vercel uses IP addresses and request metadata to enforce lookup traffic limits. Its security services keep temporary request counters; search text is not included in those counters. Vercel applies its own retention practices to security logs. Information submitted through the plan-review form is stored in a private Sanity dataset and used to respond to your request. If you request a review from a plan-lookup page, we also save a reference to that plan. We keep a record of your privacy acknowledgment and notice version, when you submitted the inquiry, and the status and reference of its email notification. To limit repeated submissions, we save an identifier derived from the request's IP address. Resend sends a notification containing your contact details, company, message, sanitized referral information, submission time and inquiry reference to graham@maintomill.com. If you selected a plan, the email includes its plan reference. Vercel hosts the website.
Attribution and measurement
The form reads referral and landing-page information from browser session storage and stores sanitized attribution with your inquiry. We retain submitted inquiry records, including the information saved with them, indefinitely. We do not automatically delete those records after a fixed period. Email notifications create separate copies in our mailbox. We retain inquiry emails in our mailbox indefinitely. Email and hosting providers apply their own retention practices to their service logs. Analytics is disabled. For privacy questions or requests about information you submitted, email graham@maintomill.com.
