1. Who we are, and what this covers

1.1 Us. ERISA Benefits Tech, LLC ("EBT," "we," "us") is an Arizona limited liability company at PO Box 41283, Tucson, AZ 85717. You can reach us at hello@erisabenefitstech.com.

1.2 What this covers. This notice describes what we collect through erisabenefitstech.com and assistant.erisabenefitstech.com - when you create an account, watch the free training, buy the ERISA SKILLs Suite, subscribe to the ERISA Benefits Law Desk Reference, use the Desk Reference research assistant, or contact us - what we do with it, and the choices you have. It is part of the Account and Registration Terms.

1.3 Who this is for. Our site is for people acting for an organization in connection with its employee benefit plans or its benefits practice. It is not for participants looking up their own benefits, and it is not for anyone under 18.

2. What we collect

2.1 When you register. Your name, title, work email address, organization, and a password, which we store only as a salted hash. We never see or store your password itself.

2.2 When you use the training. Which modules you opened and how far you got, so the site can show you where you left off and so we can tell which material is useful.

2.3 When you buy. Your organization's legal name, the contact individual's name, title, and email, the order and payment record, your Tier, and your License ID and Release. Payment card details are handled by a third-party payment processor and are never received or stored by us.

2.4 When you contact us. The correspondence itself, including installation-support email, and anything you choose to put in it.

2.5 Automatically. Ordinary server log information - IP address, browser and device type, pages requested, timestamps - and cookies as described in Section 7.

2.6 When you subscribe to the Desk Reference. Your plan (monthly or annual), the subscription and payment record, and the dates your access runs. Payment card details are handled by our payment processor and are never received or stored by us. If a law firm engagement gives you access, the dates of that access.

2.7 When you use the research assistant. Your questions, the answers, the documents you attach, and a record of how much of your research allowance each answer used. Section 13 describes what we keep, who receives it, and when it is deleted.

3. What we do not collect, and cannot see

3.1 Nothing from your platform account. This is the most important sentence in this notice. The Suite runs inside your own account with a third-party artificial-intelligence platform, under your own agreement with that provider. We do not host it. We do not receive, process, store, or have any access to the documents, plan materials, questions, or output you put into or get out of that account. We therefore make no data-handling promise about that material, because we have none to make: we cannot see it. This Section 3.1 is about the Suite. The Desk Reference research assistant is different: it runs on our servers, so we do receive what you put into it, and Section 13 makes the promises about that material.

3.2 And we do not set your settings. We also do not set, control, monitor, or have any ability to assure any setting or policy in your account - including whether your material may be used to train or improve a model, how long it is retained, whether it is logged, and whether it is subject to human review. Those are yours to elect, and your agreement with your platform provider governs them. We may tell you which settings we think are worth considering; that is guidance, not a promise about anyone else's conduct.

3.3 Please do not send us plan or participant data. We do not ask for, need, or want participant-level data, protected health information, census or testing data, or plan documents. Do not send them. If you send something like that anyway, we will delete it and tell you we have. The one exception is the research assistant, which accepts plan documents and other documents about your plan so that it can answer questions about them; Section 13.7 says what you may and may not attach.

3.4 No special categories, and no tracking you across the internet. We do not knowingly collect sensitive personal information, we do not use advertising cookies or third-party trackers, and we do not build profiles of you for advertising.

4. Why we use it

4.1 The purposes. To create and run your account and authenticate you; to give you the free training and remember your progress; to sell, deliver, and support the Suite and each updated Release; to issue and administer License IDs and to handle renewals and upgrades; to provide the Desk Reference and its research assistant, and to measure each subscriber's research allowance; to answer you; to keep the site secure and detect misuse; to enforce our terms and protect our rights, including identifying an unauthorized copy as Section 6 describes; and to comply with law.

4.2 Marketing, only if you say so. We will send you occasional email about the Suite and new training only if you have asked us to, and you can stop it at any time from any such email or by writing to us. We do not condition an account on marketing consent.

5. Retention

5.1 How long. Account and training-progress information: while your account is open, and then deleted or de-identified within a reasonable period after it closes. Order, license, and registry records: for as long as the license exists, which for a perpetual license means indefinitely, because the record of what your organization is licensed to use is the point of it. Correspondence: as long as needed for the matter and our ordinary business records. Server logs: a short rolling period. Desk Reference subscription records: for as long as the subscription exists, and afterwards as our ordinary business and tax records require. Research assistant conversations and documents: as Section 13.4 describes.

6. The license registry, disclosed plainly

6.1 What it is. Each copy of the Suite we issue is individually identified. We keep a private registry recording the licensee, the contact individual, the Tier, the purchase date, the License ID, the Release, and identifying characteristics that let us tell which copy a given file or excerpt came from.

6.2 What we use it for. Delivering and supporting your copy, handling renewals and upgrades, and determining which copy an unauthorized file or excerpt came from. We do not use it to monitor your use of the Suite, and we receive no information about your use - the Suite reports nothing back to us.

6.3 Where it lives. The registry is confidential, is kept outside any distributable repository, and is never shipped inside a package. None of it is sold or licensed to anyone.

7. Cookies

7.1 What we use. Cookies that are strictly necessary to run the site and keep you signed in. If we ever add analytics, we will update this notice first, keep it to aggregate measurement, and provide any choice the law then requires. We do not use advertising or cross-site tracking cookies today.

8. Who else sees it

8.1 Service providers. We use a small number of providers to run the site, host the training, send email, and process payments. Today they are GoDaddy, which hosts the website and the training videos; Postmark, which sends account and transactional email; Stripe, which processes payments and receives your card details directly, so that we never do; and Anthropic, which provides the artificial-intelligence model that writes the research assistant's answers, as Section 13.5 describes. Each gets only what it needs, is bound to confidentiality and security obligations, and may not use your information for its own purposes. If we change or add a provider we will update this notice.

8.2 Not the law firm. EBT is owned by the professional entities of the two partners of an Arizona law firm. We do not share your account, training, subscription, or purchase information, or your research assistant conversations and documents, with that firm, and nothing you do here creates any relationship with it. If you ever want legal advice, you engage counsel of your own choosing directly.

8.3 We do not sell it. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

8.4 Law and transactions. We may disclose information where the law requires it, to protect our rights or someone's safety, or to a successor if substantially all of our business is acquired - in which case this notice continues to apply until it is replaced.

9. Security

9.1 What we do. We keep administrative, physical, and technical safeguards appropriate to the small amount of information we hold, including hashed passwords, encryption in transit, and access limited to the people who need it. No system is perfect, and we do not promise one is.

10. Your choices

10.1 What you can ask for. You can ask us to show you the information we hold about you, correct it, delete it, or close your account, and you can withdraw marketing consent at any time. Write to hello@erisabenefitstech.com and we will respond within a reasonable period.

10.2 One limit, stated honestly. If your organization holds a Suite license, we keep the order and registry record for that license even if you close your personal account, because it is the record of what your organization is licensed to use and it is how we protect every licensee. We will remove you as the contact individual on request.

10.3 Where your information is. We process information in the United States.

11. Changes to this notice

11.1 How we change it. We will post a revised notice with a new date and, if the change is material, tell the email address on your account. The version in force when you registered governs until you are notified of a change.

12. Contact us

12.1 How. ERISA Benefits Tech, LLC, PO Box 41283, Tucson, AZ 85717; hello@erisabenefitstech.com. Tell us if you think anything in this notice is wrong about what we actually do, and we will either fix the practice or fix the notice.

13. The Desk Reference research assistant

13.1 What it is. The research assistant at assistant.erisabenefitstech.com answers questions about the federal law of employee benefit plans for people who hold a Desk Reference subscription or engagement access. Unlike the Suite (Section 3.1), it runs on our servers, so we receive what you put into it. This section says what we do with that material.

13.2 What we keep. For each conversation: your questions; the answers; a title taken from your first question; the documents you attach (a PDF as the file you uploaded, and a Word document as the text taken from it); and, for each answer, a technical record of which Desk Reference sections and official web pages were read, which model wrote it, what it cost, and when. We also keep a record of how much of your research allowance you have used in each allowance period.

13.3 Who sees it. You, when you are signed in. No one else using the site can see your conversations. We do not read your conversations or documents, except where you ask us to look into a problem with an answer, where it is needed to keep the service secure or working, or where the law requires it.

13.4 How long we keep it. Each conversation, with its answers and documents, is deleted automatically 90 days after its last message. You can delete a conversation at any time, and it is then deleted from our database and our server at once. When your account is closed, all of your conversations and documents and your allowance record are deleted at once. If your access ends but your account stays open, your conversations are kept until their 90 days run out, so they are there if you return; you can ask us to delete them sooner. Our hosting provider keeps routine backup copies of its servers, which we do not control; a deleted conversation may remain in those copies until the provider overwrites them. We never restore a deleted conversation from a backup.

13.5 Anthropic. The answers are written by an artificial-intelligence model provided by Anthropic, PBC. To write an answer, we send Anthropic your question, the earlier questions and answers in the same conversation, any document attached to the conversation, and the Desk Reference text the assistant reads. Documents are sent inside that request; we do not store them with Anthropic as files. Anthropic processes this material to produce the answer and, under the settings of our account with Anthropic, keeps it for 30 days and then deletes it. Anthropic does not use it to train its models. Anthropic acts for us as a service provider under Section 8.1.

13.6 Searches of official sites. To read the law at its source, the assistant can search and read pages on a fixed list of official sites: eCFR, the U.S. Code, govinfo, the IRS, the Department of Labor, the Federal Register, the federal courts, and Cornell's Legal Information Institute. Those searches are run through Anthropic. The assistant is instructed to search only for the law - the name of a statute, regulation, case, or legal question - and never to put your facts, names, numbers, or anything from a document into a search. The official sites receive only an ordinary request for a public page.

13.7 What you may attach. You may attach plan documents, summary plan descriptions, notices, and similar documents about your plan. Do not attach protected health information, Social Security numbers, or other information that identifies a participant or beneficiary; remove or redact it first. You are responsible for having the right to share each document you attach, as the Subscriber Terms of Use say.

13.8 Nothing you write is logged. We do not write your questions, the answers, or your documents to any log file. If an answer fails, our error log records only the number of the message and the kind of error, never its content.

13.9 Not sold, not shared, not used to train AI. We use what you put into the research assistant to answer you, to keep the service working and secure, and to measure your allowance. We do not sell it, we do not share it with the law firm (Section 8.2), and neither we nor Anthropic use it to train any artificial-intelligence model.