Privacy Policy
Last updated October 23, 2026
The short version. To run your account we keep your email address, a scrambled form of your password, billing records held by Stripe, and, for each month, how many groups you opened, Starter's state and which groups. We don't keep your searches. The groups you search are public Form 5500 records about employee benefit plans, not information about you. We do not sell your information, and the site has no advertising trackers.
1. Who we are and what this covers
EB Catalyst Group, LLC ("EB Catalyst," "we," "us") runs the Renewal Finder at renewals.ebcatalystgroup.com. This policy explains what information the website and the modeling app (the "Service") collect and how it is used. It is part of our Terms of Service.
2. The filings in the Service
Renewal Finder shows information from Form 5500 and Schedule A filings published by the U.S. Department of Labor, including the names and business phone numbers of people who signed or are listed on a plan's filing, and the names of brokers. These are public records about benefit plans. If you are named in a filing and want your name or number left out of Renewal Finder, email renewals@ebcatalystgroup.com and we will remove it from the Service (it stays in the Department's public records).
3. What we collect
| What | Why | Where it is kept |
|---|---|---|
| Your email address | Your account, sign-in, billing receipts and account emails | Stripe (our payment processor) |
| Your password, as a salted one-way hash | Checking your password when you sign in. We never store or see the password itself. | Stripe, in your customer record |
| Card and billing details | Charging your subscription | Stripe. We never see your full card number. |
| Your plan, subscription status, trial and billing dates | Deciding whether you can open the app and what your monthly limit is; reminders before your trial ends | Stripe |
| For each month: how many groups you opened, which ones, and Starter's state | Applying your plan's limits, and letting you open a group again for free | Netlify (our host), stored under your Stripe customer ID. Group identifiers only (a plan's employer ID and plan number), never your searches. |
| Searches you save for the monthly email: the filters, a name, when we last sent it, and which groups it has already reported | Sending the email you asked for, and telling you which groups are new | Netlify, under your Stripe customer ID. Deleted when you stop the email. |
| When you accepted the Terms, and which version | A record of your agreement | Stripe, in your customer record |
| A sign-in cookie | Keeping you signed in for up to 30 days in that browser | Your browser. It is signed by us so it can't be forged. |
| A referral code you entered at sign-up, if any | Paying the partner who referred you its referral share (see section 5) | Stripe, in your customer and subscription records |
| Messages you send us | Answering you | Our email |
| Standard web request logs (IP address, browser type, pages requested, time) | Running the site, security and troubleshooting | Netlify (our host) |
4. How we use information
- To provide the Service, run your account and process payments.
- To send the monthly email for each search you save, until you stop it (every email has a link to stop it).
- To send emails about your account: sign-in links, confirmation of your trial and its terms, a reminder before your trial ends, confirmation when you cancel, receipts, and notice of changes to price or terms.
- To keep the Service secure and fix problems.
- To meet legal, tax and accounting obligations.
We do not sell your personal information, share it for advertising, or use advertising or analytics trackers on the Service. We may email you occasionally about Renewal Finder updates. Every such email has a way to opt out, and account emails are not affected.
5. Service providers
We use a few companies to run the Service. Each receives only what it needs for its job:
- Stripe: payments, subscriptions, the billing portal, and your customer record.
- Netlify: hosting the website, the app, our server functions and the data, and storing monthly counts.
- EB Lead Machine (our own product): when you use Send to Lead Machine, we send your email and the groups you picked so Lead Machine can find your workspaces.
- Resend: sending account emails such as sign-in links and trial reminders, and the monthly emails for saved searches.
- Google Fonts: the website loads its typefaces from Google, which receives your IP address and browser details when the fonts load.
Referral partners. If you signed up with a general agency's or other partner's referral code, we share with that partner only what it needs to be paid its referral share: your brokerage's name (or your email address with most of it hidden), your plan, your sign-up and payment dates, whether your subscription is active, and the fees we collected.
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the Service. If that happens, this policy continues to apply to the information transferred.
6. How long we keep it
We keep your account information, including your monthly counts, while your subscription is active. After you cancel, we keep billing records as long as needed for tax and accounting purposes. You can ask us to delete the rest of your account information at any time. Hosting logs are kept by Netlify for a limited period under its own policies.
7. Your choices and rights
Email renewals@ebcatalystgroup.com to ask for a copy of the information we hold about you, to correct it, or to delete it. We will answer within 30 days. Some laws give residents of certain states additional rights. We honor requests from any subscriber regardless of where they live, and we will not treat you differently for making one.
8. Security
The site uses HTTPS everywhere. Passwords are stored only as salted scrypt hashes. Sign-in cookies are signed, HttpOnly and sent only over secure connections. Sign-in links expire after 20 minutes. The data files are encrypted and read only by our server functions. No system is perfectly secure, but we design the Service to keep as little as possible.
9. Children
The Service is for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect information from children.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change is material, we will email subscribers or show a notice in the app before it takes effect.
11. Contact
EB Catalyst Group, LLC · renewals@ebcatalystgroup.com