Privacy Policy

Who we are

ThinkNirvana Foundation, Inc. ("ThinkNirvana," "we," "us," or "our") is a Maryland nonprofit corporation whose Pooled Plan Provider registration under ERISA §413(e) is in process. We operate AIPEP401K, a pooled employer 401(k) plan. Technology infrastructure is provided by Nirvana Ledger LLC under license.

This Privacy Policy covers ThinkNirvana Foundation, AIPEP401K, and the websites aipep401k.com and thinknirvana.org.

What we collect

Waitlist and inquiry forms

When you join the AIPEP401K waitlist or contact us, we collect:

• Name and email address
• Company name and employee count (if provided)
• Your role and current retirement plan status (if provided)
• The page or source you came from

Plan participants (when the plan launches)

For enrolled participants, we collect personal and financial information required by ERISA and IRS regulations, including name, Social Security Number, date of birth, compensation, and contribution elections. This information is encrypted at rest using AES-256 encryption and is never stored in plaintext.

Website usage

We use Google Analytics to understand how visitors use our sites. This includes page views, time on site, and general geographic region. We do not use advertising trackers or sell browsing data.

How we use your information

• To contact you about your waitlist status and plan availability
• To send updates about ThinkNirvana Foundation and AIPEP401K (you can unsubscribe at any time)
• To administer the retirement plan in compliance with ERISA and IRS regulations
• To improve our websites and services

What we never do

• We never sell your personal information to any third party
• We never share your data with advertisers
• We never use your retirement account data for marketing purposes
• We never accept payment from fund companies in exchange for fund selection (no revenue sharing)

Data storage and security

Waitlist data is stored in Google Sheets, accessible only to ThinkNirvana Foundation staff. Participant plan data (when the plan launches) is encrypted at rest using AES-256 via pgcrypto and transmitted over TLS 1.3. Bank account connections are verified via Plaid — we never store full account numbers.

Your rights

You have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to legal retention requirements for plan records)
• Unsubscribe from communications at any time

To exercise any of these rights, email hello@thinknirvana.org with the subject line "Privacy Request."

Cookies

Our websites use minimal cookies — only those required by Google Analytics for usage measurement. We do not use advertising cookies or cross-site tracking.

Changes to this policy

We may update this policy as our services develop. Material changes will be noted at the top of this page with an updated effective date. Continued use of our sites constitutes acceptance of the updated policy.