Security Policy

Last Updated: March 31, 2018

Our Systems

The safety of your data is a top priority. To keep data safe, we use multiple layers of security procedures, including:

• Strong browser encryption. Connections between you and our servers are secured to industry standard specifications

• Secure servers. Your account information is encrypted and stored behind secure monitored firewalls in a secure facility that is safeguarded 24-hours-a-day

• Systematic procedures. We maintain continuous encryption, auditing, logging, backups, and safe-guarding of data

• Testing. We run internal and external security audits of our software and systems

• Data minimization. We have taken steps to minimize the amount of data collected and stored and to segregate account and application data to provide higher levels of protection

Additionally, we have built in a number of safeguards into our software, including:

• Two-Factor Authentication (2FA). MyMoneyRoadmap can help protect your account from theft by providing an extra layer of protection every time you login. With 2FA, you’ll be asked to enter a unique verification code from either a mobile authenticator app, such as Authy or Google Authenticator, or a text that MyMoneyRoadmap sends you each time you login

• App Passwords. MyMoneyRoadmap does not allow access to your financial information except when authorized by financial providers and implemented using best practice technology and security protocols

• Automatic Logout. If you are inactive for an extended period of time we automatically log you out so unauthorized people cannot access your account

• Trusted Enrollment. Users are enrolled only via authorized financial service providers who you have relationships with

• Personalized Email. Emails coming from MyMoneyRoadmap will generally address you by name, so you can be confident we know who

Keeping your computer safe

• Make sure you are running the latest versions of your operating system and browser software, and that all security updates are installed

• Maintain updated anti-virus, anti-spyware, and firewall software

• Do not allow your browser to automatically login for you

• Choose a unique password that is hard to guess and that you don’t use elsewhere, and change it periodically

• For more information visit the Federal Trade Commission’s “OnGuard Online” computer security site

Keeping your information safe

• Never share your login or password with anyone

• Never provide personal information when requested through an email or a link unless you can be certain of the site’s authenticity

• Never input personal information into a form in a popup window or email message

• Never open an email if you do not recognize the sender, especially if it contains an attachment

• Always remember to log out of MyMoneyRoadmap when you are done

• Be careful if you are using public computers that do not belong to you, such as at a cafe or in a library

Protecting yourself from phishing attacks

Phishing is an illegal practice where someone tries to get you to provide your personal or financial information by making you think it is being requested from a legitimate party.

The most popular form of phishing is an email that appears to originate from a trusted organization asking you to validate or update your account information, usually through a link in the email that directs you to a fake website that looks legitimate.

Be vigilant about phishing attacks by watching out for:

• An unsolicited email containing an attachment that appears to be coming from a legitimate company

• An urgent sounding email claiming you must act immediately and supply the requested information

• Popup windows asking you for personal information

For more information, please visit www.antiphishing.org

Minimizing damage from identity theft

If your personal or financial information is accidentally disclosed or deliberately stolen we recommend the following steps:

• Place a “fraud alert” at all three major credit bureaus, and request copies of your credit reports. Note that credit bureaus are required to provide free copies of your credit report if you are a victim of identity theft:

  • TransUnion: www.transunion.com, 800-680-7289

  • Experian: www.experian.com, 888-397-3742

  • Equifax: www.equifax.com, 800-525-6285

• Close any accounts that have been tampered with or new accounts that were established fraudulently

• File a police report with local law enforcement officials, which may help with clearing up your credit

Report your theft to the Federal Trade Commission online or by phone at 877-ID-THEFT (877-438-4338)