RightCapital

1. How secure is my financial data?
   Very. We use various practices, policies, and technology to ensure not only is your data locked down, but is also limited to what is needed by your advisor. Read on to learn more.
2. How is my data secured? What do you do to ensure it is safe?
   Physical security: We use Amazon Web Services (AWS) to hold your data. It’s physically under lock and key, using multilayer access, alerting, and audit measures.
   Ongoing audits: RightCapital uses frequent internal and third-party testing to remain up to safeguard data. Employees also receive ongoing security and data protection training.
   Backups: Your data is backed up and replicated to geographically separate locations. These safeguards are in place to ensure your data remains intact and online.
   Encryption: All data that is transferred and stored is encrypted using bank-level encryption practices. Data in transit and at rest is encrypted using industry-standard HTTPS protocols and uses AES-256 encryption algorithms.
   We do not store credentials for external accounts: We do not store the login credentials you use to link external accounts. We partner with Yodlee, known for their expertise and thorough security practices. We use authentication tokens to
   communicate with Yodlee so RightCapital receives read-only information and cannot access your credentials. No system or person at RightCapital can reverse engineer your credentials.
   What does RightCapital do with my data? The portal cannot be used to make transactions. Your data is read-only and used to do things like creating budget reports for you and enabling you and your advisor to track investments, loans, and
   other accounts for your financial plan.
3. What does RightCapital use my data for?
   We do not sell your data. It’s yours, not ours. Your data is expressly for you and your
   advisor to use as building blocks for your financial plan. It is designed for a successful
   outcome of better understanding and improving your financial plan.

EveryIncome

1. Who can access my financial account credentials or information? No one at EveryIncome has access to your password or any financial institution credentials. Financial credentials are never stored or used on our servers. All financial institution information is accessed directly to/from your bank or other financial institution through Envestnet | Yodlee®, a world-leading financial data aggregator that many banks use themselves. For more information, see Yodlee’s privacy policy here.
2. Why do I need to enter financial institutional usernames and passwords to use My money? In order to provide you with an overview of your finances, we consolidate all your financial information into one place, including things like account balances, transactions, and holdings. When you enter your credentials, the data is secured using bank-level encryption and sent to your bank to access that information through Envestnet | Yodlee®, a world-leading financial data aggregator that many banks use themselves. For more information, see Yodlee’s privacy policy here. Your financial institution information is never stored on our servers and we don’t have access to your financial credentials.
3. I have a sponsored account.  Can my sponsor see my financial information or my activity on the platform? Your sponsor can see your username, email address, and any information you’ve entered into questionnaire forms designed to help drive a personalized experience with your sponsor. They can also see the time and date of your last login. Sponsors also have access to anonymous user analytics like how many users have logged in to their platform during a calendar month, but they cannot see your detailed site activity and they don’t have access to any of your financial account information.

Harbor Investment Advisory is the “advisor” to your plan, not your “plan provider”, who are the companies that “host” the plan for your organization.  These are companies like Fidelity, Vanguard, T. Rowe Price, Empower, Prudential, etc.  To make it easy to get in touch with your plan provider, please find the provider for your respective company below along with contact information on the web and via phone.

ADP

• On the web: https://www.mykplan.com
• By phone: 1-866-695-7526 (press 0 to speak with a Customer Service Representative)

American Funds

• On the web: https://www.myretirement.americanfunds.com/
• By phone: 1-800-421-9900

Ascensus

• On the web: https://my.vanguardplan.com/
• By phone: 1-866-794-2145

Empower Retirement

• On the web: https://www.empowermyretirement.com
• By phone: 1-800-338-4015
• Hours: Monday – Friday between 6 a.m. – 8 p.m. Mountain time, and Saturdays between 7 a.m. – 3:30 p.m., Mountain time

Fidelity Investments

• On the web: https://www.netbenefits.com/
• By phone: 800-835-5095
• Hours: Monday – Friday, 8:30 a.m.- 8:30 p.m., Eastern time

John Hancock

• On the web: https://myplan.johnhancock.com
• By phone: 800-395-1113

JP Morgan

• On the web: https://www.retirementlink.jpmorgan.com
• By phone: 855-576-7526

July

• On the web: https://www.julyservices.com
• By phone: 800-333-5859, Option 1

NWPS

• On the web: https://www.yourplanaccess.net/nwps/
• By phone: 1-888-700-0808

Paychex

• On the web: https://www.paychex.com/login
• By phone:  1-877-244-1771

Principal

• On the web: https://www.principal.com
• By phone:  800-547-7754

Slavic

• On the web: https://www.slavic401k.com
• By phone: 1-800-356-3009