Privacy Policy

401GO Privacy Notice

Last modified: 04/27/2026

1. Introduction

401GO (“401GO” or “we” or “us”) respects your privacy and is committed to protecting it through our compliance with this privacy notice.

This Privacy Notice (our “Privacy Notice”) describes the types of information we may collect, use, maintain, protect, disclose, or otherwise process about you when you visit the websites https://401go.com and all of its subdomains (including the client portal at https://app.401go.com, the “Website”) and/or use our retirement services, whether provided to you online or offline (our “Retirement Services”) and our practices for collecting, using, maintaining, protecting, disclosing, or otherwise processing that information. It also applies to information we may collect from you about your beneficiaries.

Our Retirement Services provide recordkeeping services for retirement plans offered by employers, handling day-to-day administrative tasks, such as processing enrollment, sending participant statements, and providing a web portal for participants to check balances and change their investments. Our Retirement Services work with third-party financial institutions (such as a bank, trust company, or brokerage), who is responsible for safely holding, securing, and maintaining records of the assets of retirement plan participants (each, a “Custodian”). The Custodian is also responsible for executing investment trades, handling transactions, and assisting with tax reporting requirements.

This policy applies to information we collect:

on our Website;
on or through our Retirement Services; and
in email, text, and other electronic messages between you and 401GO through any medium.

It does not apply to information collected by:

us through any other means, including on any other website operated by 401GO or any third-party (including our affiliates and subsidiaries);
us or any of our affiliates or subsidiaries related to your or any other individual’s employment or potential employment with us or as one of our employer customers; or
any third party (including the custodian of your account, or investment companies), including through any application or content (including fund information) that may link to or be accessible from or on the Website or Retirement Services.

Please read this Privacy Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website or Retirement Services. By accessing or using our Website or Retirement Services, you agree to this Privacy Notice. This Privacy Notice may change from time to time (see Changes to Our Privacy Notice). Your continued use of our Website and Retirement Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Notice periodically for updates.

2. Children Under the Age of 18.

Our Website and Retirement Services are not intended for children under 18 years of age. No one under age 18 may provide any information to or on the Website and Retirement Services. We do not knowingly collect Personal Data from children under 18. If you are under 18, do not use or provide any information on our Website and Retirement Services or on or through any of their respective features, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received Personal Data from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information directly from a child under 18, please contact us through the Contact Information below.

3. Information We Collect About You and How We Collect It.

Throughout this Privacy Notice, the term “Personal Data” means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. However, Personal Data does not include any deidentified or aggregated information.

Generally

We collect Personal Data from various sources, including:

directly from you when you provide it to us;
automatically as you navigate through or otherwise use the Website and/or Retirement Services;
information that we create about you as you use our Website or Retirement Services; and
from third parties, for example, our business partners and Custodians.

Information You Provide to Us

We collect the following types of Personal Data directly from you when you access or use our Website or Retirement Services: real name, home postal address, work and personal email address, mobile telephone number, social security number, financial information, birth date, records of investments purchased, obtained, or considered to be purchased or obtained. In addition, we also collect other types of information that you may provide when you fill out a form or through your correspondence with us.

The Personal Data we collect on or through our Website and Retirement Services may come through:

information that you provide by filling in forms on our Website or Retirement Services, including information provided at the time of registering to use our Website and Retirement Services. We may also ask you for information when you report a problem with our Website or Retirement Services;
if you contact us, records and copies of your correspondence (including email addresses); and
details of transactions you carry out through our Website and Retirement Services and of the fulfillment of your orders.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website or Retirement Services, we may use automatic data collection technologies to collect certain Personal Data about your interaction with our Website or Retirement Services, including information about your equipment, browsing actions, and patterns. This includes:

details of your visits to, and use of, our Website and Retirement Services. This includes: browsing history, search history, traffic data, location data, logs, referring/exit pages, date and time of your visit to our Website, error information, clickstream data, and other communication data and the resources that you access, use, or otherwise interact with on or through the Website or Retirement Services;
your general location (i.e., town, city, state, country);
Information about your computing device and internet connection, i.e., your IP address, operating system, device make and model, and browser type.

The information we collect automatically may include Personal Data, or we may maintain it or associate it with Personal Data we collect in other ways or receive from third parties. It helps us to improve our Website and Retirement Services and to deliver a better and more personalized service by enabling us to:

estimate our audience size and usage patterns;
store information about your preferences;
record your activities on our Website for analytics and debugging purposes;
customize our Website and Retirement Services according to your individual interests;
speed up your searches; and
recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. We only place non-essential cookies on your device with your consent. You may withdraw or change your consent at any time by clicking the “Cookies” link on the homepage and enabling or disabling each category of cookie. Our Website may use both session cookies and persistent cookies:
- Session Cookies. Each time you access the Website, a session cookie containing an encrypted, unique identifier is placed on your device. These session cookies allow us to uniquely identify you when you use the Website and allow us to maintain your login session and allow us to process your transactions. Session cookies are required to use the Website and are removed when you logout or close your browser window to the Website.
- Persistent Cookies. Persistent cookies that may contain a unique identifier are placed on your device when you access the Website. These cookies are used to track aggregate and statistical information about user activity, maintain your preferences, and provide you with targeted or behavioral advertising based on your activities on the Website. The amount of time these cookies remain on your device may vary, depending on the cookie.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain parts of our Website. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu. More information about our use of specific cookies and how long they remain on your device can be found by clicking the “Cookies” link on our Website and reviewing the specific cookies listed under each category of cookies.

Web Beacons. Pages of our Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit 401GO, for example, to count users who have visited those pages or screens or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
Website Interaction and Performance Monitoring Tools. Our Website may also use interaction and/or performance monitoring tools (sometimes called tracking scripts, analytics tools, session replay tools, or heatmap tools). These tools execute code in your web browser to help us collect data about your use of and interactions with the pages and content on our Website. This may include recording your mouse movements, keystrokes, navigation pathways, other actions that you take on our Website, and information automatically transmitted from your web browser to our Website such as information about your operating system, computer hardware, and browser preferences.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications on the Website are served by third-parties, including ad networks and servers, content providers, analytics providers, social media companies, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information.

By continuing to allow us to use any of the above described technologies, you hereby consent to our recording your mouse movements, keystrokes, navigation pathways, Website pages, use and other communications you may have with our Website (including information related to your access to any audio-visual materials available on or through the website), and other actions that you take on or through the website and our disclosure of such recorded information to third-party providers of such tools.

Information We Create About You

We may also create certain information about you. When we associate this information with other Personal Data about you, we consider this information to be Personal Data. This information includes: records of investments purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Information We Collect from Third Parties

We may collect Personal Data from third parties, including, for example, your employer and the custodian of your account. When we associate this information with other Personal Data about you, we consider this information to be Personal Data. This information includes: real name, home postal address, employee ID number, personal and work email address, home/work telephone number, social security number, financial information (including account balances, holdings, and transaction history), title, employer name, employment history, age, birthdate, citizenship, marital status, gender, records of investments purchased, obtained, or considered to be purchased or obtained.

4. How We Use Your Information.

We use information that we collect about you or that you provide to us, including any Personal Data:

to provide and personalize our Website and its content to you;
to provide you with Retirement Services and other information, products, or services that you request from us;
to support, develop, troubleshoot, and debug our Website, products, and services;
to create, maintain, customize, and secure your account with us;
to process your requests, purchases, transactions, and payments and prevent transactional fraud;
to provide you with notices about your account, including expiration and renewal notices;
to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses;
to personalize your Website experience;
to help maintain the safety, security, and integrity of our Website, Retirement Services, databases and other technology assets, and business;
for internal testing, research, analysis, and product development, including to develop and improve our Website, and to develop, improve, or demonstrate our Retirement Services;
auditing relating to a current interaction with you and concurrent transactions, including, but not limited to, counting advertising impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with any applicable specification and other standards;
detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
debugging to identify and repair errors that impair existing intended functionality;
to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
to notify you about changes to our Website or any products or services we offer or provide though them;
to allow you to participate in interactive features on our Website (such as purchasing, selling, or exchanging investments available in your retirement plan);
in any other way we may describe when you provide the information;
to fulfill any other purpose for which we have collected it; and
for any other purpose with your consent.

We may further anonymize or aggregate your Personal Data in accordance with applicable law such that it can no longer reasonably be used to identify you and use it without restriction.

5. Disclosure of Your Personal Data.

We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Notice. However, we may disclose anonymized or aggregated information about our users, and information that does not reasonably identify any individual, without restriction.

We may disclose Personal Data that we collect or you provide as described in this Privacy Notice:

to our subsidiaries and affiliates;
to a Custodian;
to contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Data confidential and use it only for the purposes for which we disclose it to them. These entities provide IT and infrastructure support services, and other similar services to us;
to a potential or actual buyer or other successor in the event of a planned or actual merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of 401GO’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by 401GO about our Website’s users is among the assets transferred;
to third-party cookie and other tracking technology providers for the purpose of providing analytics and cross-context behavioral advertising services to us;
to fulfill the purpose for which you provide it. For example, if you give contact information for a beneficiary, we may disclose your assets to them upon your death;
for any other purpose disclosed by us when you provide the information; and
with your consent.

We may also disclose your Personal Data:

to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
to enforce or apply our terms of use and other agreements, including for billing and collection purposes; and
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of 401GO, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

6. Choices About How We Use and Disclose Your Information.

We do not control the collection and use of your information collected by third parties described above in Disclosure of Your Information. When possible, these organizations are under contractual obligations to use this data only for providing the services to us and to maintain this information strictly confidential. These third parties may, however, aggregate the information they collect with information from their other customers for their own purposes.

In addition, we strive to provide you with choices regarding the Personal Data we have collected about you. We have created mechanisms to provide you with control over your Personal Data:

Tracking Technologies. We may use certain tracking technologies that may record your activities on our Website and your other online activities, and such recordings may be disclosed and processed by third-parties who provide such technologies. This helps us understand our users and the use of our Website. You may disable these technologies through our cookie consent manager, which you may access by clicking the “Cookies” link on the bottom of any page of our Website and disabling our use of analytics cookies and similar technologies. You may also set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent, however, if you disable or refuse cookies in this manner, please note that some parts of our Website may then be inaccessible or not function properly. If you do not disable these technologies, you hereby consent to our use of your Personal Data and our recording and disclosure to third-party cookie providers of your activities on our Website in this way.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can learn more about interest-based advertisements and your opt-out rights and options from members of the Network Advertising Initiative (“NAI”) on its website (www.networkadvertising.org) and from members of the Digital Advertising Alliance on its website (www.aboutads.info).

7. Accessing, Correcting, and Deleting Your Personal Data.

You can review and change your Personal Data by logging into the Website and visiting your account profile page.

You may also send us an email at privacy@401go.com to request access to, correct or delete any Personal Data that we have collected about you. We cannot delete your Personal Data except by also deleting your user account. We may not accommodate a request to change or delete your Personal Data if we believe the change or deletion would violate any law or legal requirement or cause the information to be incorrect.

8. Do Not Track Signals.

We also may use automated data collection technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).

9. Global Privacy Control.

Some web browsers and browser extensions support Global Privacy Control (“GPC”), a signal that communicates your preference to opt out of certain online tracking. We honor GPC signals. If your browser sends a GPC signal, we will treat it as a request to opt out of non-essential cookies and similar tracking technologies, and we will not set such cookies on your device. Browsers such as Brave and Safari provide built-in GPC controls. For more information about GPC, visit https://globalprivacycontrol.org. Data Security.

We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we have implemented measures to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our Website or Retirement Services. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures deployed on the Website or on or through our Retirement Services.

10. Consent to Processing of Personal Data in the United States.

Our Website and Retirement Services are offered and available to users who reside in the United States or any of its territories or possessions. We make no claims that the Website or Retirement Services are accessible or appropriate outside of the United States. If you access the Website or Retirement Services outside of the United States, you do so on your own initiative and are responsible for compliance with local laws.

We are based in the United States and our servers are located in the United States. If you are not a resident of the United States, we may send and store your Personal Data outside of the country where you reside or are located, including to countries that may not or do not provide an equivalent level of protection for your Personal Data. Your Personal Data may be processed and stored in the United States and federal, state, and local governments, courts, or law enforcement or regulatory agencies in the United States may be able to obtain disclosure of your information through the laws of the United States. By using our Website and Retirement Services, you represent that you have read and understood the above and hereby consent to the storage and processing of Personal Data outside the country where you reside or are located, including in the United States.

If you are not a resident of the United States or otherwise access or use our Website or Retirement Services outside of the United States, your Personal Data is transferred by 401GO to another country only if it is required or permitted under applicable data protection law and provided, however, that there are appropriate safeguards in place to protect your Personal Data. To ensure your Personal Data is treated in accordance with this Privacy Notice when we transfer it to a third party, 401GO uses Data Protection Agreements between 401GO and all other recipients of your Personal Data.

11. Changes to Our Privacy Notice.

We may change this Privacy Notice at any time. It is our policy to post any changes we make to our Privacy Notice on this page with a notice that the Privacy Notice has been updated on the Website’s home page. If we make material changes to how we treat our users’ Personal Data, we will notify you by email to the primary email address specified in your account and/or through a notice on the Website’s home page. The date this Privacy Notice was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Privacy Notice to check for any changes.

Your continued use of our Website or Retirement Services following the posting of changes constitutes your acceptance to such changes.

12. Contact Information.

If you have any questions, concerns, complaints, or suggestions regarding our Privacy Notice or the ways in which we collect and use your Personal Data described in this Privacy Notice, have any requests related to your Personal Data pursuant to applicable laws, or otherwise need to contact us, you may contact us at the contact information below or through the “Contact” page on our Website.

401GO
75 W Towne Ridge Pkwy
Sandy, UT 84070
United States
(801) 214-2125
email: privacy@401go.com