Privacy & Security Policy

1. Introduction

This Privacy & Security Policy explains how WealthPulse (“we,” “us,” “our”) collects, uses, protects, and shares your information when you use our website and applications (the “Platform”). By using WealthPulse, you agree to the practices described here.

2. Information We Collect

Account information: your name, email address, and password (passwords are encrypted and never stored in readable form).

Financial information you provide: budgets, transactions, debts, goals, investment holdings, and net-worth entries you add manually.

Connected account data: when you link a financial institution, transaction history and account balances retrieved through our partner Plaid.

Payment information: processed entirely by Stripe. We never see or store your full card number.

Usage data: pages visited, features used, and session activity, collected to improve the product.

3. 🔒 We Never See Your Bank Login Information

When you connect your bank account, your login credentials are never stored by WealthPulse. Instead, your sensitive information is sent directly to Plaid, our trusted account-connection partner. Your username and password are exchanged only between you and your bank: we never see them, we never store them, and we don't ever have access to them.

Once your bank verifies your identity, Plaid receives a secure, encrypted token. That token is what allows WealthPulse to view your transaction data. It does not give us the ability to access your bank login.

Learn more about Plaid's security practices →

4. What We Associate With Your Identity

The only profile details we tie directly to your identity are your name, email, and subscription status. Any financial data you add or import is stored encrypted, is never sold or shared for advertising, and is used only to power the features you use. You can delete this data at any time.

5. How We Use Your Information

To provide and operate the Platform's features; to generate AI-powered analysis and insights; to process your subscription and send transactional emails (receipts, trial reminders, support replies); and to improve, secure, and troubleshoot the service. We do not sell your personal or financial information to third parties.

6. How Your Data Is Protected

Encryption in transit and at rest: all traffic is served over HTTPS/TLS, and data is stored in an encrypted database.

Bank tokens encrypted: access tokens for linked accounts are encrypted with AES-256 before storage.

Strict access controls: row-level security ensures you can only access your own data; one user can never see another's.

Trusted infrastructure: we use industry-leading providers: Supabase (database & authentication), Vercel (hosting), and Stripe (payments).

Security safeguards: rate limiting, bot protection, and security headers protect against abuse and common attacks.

7. AI Analysis

Our AI tools use a third-party provider (Perplexity) to generate market analysis. When you request an analysis, the ticker or portfolio details you submit are sent to that provider to produce a response. We do not send your name, email, bank credentials, or account numbers to the AI provider. AI output is for informational and educational purposes only and is not financial advice.

8. Third-Party Service Providers

We share limited data only as needed with: Plaid (account connections), Stripe (payments), Supabase (data storage & authentication), Vercel (hosting), Resend (transactional email), Perplexity (AI analysis), and Microsoft Clarity (anonymized usage analytics). Each is bound by its own privacy and security commitments.

9. Your Rights and Choices

Access & update: view and edit your information anytime in your account settings.

Disconnect accounts: unlink any financial institution at any time, which revokes our access token.

Delete your data: request account deletion by emailing support@wealthpulse.tech; we will remove your personal data except where retention is legally required.

Cancel anytime: manage or cancel your subscription from your account settings.

10. Data Retention

We retain your information for as long as your account is active. AI generation history is automatically deleted after 7 days. When you delete your account, we remove your personal and financial data within a reasonable period, except where retention is required by law.

11. Cookies and Tracking

We use essential cookies to keep you logged in and remember your preferences (such as your theme choice), and anonymized analytics (Microsoft Clarity) to understand how the Platform is used. We do not use advertising trackers.

12. Children's Privacy

WealthPulse is not intended for anyone under 18, and we do not knowingly collect information from minors.

13. Changes to This Policy

We may update this policy from time to time. When we do, we'll revise the Effective Date above. Continued use of the Platform after changes take effect constitutes acceptance.

14. Contact Us

Questions about privacy or security? Email support@wealthpulse.tech.