Privacy Policy

1. What we collect

• Account data: email and authentication identifiers.
• Profile & portfolio data you enter: financial profile, assets, liabilities, entities, scenarios, audit events.
• Usage data: pages visited, features used, AI prompts and responses (to operate and improve the service).
• Connected accounts (not currently offered): bank and brokerage linking is not available at this time, and we do not receive any data from your financial institutions. If and when we enable it, and only if you choose to connect an account and give consent, we would receive: account names, masked account numbers, types and balances; transaction history (date, amount, merchant, category); and debt details for credit cards, student loans and mortgages (balance, APR, minimum payment, due date). We would never receive your bank username or password, and the connection would be read-only — we cannot move money. You would be able to disconnect any institution at any time, which deletes the data we cached for it, and each consent you give would be logged (institution, data categories, date).

2. How we use it

• Operate the Platform and provide the features you request.
• Personalize strategies, scores, and AI responses.
• Send transactional notifications you have enabled.
• Improve the Platform and diagnose problems.
• Comply with legal obligations.

We do not sell your personal data. We do not use your financial profile to train third-party general-purpose models.

3. Processors

We rely on trusted infrastructure providers to run the Platform, including managed database and authentication, AI model gateways (for strategy generations), and payment processing (Stripe) for memberships. These providers process data on our behalf under their own security and privacy commitments. Bank and brokerage aggregation is not currently offered; if we enable it in future, we will identify the provider here before any account can be connected.

4. Security

Data is stored in a managed Postgres database with row-level security scoped to your user identity. Transport is encrypted in transit. No system is perfectly secure — you are responsible for safeguarding your credentials.

5. Retention

We retain your data while your account is active. You may request deletion of your account and associated data at any time by contacting us.

6. Your rights

Depending on your jurisdiction (including GDPR/UK-GDPR and CCPA/CPRA) you may have rights to access, correct, delete, port, or restrict processing of your personal data. Contact us to exercise these rights.

7. Cookies & local storage

We use browser storage for session, preferences, and offline caching (PWA). We do not use third-party advertising cookies.

8. Children

The Platform is not directed to children under 18 and we do not knowingly collect their data.

9. Changes

We may update this policy. Material changes will be surfaced in the app.

10. Contact

For privacy requests, deletion, or any question about this policy, email support@otherpeoplesmoney.ai.