Privacy Policy

Last updated: September 27, 2026

Overview

WealthPath ("we", "us", or "our") is a personal finance dashboard that helps you track your net worth, manage budgets, monitor investments, and organize tax documents. We take your privacy and data security seriously. This policy explains what data we collect, how we use it, and the choices you have.

Financial Data We Collect

When you link a financial account through our integration with Plaid, we receive:

  • Account balances and account metadata (name, type, last four digits of account number)
  • Investment holdings and securities positions
  • Transaction history and merchant information
  • Institution name and connection status

Plaid facilitates the connection between your financial institution and WealthPath. When you link an account, you authenticate directly with your bank or brokerage through Plaid's secure interface — we never see or store your banking login credentials. For details on how Plaid handles your data, see the Plaid Privacy Policy .

How We Protect Your Data

  • Encryption at rest: Plaid access tokens are encrypted with AES-256-GCM before being stored in our database. Decryption occurs only server-side when needed to sync your data.
  • Encryption in transit: All data is transmitted over HTTPS/TLS. API calls to Plaid use industry-standard encryption.
  • Row-level access control: Your financial data is isolated to your account. No other user — and no unauthorized party — can access your accounts, balances, holdings, or transactions.
  • Minimal credential exposure: Plaid API credentials (Client ID and Secret) are stored as server-side secrets and never exposed to the browser or included in client-side code.
  • Access monitoring: We log data access events and review for unauthorized activity.

How We Use Your Data

  • Calculate and display your net worth, portfolio allocation, and investment performance
  • Categorize and analyze transactions for budgeting and cash flow insights
  • Organize tax documents and identify potential tax deductions
  • Provide AI-powered financial insights and recommendations

We do not sell your data to third parties. We do not use your financial data for advertising.

Third-Party Services and AI Processing

WealthPath integrates with several third-party services to provide its features. When you use these features, certain data is shared with the providers described below.

  • AI and LLM Providers (Google, OpenAI, Anthropic): When you use AI-powered features — such as the Financial Advisor chat, tax estimation, alternative investment valuation, collectible image generation, and tax document data extraction — relevant details about your transactions, holdings, and documents are sent to our AI providers to generate insights and analysis. For example, item names, categories, and descriptions of your alternative investments are sent to generate valuations and images. Transaction and income data are sent to estimate taxes. We do not send your full account credentials or Plaid access tokens to AI providers.
  • Base44 Payments (powered by Wix): When you purchase a Premium subscription, your payment is processed by Wix's checkout system. Wix collects your name, email, billing address, and payment details on its secure checkout page — we do not see or store your full card number. We receive only a confirmation of payment and your email address to grant your Premium access. See the Wix Privacy Policy .
  • Google Drive (user-connected): You may optionally connect your own Google Drive account to back up tax documents. When connected, tax document PDFs are uploaded directly to your own Google Drive — the data stays in your Google account and is governed by Google's privacy policy. We store only the file link, not a copy of the file.
  • Google Sheets (user-connected): You may optionally connect your own Google Sheets account to import portfolio price data. When connected, we read spreadsheet data you select to update your investment valuations. This access is governed by Google's API scope and your own Google account permissions.
  • Finnhub: We may use Finnhub's market data API to retrieve publicly available stock prices and financial data for display in your investment dashboard. No personal data is sent to Finnhub — only public ticker symbols are queried.

Each third-party provider has its own privacy policy governing how they handle data. We encourage you to review their policies. We share only the minimum data necessary to provide the requested feature.

Cookies and Advertising

WealthPath displays advertisements to non-premium users through Google AdSense. Premium subscribers see no ads and have no advertising cookies set.

Google, as a third-party vendor, uses cookies (including the DoubleClick DART cookie) to serve ads to our users based on their prior visits to our site and other sites on the internet. These cookies allow Google and its partners to serve ads based on your visit to this site and/or other internet sites.

  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other internet sites.
  • You may opt out of personalized advertising by visiting Google Ads Settings .
  • You may also opt out of third-party vendors' use of cookies for personalized advertising by visiting aboutads.info/choices .

For more information about how Google uses data when you use our site, please see Google's Privacy & Terms — How Google uses information from sites that use its services .

We also use local storage and cookies to maintain your login session, remember your preferences (such as theme and dashboard layout), and improve site functionality. These first-party cookies are essential for the app to function and are not used for advertising.

Your Choices — Data Deletion

You can disconnect any linked account at any time from the Linked Accounts page. Disconnecting an account:

  • Invalidates the access token with Plaid, preventing further data retrieval
  • Permanently deletes all associated accounts, holdings, and transactions from our database
  • Removes the connection record entirely

You may also request complete deletion of your account and all associated data by contacting us. We will process such requests within 30 days.

Data Retention

We retain your financial data only for as long as your account is active and you maintain linked connections. When you disconnect an account or delete your account, the associated financial data is deleted from our systems. Transaction data may be retained in encrypted backups for up to 90 days for disaster recovery purposes.

Security Incident Response

In the event of a security incident that compromises the security, integrity, or confidentiality of your data, we will investigate promptly and notify affected users and Plaid within 12 hours of becoming aware of the incident, in accordance with our obligations under Plaid's Developer Policy.

Contact

For privacy questions, data deletion requests, or any other questions or issues, please visit our Support page.