Privacy Policy

Last updated: April 2026

Wealth AI ("we", "our", "the service") is a personal portfolio tracking tool. We take your financial privacy seriously. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

• Account data: Your email address and a hashed password (we never store passwords in plain text).
• Portfolio data: Wealth manager names, performance figures, and asset allocation data you enter or upload.
• Uploaded documents: PDF quarterly reports you upload for AI extraction. These are processed and then discarded — we do not store the raw PDFs.
• Usage data: Standard server logs (IP address, timestamps, page requests) for security and debugging.

2. What We Do Not Collect

• We do not collect bank account numbers, card details, or brokerage login credentials.
• We do not sell your data to third parties.
• We do not use your data for advertising.

3. How We Use Your Data

• To provide the portfolio tracking service.
• To process uploaded documents via AI extraction (OpenAI API). Extracted data is stored in your account; raw documents are not retained.
• To send account-related emails (password reset, security alerts) if you opt in.

4. Data Storage & Security

Your data is stored on secure servers. Passwords are hashed using bcrypt. JWT tokens are used for authentication with 30-day expiry. We use HTTPS for all data in transit.

5. Third-Party Services

• OpenAI: Document text is sent to the OpenAI API for extraction. OpenAI's privacy policy applies to this processing. We do not send your name or account details to OpenAI.

6. Your Rights

• Access: You can view all your data from the Account page.
• Export: You can export your portfolio data at any time.
• Deletion: You can permanently delete your account and all associated data from the Account page. Deletion is immediate and irreversible.
• Correction: You can edit or delete any data you have entered.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all data is permanently removed within 24 hours. Server logs are retained for 30 days for security purposes.

8. Cookies

We use localStorage (not cookies) to store your session token and UI preferences (language, theme). No tracking cookies are used.

9. Changes to This Policy

We may update this policy. We will notify you of significant changes via email if you have an account.

10. Contact

Questions about your data? Contact us at max@adhdmax.ai

Wealth AI is operated by ADHDMax.ai