I AM Wealth ("we", "us", "our") provides an AI-powered Generational Wealth Operating System (the "Service"). This Privacy Policy explains what we collect, how we use it, who we share it with, and the rights you have over your data. It applies to every user of the Service worldwide.
1. Information We Collect
1.1 Account & Identity
- Name, email, password hash, profile photo, authentication tokens.
- Optional government-issued identifiers only when required to verify accounts you connect (e.g. last four of a bank account).
1.2 Financial Data You Enter
- Debts, balances, income, expenses, goals, milestones, scenarios, and notes you type into phase tools.
1.3 Financial Data Imported Through Plaid
If you choose to link a bank, brokerage, lender, or payroll account, we retrieve information through Plaid Inc. ("Plaid"). This may include account names, balances, transactions, statements, account & routing numbers, account holder identity, and employment / income data. You authorize Plaid to act on your behalf to access this data from your institutions. Plaid's collection, use, and disclosure of your information is governed by the Plaid End User Privacy Policy.
1.4 Device & Usage
- IP address, device type, browser, OS, referrer URL, pages viewed, actions taken, timestamps.
- Cookies and similar storage used for authentication and preferences.
2. How We Use Your Information
- Deliver, personalize, and improve phase tools, projections, and AI coaching.
- Auto-populate balances, transactions, and income in the Service from connected accounts.
- Trigger custom milestone alerts you configure.
- Maintain account security, prevent fraud, and enforce our Terms.
- Communicate with you about your account, security, and product changes.
- Meet legal, tax, regulatory, and audit obligations.
We do not sell your personal information. We do not use your Plaid-derived data for advertising, marketing to third parties, or unrelated analytics.
3. How We Share Your Information
- Plaid — to enable secure account linking. See §1.3.
- Cloud infrastructure providers (Supabase, Cloudflare) — to host and serve the Service under written data-processing agreements.
- Payment processors (Stripe) — to process subscription payments.
- Legal & safety — to comply with law, court orders, or protect rights, property, or safety.
- Successors — in a merger, acquisition, or asset sale, subject to this Policy.
4. Data Retention
We retain account and financial data for as long as your account is active. When you delete your account or revoke a Plaid connection, we delete or de-identify the associated data within 30 days, except where retention is required by law (e.g. tax, anti-money-laundering) or for legitimate fraud-prevention purposes.
5. Security
We encrypt data in transit (TLS 1.2+) and at rest (AES-256). Plaid access tokens are stored encrypted, scoped per user via row-level security, and never exposed to the browser. See our Security Overview for more.
6. Your Rights
- Access, correct, export, or delete your personal data.
- Withdraw consent and disconnect any linked account at any time.
- Object to or restrict certain processing, and lodge a complaint with a supervisory authority (EEA/UK residents).
- CCPA/CPRA rights (California residents): know, delete, correct, limit, and opt out of sale/share — we do not sell or share for cross-context behavioral advertising.
Submit requests via Data Deletion or email privacy@iamwealth.app.
7. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from children.
8. International Transfers
Your data may be processed in the United States and other countries with different data-protection laws. We rely on Standard Contractual Clauses and equivalent safeguards where required.
9. Changes
We will post material changes here and, where appropriate, notify you by email at least 14 days before they take effect.
10. Contact
I AM Wealth · Privacy Office · privacy@iamwealth.app