PRIVACY POLICY

Last Updated: October 5, 2026

Welcome to the Privacy Policy of Wealth Architect, Inc. (“we”, “us”, or “our”). We’re here to provide our AI-powered financial planning tools that help our users achieve their financial goals.

This Privacy Policy describes how we handle your personal information that we collect through and in connection with our website at https://www.wealtharchitect.ai/, our applications, and any other website or service that we own or control and that links to this Privacy Policy (collectively, the “Service” or “Services”). This Policy applies to our website visitors, users of our applications, and other individuals who interact with us.

While we hope you will read our Privacy Policy for complete information, below is a high-level snapshot of how we collect, use, and disclose your personal information.

Personal Information We Collect

Information you provide to us:

• Profile information, such as your first and last name, email address, phone number, date of birth, and the password you use to register for and access and use our Services.
• Demographic information, such as your marital status, household size, employment status, state of residence, and tax filing status.
• Financial information, such as your risk tolerance, investment experience, primary financial goals, target retirement age, life expectancy, and target savings amounts. Depending on how you use our Service, we may also collect your historical data such as financial account data that you authorize us to access through third-party services, as well as income records.
• Connected financial accounts. When you choose to connect an account, providers such as Plaid and Array Financial Links facilitate the connection and supply the financial information you authorize, which may include account and institution details, balances, transactions, income, liabilities, holdings and investment activity. Their handling of information is also described in the notices presented during account linking. You may disconnect a bank or other financial institution through the Service. Once the connection provider confirms disconnection, we stop syncing through that connection and initiate deletion of the account and transaction history imported through it from our active databases. Deletion is processed asynchronously.
• Payment information. Payment processors, including Stripe for web purchases and Apple for App Store purchases, collect the payment credentials needed to complete your transaction. We receive billing contact information, payment status and limited payment-method details as applicable to the purchase channel, but not your complete payment card number or card security code through these payment flows.
• App Store and subscription information. We use a subscription paywall provider to display subscription offers and manage entitlements. Apple and this provider provide purchase and transaction information, such as product and transaction identifiers, subscription and trial status, purchase and renewal dates, price and currency, expiration dates, cancellations, billing issues and refunds. We associate these records with your Wealth Architect account using account identifiers to administer subscriptions, restore purchases, reconcile payments and measure subscription performance.
• Communications that we exchange with you, including when you contact us with questions, feedback, or otherwise. When you use messaging features, our messaging service providers process your phone number, message content and AI-generated responses, which may include information from your connected financial accounts.
• User-generated content, such as notes, prompts, documents, or other user-generated content that you upload or otherwise provide through the Services. This also includes content that you upload or link to the Services via any third-party services you choose to link to our Services.
• Marketing information such as your preferences for receiving our marketing communications and details about your engagement with them.
• Other information that you choose to provide, not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Where you provide us with the personal information of third parties (such as your friends or other contacts) or use our Services while communicating with such third parties, it is your responsibility to inform them about the processing of their personal information in accordance with this Privacy Policy, and to confirm that they have given their permission.

Automatic data collection: We and our service providers may automatically log and combine information about you, your computer or mobile device, and your interactions over time with the Services, online resources, and our communications, such as:

• Location data, including the general area from which your device accesses our Services based on information like its IP address. We do not collect your precise geolocation.
• Device data, including your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, and general location information such as city, state, or geographic area.
• Usage data, including pages, screens and/or features you viewed, accessed and/or used, how long you spent on a page, screen and/or feature, the website you visited before browsing to the Services, navigation paths between pages or screens, information about your activity on a page, screen and/or feature, access times, duration of access, and whether you have opened or otherwise engaged with our communications, such as our marketing emails, or clicked links or files within them.

We use the following tools for automatic data collection for analytics and product improvement purposes:

• Cookies, which are text files that websites store on a visitor‘s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
• Product analytics tools, which are used to measure use of the Service, assess performance and diagnose errors. Records may include account and device identifiers, session identifiers, feature interactions, diagnostics and subscription-related events. For supported AI interactions, diagnostic records may also include prompts, responses and relevant tool inputs and outputs after automated redaction of selected sensitive fields. These records may remain linked to your account; redaction does not make all records anonymous. We may link analytics records with customer-support records to investigate issues and support your account.
• Marketing diagnostic tools, which are used to understand interactions with our public marketing pages and diagnose errors. Product analytics and privacy-masked session replay are on by default. Replay helps us reconstruct how a visitor navigates a page; text and inputs are masked, forms are blocked, and console logs and network request/response bodies are not recorded. You can turn replay off or on using Privacy choices in the footer of https://wealtharchitect.ai. Existing replay opt-outs are respected, and Global Privacy Control keeps replay off. Turning replay off does not disable product analytics. Your replay preference is saved in a cookie when browser storage is available.

Information we obtain from other sources:

• Other Users. We may receive your personal information from other users of our Services.
• Third-party login information. When you link, connect, or log in to our Services with a third-party service (e.g., Google, Apple, etc.), you may direct the service to send us information controlled by that service or as authorized by you via your privacy settings on that service.
• Social media. We may maintain pages on social media platforms, such as Instagram and other third-party platforms. When you visit or interact with our pages on those platforms, you or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
• Other sources. We may obtain personal information from other third parties. This can also include data you choose to send to the Service from your third-party services via integrations that we support.

How We Use Personal Information

We use personal information for the following purposes or as otherwise described at the time of collection:

To provide our Services. This includes:

• Administering, hosting, and operating our Services. As described in “Personal Information We Collect”;
• Communicating with you and responding to any inquiries you may have; and
• Analyzing your use of our Services to allow us to evaluate and improve the Services.

For research, development, benchmarking, and improving our Services. We may use personal information internally to analyze and improve the Services, identify trends, and operate and expand our business activities. We may also create aggregated, anonymized, or other de-identified statistics, which we may use for lawful business purposes, including for analytics, forecasting, and strategic planning. For example, we may use de-identified personal information to train and improve the AI models that power our Services. AI features may be declined where the Service offers that choice; doing so may limit the corresponding feature.

For marketing and advertising. We and our advertising partners may collect and use your personal information for marketing and advertising purposes, including:

• Email. We or our advertising partners may from time-to-time send you direct marketing emails as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email. You may opt out of our marketing emails as described in the “Opt out of marketing communications” section below.
• Interest-based advertising. We engage our advertising partners to display ads around the web. These companies may use cookies and similar technologies to collect information about your interaction over time across our Services, our communications, and other online services, and use that information to serve online ads that they think will interest you. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. This information that we share does not include data you provide to us directly through our Service like your chat logs and documents. You can learn more about your choices for limiting interest-based advertising in the “Online tracking opt-out” section below.
• Internet-based advertising measurement. We use attribution providers to associate app installs and permitted conversion events with marketing campaigns. Depending on your choices, including Apple’s App Tracking Transparency permission, and the platform, this may involve app, device and account identifiers, campaign information and subscription conversion data. Apple’s App Tracking Transparency permission, where applicable, is separate from choices about first-party product analytics and session replay.

For compliance and protection. We may use personal information to comply with legal obligations, including to enforce any applicable terms and conditions, defend against legal claims or disputes, support account deletion and retention workflows, protect the security and integrity of our Services, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.

AI safety and reports. We may process information in AI interactions and reports of problematic responses to investigate safety issues, prevent misuse and comply with law. AI features are not emergency services or mental-health treatment. If there is an immediate danger, contact emergency services; in the United States, call or text 988 for suicide and crisis support.

How We Disclose Personal Information

We may disclose personal information to the following individuals or entities and as otherwise described in this Privacy Policy or at the time of collection:

Service providers. Companies and individuals that provide services on our behalf or help us operate the Services or our business (such as hosting, information technology, customer support, email delivery, financial data aggregation, and analytics services). We may also disclose your personal information to third-party providers of AI technologies, who will use your personal information strictly to support our Service. We do not permit such third-party providers of AI technologies to use your personal information to develop, improve, train, or provide their AI technologies for the benefit of their other customers.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, our business (including, in connection with a bankruptcy or similar proceedings).

Other third parties at your direction. We may share your personal information with third parties when you ask us to, authorize us to, or otherwise choose to use features or services that require such sharing.

Shared households and messaging. If you join or create a shared household, other authorized household members may access information made available within that household. Information you send in a group conversation may also be visible to its participants. Review the participants and sharing settings before providing personal information. Removing access does not remove copies already received by others.

Your Privacy Rights and Choices

Access or update your information. If you have registered for an account with us, you may review and update certain personal information in your account profile by logging into the account.

Delete your account. If you have registered for an account, you may request deletion through the Settings area of the Service or by contacting us. Household owners should be aware that deleting a shared household account may affect its other members; members may contact us about their individual rights. We delete or deidentify information subject to exceptions permitted by applicable law, including necessary security, fraud-prevention, legal-compliance, recordkeeping and dispute-resolution purposes. We restrict retained information to those purposes. Account deletion does not automatically cancel an Apple-managed subscription; cancel that subscription through Apple.

Opt out of marketing communications. You may opt out of marketing-related communications by following the opt-out or unsubscribe instructions in the communications you receive from us or by contacting us as provided in the “How to Contact Us” section below. You may continue to receive Services-related and other non-marketing communications.

Opt out of online tracking. There are a number of ways to opt out of having your online activity and device data collected through our Services, which we have summarized below:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.
• Blocking advertising ID use in your mobile settings. Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
• Using privacy plug-ins or browsers. You can block our Services from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, DuckDuckGo, Ghostery or uBlock Origin, and configuring them to block cookies/trackers.
• Platform opt-outs. The following advertising partners offer opt-out features that let you opt out of use of your information for interest-based advertising:
  • Google
  • Facebook
  • LinkedIn
  • Microsoft
• Advertising industry opt-out tools. You can also use these opt-out options to limit use of your information for interest-based advertising by participating companies:
  • Digital Advertising Alliance
  • Network Advertising Initiative

Some browser or device choices apply only to that browser or device and may need to be renewed if cookies or settings are cleared. Where required by law, we also apply an opt-out to your account or other information that we can associate with you. Browser and industry tools do not replace the privacy rights described above.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com. Global Privacy Control is a different signal: it disables session replay on our public marketing website. Where applicable law requires us to treat a recognized opt-out preference signal as a request to opt out of sale, sharing or targeted advertising, we honor that signal for the applicable processing.

Additional U.S. privacy rights. Depending on your residence and the law applicable to the information, you may have rights to confirm processing, access and obtain a portable copy of personal information, correct inaccuracies, request deletion, and opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling. You may also have rights concerning sensitive information, authorized agents and an appeal of a denied request. We will not unlawfully discriminate against you for exercising these rights. To submit a request, contact privacy-compliance@wealtharchitect.ai. We may request information reasonably necessary to verify your identity or authority; an opt-out request will not require account creation. If we deny a request, we will explain applicable appeal rights and how to exercise them.

Other Sites and Services

Our Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services.

Security

We use reasonable organizational, technical, and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration, and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.

Retention of Personal Information

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfil the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

Children’s Privacy

Our Services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through our Services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Where we do so, we will update the date of this Privacy Policy and post it on the Services. If we make material changes to this Privacy Policy, we will let you know.

How to Contact Us

If you have any questions or concerns, you can reach us by email at privacy-compliance@wealtharchitect.ai.