← Back
Terms · Privacy · Disclosures

Privacy Policy

Last updated: 2026-10-15

This version has not yet been reviewed by counsel and may be updated. Material changes are announced in the app and by email.

This policy explains what WealthTIP LLC ("WealthTIP," "we," "us," or "our") collects when you use WealthTIP, who else sees it, and what you can do about it. It covers the WealthTIP application - the signed-in product and the pages served with it. Our separate marketing site is not covered by this policy and never receives your financial information. Our Terms of Service govern your use of the service itself.

1. What we collect and why

Your account. Your email address, your name, and whether you use WealthTIP as an individual or as a professional. When you register with a password we also ask for your date of birth, to confirm you are eighteen or older, and we store it encrypted. If you sign in with Google instead, we do not currently collect a date of birth.

Profile picture (optional). If you add a profile picture, we keep a resized copy of it, and the details embedded in the photo, such as the camera and the place it was taken, are removed when you upload it. As an individual, your picture is shown to you, and to a professional only while you have an active connection with them. As a professional, your picture is shown publicly with your profile. You can change or remove it at any time in Settings.

Financial information you enter or link. Accounts and balances, transactions, budgets and categories, goals, and the answers you give in the coverage questionnaire. You may type this in yourself or link an account through our bank-aggregation provider.

Documents you exchange with a professional. Where the secure document vault is available to you, your browser encrypts each file before it is uploaded. We store the encrypted file and the routing information needed to deliver it, and we do not hold a key that can read it on its own.

Messages. The messages you exchange with a professional you are connected to, and the meetings you book or complete with them.

Professional profile and credential information. If you use WealthTIP as a professional, the profile you publish, and the licence type and number you give us so we can check it against the issuing authority. If a professional you are connected to writes private notes about you, those notes belong to them and are not shown to you.

Support and feedback. What you write to us, and any file you attach.

Security records. Sign-in and other security events, together with the IP address they came from, written to an audit log.

Payment linkage. An identifier for your customer record at Stripe, and, for professionals, an identifier for your Stripe payout account. We never receive or store your card number. Card details are entered directly into Stripe's own payment form.

Free trial record. When you start a free trial, we keep a one-way coded form of your email address, so the free trial is given once per person. It is made from the address with any "+" tag removed and, for Gmail, without dots, so those spellings count as one address.

2. Who processes it

We use a small number of service providers. Each receives only what it needs to do its job.

  • Quiltt - bank aggregation. Quiltt receives your email address, your name, and our identifier for you. Your bank credentials pass from your browser directly to Quiltt's connector and never travel through WealthTIP.
  • Stripe - subscription billing and payments. Stripe receives your email address and our identifier for you, and you enter card details on Stripe's own hosted pages, not in WealthTIP.
  • Amazon Web Services - email delivery, file storage and key management, and hosting. Transactional email we send you passes through Amazon SES. Where the secure document vault is available to you, the encrypted vault files are stored in Amazon S3. Files you attach to support or feedback messages, images uploaded to published articles, and profile pictures are stored on our own servers instead, with copies in the backups we keep in Amazon S3; a support attachment also passes through Amazon SES when it is emailed to our support inbox.
  • Google - sign-in only, and only if you choose to sign in with Google. We send Google no financial information. The sign-in request itself does carry which portal you chose and, when you are connecting Google to an account you already have, our identifier for that account. Google necessarily learns that you have a WealthTIP account.
  • Have I Been Pwned - checking a new password against known breached passwords. Only the first five characters of a one-way hash of the password are sent, which identifies neither you nor the password.
  • YouTube and Vimeo - embedded video, where a page includes one. YouTube videos are embedded through YouTube's cookieless host. Vimeo does set its own cookies, and we ask it not to track viewers. These embeds load from your browser; nothing is sent to them from our servers.

No third-party artificial-intelligence provider receives any of your information. We do not send your data to an outside AI service and we do not use it to train any model.

WealthTIP loads no advertising or analytics trackers of its own. There is no Google Analytics, no advertising pixel, and no third-party session-recording or product-analytics tool in the application. One thing to know: images and video inside an article published by a professional are fetched from whichever host that author chose, so that host can see that a browser requested the file.

Booking a meeting is different, and worth stating separately. When you book a meeting with a professional, the scheduling page is that professional's own Cal.com account, not ours. Your email address, our identifiers for you and for that professional, and whether the session is free or paid are sent to it so the booking can be made.

3. What we do not do

We do not sell your personal or financial information. We do not share it without your consent, and we do not use it to target you with advertising.

4. Cookies and browser storage

  • Sign-in. Your sign-in tokens are kept in your browser's local storage, not in a cookie.
  • Google sign-in. One short-lived cookie, wt_oauth_v, exists only while a Google sign-in is in progress. It lasts ten minutes, is not readable by scripts, and carries no identity - only a random value that ties the start and the end of the sign-in.
  • Payments. WealthTIP loads no Stripe script; checkout and the billing portal are Stripe-hosted pages, where Stripe sets its own cookies.
  • Embedded video. A Vimeo embed sets Vimeo's own cookies.

Your browser also holds working copies of things you are in the middle of, so a reload does not lose them. That includes your coverage answers such as dependants, housing, vehicle and self-employment, and the members of your household view, along with layout choices such as which sections you have collapsed. Your income is not among them: it is derived on our servers from the accounts and transactions you connect, and your browser does not keep a copy. Signing out clears all of that.

A few things are kept on the device on purpose, because none of them identifies you and clearing them would make the app behave worse: your theme and time zone, which product tours you have already seen, which of the two sign-in portals to preselect, and the vault's record of a counterparty's key so it can warn you if that key ever changes. An article you have drafted but not posted is held by the browser tab itself and is discarded when you close the tab, so signing out alone does not remove it.

5. Do Not Track

We do not respond to browser "Do Not Track" signals.

6. Your choices

  • See and correct your date of birth. Settings > Personal information. Because it is sensitive, revealing or changing it requires you to confirm who you are first - with your password, an authenticator code, or a backup code - even while signed in.
  • Add, change or remove your profile picture. Settings > Profile.
  • Download your data. Settings > Download my data gives you a file containing the records you have created in WealthTIP, together with a manifest listing what is included and what is left out. Some things are deliberately not in it, including security logs, the contents of vault files, and messages written to you by someone else.
  • Delete your account. Settings > Delete account. Deletion does not happen immediately: there is a thirty (30) day grace period, and you can cancel at any point before erasure begins, from Settings or from the link in the confirmation email. After that we erase, anonymize or retain your information as described in Section 7. Please note that we cannot remove copies of public pages held by search engines or other third-party caches.
  • Disconnect a linked bank. Settings > Connected Accounts, then Unlink. This stops future updates. The accounts and transaction history already synced stay in your account until you delete them or delete your account, and the profile our aggregation provider holds for you is removed when you delete your account.
  • End a connection with a professional (Requests). The professional's access to what you shared through the vault ends with it.
  • Cancel a subscription. Settings, in the Subscription card, using Manage subscription to open the Stripe billing portal. That button appears once you are on a paid plan.

7. How long we keep it

While your account is open, we keep your information so the product works. When you delete your account, what happens depends on whether anyone else has a claim on the record.

Erased. Your financial information - accounts, balances, transactions, budgets, categories, rules, goals and net-worth history - along with your coverage answers, your notifications, any content and comments you published, your professional profile if you have one, your profile pictures, and your sign-in credentials and passkeys. The keys that let you open documents in your own vault are erased with them. Anything you shared with someone else stays readable to that person, who holds their own key to it.

Kept with your identity removed. Some records have another person on the other side of them, and that person keeps a legitimate claim on their own copy. Your account record itself is not deleted outright: your email address, name and date of birth are stripped from it, and the emptied record is what those other records continue to point at, so they no longer name you. This covers your connection history with a professional, including its dates, the messages and meetings within those connections, and documents shared through the vault. A few settings that carry no identity on their own, such as which product tours you have seen, stay on the emptied record rather than being deleted.

Retained. Security and audit records, including sign-in events and the IP addresses they came from, are kept while we operate the service. Support and feedback you send us are kept. Files you attach are deleted from our servers 90 days after you send them, but a copy of each one is also emailed to our support mailbox when your report is passed to us. That mailbox copy is on no automatic schedule - we clear it by hand, and we will delete it on request. Records of any breach notice we sent you are kept as evidence that we sent it. Your consent records - which version of these documents you accepted, and when - are also retained. If you started a free trial or had a paid subscription, a one-way coded form of your email address is kept after deletion solely so the free trial is given once per person, for 3 years. Billing records of your subscriptions, and operational records such as our email bounce list, webhook logs, short-lived caches and system backups, are retained on their own schedules.

If you create an account but never confirm your email address, we start this same deletion process automatically, seven (7) days after you registered, and the account is erased only once the thirty (30) day period described in Section 6 has passed - not on day seven itself. This automatic case works differently from the deletion you request yourself in one way: no confirmation email is sent, and because signing in requires a confirmed email address, you cannot use Settings to cancel it either. Confirming your email address does cancel it. If you confirm late - after the seven days, while the thirty-day period is still running - that automatic deletion is called off and your account stays. Ask us for a fresh confirmation link at any time before the thirty days are up. This applies only to a deletion we started automatically; a deletion you asked for yourself is never cancelled by confirming your address.

8. How we protect it

  • In transit. Everything travels over TLS, and browsers are instructed to refuse an unencrypted connection to us.
  • In our database. Your date of birth, your multi-factor authentication secret, and the session token we hold for your bank connection are each individually encrypted. Your email address and name are stored in ordinary columns, because your email address is the key we look you up by. Your password is stored only as a one-way hash and is never recoverable, by us or by anyone else.
  • Documents in the vault. Where that feature is available to you, files are encrypted in your browser before they are uploaded, and decrypted only in the browser of the person they were shared with. We hold the encrypted file, the routing information around it, and a copy of your key that is itself locked by your passphrase - so the server never holds a key it can use to open your documents. Choose a strong vault passphrase: it is what stands between that locked copy and your files.
  • Bank credentials. We never receive them. They go from your browser to our aggregation provider.
  • Your own controls. You can add a passkey or multi-factor authentication to your account, and you can require a passkey to sign in.

No service can promise perfect security, and we do not. We are not certified under SOC 2 or any comparable audit programme, and we will say so here if that changes.

9. Children

WealthTIP is for adults. The service is not directed to anyone under eighteen, and we do not knowingly collect information from anyone under eighteen. If you believe a child has given us information, write to support@wealthtip.ai and we will remove it.

10. Changes to this policy

We may update this policy. If we make a material change we will tell you in the app and by email, and we will change the "Last updated" date at the top.

11. Contact

WealthTIP LLC
12650 North Beach Street, Suite 114
Fort Worth, Texas 76244
support@wealthtip.ai