Privacy Policy

Account information. When you create an account we collect your email address and authentication details. We require two-factor authentication (2FA) before you can connect a financial institution.

Sandbox financial data. Bank connections are being developed with Plaid test accounts. Real bank connections are not enabled in this release. Test account balances and transactions are used to verify the connection flow. Do not enter real bank credentials into test flows. Budgets, goals, and AI recommendations are not yet available.

Usage data. We collect limited technical data (for example, log and device information) to operate and secure the service.

• To provide authentication, personal and business spaces, and test financial connections.
• To secure your account, prevent fraud, and provide support.
• To comply with legal obligations.

We do not sell your personal or financial information, and we do not use it for third-party advertising.

We share data only with providers that help us run the service:

• Plaid — Sandbox account connections during development. Your use of Plaid is also governed by Plaid's end-user privacy policy.
• Supabase — database, authentication, and hosting of your account data.
• Vercel — application hosting.
• Resend — delivery of account confirmation and other authentication emails, including your email address and message content.

• Financial-institution access tokens are encrypted before they are stored.
• Public application traffic uses HTTPS. Backup protection, retention and restore procedures are being verified before real financial data is enabled.
• Two-factor authentication is required before connecting any account.
• Access to your data is restricted at the database level to your account.
• We practice data minimization — we collect only what the product needs, and we do not store full account numbers.

No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.

We retain account information while providing the service. Contact us to request deletion or a copy of your data. These requests are currently handled manually after verifying your identity. Backup retention and legal exceptions are assessed separately; we do not promise immediate removal from every backup.

• Access & export. You can request a copy of your data.
• Deletion. Contact us to request account and data deletion; self-service account deletion is not yet available.
• Disconnect. Sandbox connections can be removed through the test connection controls when enabled. Real connections are not enabled.

Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA. To exercise any right, contact us at paul@theotherguys.tech.

MyWealth360 is not directed to children under 13, and we do not knowingly collect their information.

We may update this policy from time to time. We will post the updated version here and revise the effective date above.

Questions about this policy or your data? Email paul@theotherguys.tech.