Privacy Policy

1. Introduction

WealthWatch ("WealthWatch", "we", "our", or "us") is a personal finance and portfolio tracking service. This Privacy Policy explains what information we collect when you use our website and services (the "Service"), how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described in this policy.

2. Information we collect

We collect the following categories of information:

• Account information. A username you pick, your email address, and password (stored as a one-way hash). If you sign in with Google, we receive your Google display name (used only to seed an initial username, which you can change), email, and Google account ID.
• Financial information. Account balances, holdings, transactions, dividends, interest, and similar data either imported by you (CSV uploads, manual entry) or retrieved on your behalf from third-party brokers, banks, and authorized data aggregators that you choose to link (including but not limited to Questrade, Wealthsimple, Interactive Brokers, TD, BMO, and any institution you connect through our standard bank or brokerage connectors).
• Connection credentials. OAuth tokens, refresh tokens, and aggregator access tokens that we store so we can sync your accounts on your behalf. We never see, store, or have access to your bank or brokerage username or password. Those are handled directly between you and the institution (or its aggregator).
• Usage data. Basic technical information such as your IP address, browser type, pages visited, and timestamps, used for security and to keep the Service running.

3. How we use your information

We use your information solely to operate and improve the Service. Specifically, to:

• Display your accounts, holdings, and transactions back to you.
• Compute analytics: net worth, performance, dividends, taxes, risk metrics, and similar.
• Sync data on a recurring basis from connected brokers and banks.
• Authenticate you and protect your account.
• Communicate with you about your account or material changes to the Service.
• Detect, prevent, and respond to fraud, abuse, or security incidents.

We do not sell your personal or financial information. We do not use your financial data to serve you advertising and we do not share it with advertising networks or data brokers.

4. Bank and brokerage data aggregators

When you choose to connect a bank or brokerage account, we use one or more authorized third-party data aggregators to gather your financial information from your institution on your behalf. By using the Service to link an account, you grant WealthWatch and the relevant aggregator the right to access and transmit your information as described in that aggregator's end-user privacy policy.

You can disconnect any linked institution at any time from the Settings page in WealthWatch. Disconnecting revokes our access token and stops further syncing. To also have the upstream aggregator delete data it holds about you, contact us at admin@wealthwatch.ai and we will provide the relevant contact and any aggregator-specific deletion path.

5. Other third parties

In addition to bank and brokerage data aggregators, we use the following service providers:

• Questrade. Direct OAuth integration for users with a Questrade account.
• Google. For optional Sign in with Google authentication.
• Hosting and infrastructure providers. Used to operate the database, application servers, and website. They process data only on our instructions.
• Market data providers. Used to fetch quotes, dividend history, and similar reference data. We only send security symbols to these providers, never personal information.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal and financial data from our production database within 30 days, except where we are required by law to retain it (for example, fraud or audit obligations). Backups containing your data are rotated and overwritten on a regular schedule.

7. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, access controls, and isolation of user data. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you without undue delay as required by applicable law.

8. Your choices and rights

You may at any time:

• Access, correct, or export the data in your account from the Settings page.
• Disconnect any linked broker or bank to stop further syncing.
• Delete your account, which removes your personal and financial data from the Service.
• Request a copy of, correction of, or deletion of your data by emailing us at admin@wealthwatch.ai. Depending on where you live, you may have additional rights under laws such as Canada's PIPEDA, the EU/UK GDPR, or U.S. state privacy laws.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International users

WealthWatch is operated from Canada. If you access the Service from outside Canada, you understand that your information will be processed in Canada and may be stored in countries whose data protection laws differ from those of your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material we will also notify you by email or in-app notice before they take effect.

12. Contact us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at admin@wealthwatch.ai.