Privacy Policy

Last updated: April 28, 2026

One Wealth ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Data Type	What We Collect	Purpose
Account info	Email address, hashed password	Authentication and account management
Financial data	Investment holdings, account balances, security names, quantities, and values retrieved via Plaid	Generating portfolio analysis reports
Payment data	Processed by Stripe; we store your Stripe customer ID and subscription ID but never your card number	Processing payments and managing subscriptions
Session data	Session token stored in your browser's localStorage	Keeping you logged in

We do not collect: your name, phone number, physical address, Social Security number, or brokerage login credentials. Plaid handles the connection to your financial institution directly — we never see your bank username or password.

2. How We Use Your Data

To provide the Service: generating portfolio reports, displaying holdings, and running analysis
To process payments via Stripe
To send transactional emails (verification codes, payment confirmations) via Resend
To maintain and improve the Service

We do not sell, rent, or share your personal or financial data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services that process your data:

Plaid — connects to your financial institution to retrieve investment data. Plaid's privacy policy: plaid.com/legal
Stripe — processes payments securely. Stripe's privacy policy: stripe.com/privacy
Resend — sends transactional emails (verification codes). Resend's privacy policy: resend.com/legal/privacy-policy
Railway — hosts the application and database. Railway's privacy policy: railway.com/legal/privacy

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Railway with encrypted connections (SSL)
Passwords are hashed using bcrypt and never stored in plain text
Financial data retrieved from Plaid is stored only as long as needed to provide the Service
For One-Time Report users, brokerage connections are automatically disconnected after report generation
All data transmission uses HTTPS encryption

5. Data Retention

Account data: retained as long as your account is active
Financial data: retained while your subscription is active; deleted when you disconnect accounts or cancel your subscription
Report data: retained for One-Time Report users so you can access your report after generation
Session tokens: expire after 30 days

6. Your Rights

You have the right to:

Access your data — your portfolio data is visible in the dashboard
Delete your data — contact us to request full account deletion
Disconnect your financial accounts at any time through the Service
Cancel your subscription at any time

To exercise any of these rights, contact us at [email protected].

7. Cookies and Local Storage

We do not use tracking cookies. We use browser localStorage to store:

Your session token (for authentication)
Your email and tier (for faster page loads)
Your theme preference (light/dark mode)

We do not use analytics trackers, advertising cookies, or third-party tracking scripts.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top reflects the most recent revision.

10. Contact

For questions, concerns, or data requests, contact us at:
[email protected]