🔒 Your data security is our foundation.
We built Wealth OS with security as a first principle, not an afterthought. Here's exactly how we protect your financial data.
ENCRYPTION
All data encrypted with TLS 1.3 in transit and AES-256 at rest.
Bank-grade security for your financial data. Same standards used by major financial institutions.
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- End-to-end encrypted storage
- Secure key management
INFRASTRUCTURE
Built on SOC 2 Type II certified infrastructure:
Enterprise-grade platforms with proven security track records.
- Supabase — database, auth, real-time
- Stripe — payment processing (PCI DSS Level 1)
- Vercel — hosting with edge security
- 99.9% uptime SLA
ZERO-STORAGE PROCESSING
Documents you upload — tax returns, paystubs, bank statements — are analyzed by our AI and immediately deleted.
We never store your source documents. Period.
- Real-time document processing
- Immediate deletion after analysis
- Only numerical data extracted
- No document retention policy needed
AI TRANSPARENCY
Our AI generates educational simulations, not financial advice.
Every projection includes the assumptions it's based on, so you can verify the math.
- Open assumption methodology
- Explainable AI outputs
- No black box algorithms
- Educational purpose only
Data Handling Transparency
We believe you should know exactly what happens with your data.
| What We Store | How Long | How to Delete |
|---|---|---|
Email address | Until deletion | Account settings or email support |
Financial inputs | Until deletion | Account settings or email support |
AI projections | Until deletion | Account settings or email support |
User preferences | Until deletion | Account settings or email support |
WHAT WE NEVER STORE
These items are never stored or retained in any form. N/A for duration and deletion.
What We Store
WHAT WE NEVER STORE
These items are never stored or retained in any form.
For complete details on data handling, see our Privacy Policy.
Regulatory Compliance
Built to meet global privacy standards
📋 CCPA
California Consumer Privacy Act
Complete data deletion rights and transparency requirements met.
📋 PIPEDA
Canada Personal Info Protection
Platform designed with Canadian privacy principles in mind.
📋 GDPR
EU General Data Protection
Architecture follows European privacy-by-design principles.
Data Deletion Rights
Request full deletion anytime from your account settings or by emailing support@usewealthos.ai. We'll process deletion requests within 48 hours.
How you log in — no passwords to steal.
Multiple secure authentication methods, zero password storage
Google OAuth
Secure login with your Google account
Apple Sign-In
Native authentication with Apple ID
Magic Link
Email-only login, no password required
Session Management
Automatic timeout after inactivity
Additional Security Features
- Automatic session timeout after inactivity
- Sessions encrypted, never stored permanently
- No password storage or management required
Found a vulnerability? We want to know.
We take security seriously and appreciate responsible disclosure.
We take all reports seriously and will respond within 48 hours.
Responsible Disclosure Guidelines: Please do not publicly disclose vulnerabilities before giving us a chance to fix them. We appreciate your patience and will work quickly to address any confirmed security issues.
Start your 7-day free trial.
No credit card required. Cancel anytime.