Privacy Policy

Account information. Your name, email address, firm details, team members you invite, and your sign-in credentials.

Billing information. Subscription and payment details are collected and stored by our payment processor, Stripe. We do not store full card numbers.

Customer content. Everything you enter or upload into the CRM: client and prospect records, households, accounts, financial details, documents, notes, tasks, meetings and emails you sync. This can include sensitive personal and financial information about your clients, such as Social Security numbers, dates of birth and account details.

Connected accounts. If you connect Google (Gmail or Calendar), Mailchimp or another CRM, we access the data needed to provide that integration, using the permissions you grant. You can disconnect at any time.

Usage data. Basic technical information such as browser type, pages visited and performance measurements, collected through privacy-friendly analytics that do not use advertising cookies.

We use information to provide, secure and support the service; to process payments; to send account, security and billing notices; to send product updates you can opt out of; and to improve the product.

We do not sell personal information, and we do not use customer content for advertising.

For customer content, you are the owner and controller of your clients' data and we process it only on your instructions, to provide the service. You are responsible for having the right to store that data and for meeting your own regulatory obligations, such as Regulation S-P. We will help you respond to client requests about their data.

Optional AI features (such as meeting prep, document scanning, reports and the assistant) send the relevant records to our AI provider, OpenAI, through its API to generate a response. Under OpenAI's API terms, this data is not used to train its models. AI output can be wrong, so review it before relying on it.

We share information only with providers that help us run the service, under contracts that limit their use of it:

• Supabase — database, authentication and file storage
• Vercel — website and application hosting
• Stripe — payments and billing
• Resend — transactional and account email
• OpenAI — AI features
• Google, Mailchimp and other CRMs — only when you connect them

We may also disclose information if required by law, to protect our rights or users, or as part of a merger or sale of the business, in which case this policy will continue to apply.

Data is encrypted in transit (TLS) and at rest. Access to customer data is isolated per firm with database-level row security, Social Security numbers are stored encrypted, and staff access is limited to what is needed to support you. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.

We keep your data while your account is active. You can export or delete records at any time. When you close your account we delete customer content within 30 days, except where we must keep limited records (such as billing history) for legal reasons. Backups roll off on their normal schedule.

We use only cookies and local storage needed to keep you signed in and remember your preferences. Our analytics do not use advertising or cross-site tracking cookies.

You can access, correct, export or delete your account information, and unsubscribe from marketing email using the link in any message. Depending on where you live, you may have additional rights under laws such as the CCPA. To make a request, email support@wealthadvisorcrm.com.

The service is intended for financial professionals and is not directed to children under 16.

If we make material changes we will update this page and notify account owners by email. Questions about this policy: support@wealthadvisorcrm.com, 13607 Bonham Lane, Austin, Texas 78736.