Privacy Policy

My Wealth Maps is operated by TODO: [COMPANY LEGAL NAME], a Washington State company ("My Wealth Maps," "we," "us," or "our"). We provide financial planning preparation tools at mywealthmaps.com.

Contact: privacy@mywealthmaps.com

Mailing address: TODO: [COMPANY ADDRESS]

Information you provide directly:

• Account information: name, email address, password
• Household financial data: assets, income, expenses, liabilities, real estate, business interests, insurance policies, gift history, trust structures
• Family information: household member names, birth years, relationships
• Planning preferences: domicile state, filing status, retirement goals
• Communications: messages to support, feedback

Information collected automatically:

• Usage data: pages visited, features used, time spent
• Device information: browser type, operating system, IP address
• Cookies and similar technologies: session management, preferences

Information from third parties:

• Payment information: processed by Stripe — we do not store card numbers
• Advisor and attorney connections: if you connect a professional, limited profile information is shared with them as described in Section 5

We use your information to:

• Provide and improve the planning tools and calculations
• Display your household financial picture and planning readiness
• Send transactional emails: account confirmation, receipts, plan summaries
• Send service emails: renewal reminders (required by law), security alerts
• Connect you with advisors and attorneys you choose to invite
• Analyze usage to improve the product
• Comply with legal obligations

We do not:

• Sell your personal information to third parties
• Use your financial data to train AI models
• Share your data with advertisers
• Use your data for purposes other than those listed above

Under the Washington Consumer Protection Act (WCPA) and Washington My Health MY Data Act (MHMD), you have rights regarding your personal data. We process your data on the following bases:

• Contract: to provide the services you signed up for
• Legal obligation: tax records, breach notification, billing compliance
• Legitimate interest: security monitoring, fraud prevention, product improvement
• Consent: marketing emails (you may withdraw consent at any time)

With advisors and attorneys you connect:

When you invite an advisor or attorney and they accept, they can view your household financial data within the platform. You control these connections and can revoke access at any time from your account settings.

With service providers (data processors):

• Supabase: database and authentication (data stored in the United States)
• Vercel: application hosting (United States)
• Stripe: payment processing (does not receive your financial planning data)
• Resend: transactional email delivery

Each provider is bound by a Data Processing Agreement. We do not authorize them to use your data for their own purposes.

We do not share your data with any other third parties except:

• When required by law, court order, or government request
• To protect the rights, property, or safety of My Wealth Maps or our users
• In connection with a merger or acquisition (you will be notified)

We retain your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law (e.g. billing records for 7 years per IRS requirements).

Anonymized, aggregated data (not linked to you) may be retained indefinitely for product improvement.

Washington residents have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data
• Portability: receive your data in a structured, machine-readable format
• Opt-out: opt out of the sale of personal data (we do not sell data)

To exercise these rights, email privacy@mywealthmaps.com. We will respond within 45 days. We may need to verify your identity before processing requests.

We will not discriminate against you for exercising your privacy rights.

We use cookies and similar technologies for:

• Session management: keeping you logged in
• Security: CSRF protection
• Preferences: remembering your settings

We do not use advertising cookies or third-party tracking pixels. You can control cookies through your browser settings. Disabling cookies may prevent some features from working correctly.

We implement the following security measures:

• Encryption in transit: TLS 1.2+ on all connections
• Encryption at rest: AES-256 via Supabase (Postgres)
• Access controls: row-level security policies on all database tables
• Authentication: email verification, optional two-factor authentication
• Session management: short-lived tokens with automatic refresh

No system is completely secure. If you believe your account has been compromised, contact security@mywealthmaps.com immediately.

In the event of a data breach affecting your personal information, we will notify you within 30 days of discovery, as required by Washington RCW 19.255.010. If the breach affects more than 500 Washington residents, we will also notify the Washington Attorney General.

My Wealth Maps is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact privacy@mywealthmaps.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform at least 30 days before the change takes effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

Privacy questions: privacy@mywealthmaps.com

Security concerns: security@mywealthmaps.com

Mailing address: TODO: [COMPANY ADDRESS]

Washington State registered agent: TODO: [REGISTERED AGENT NAME AND ADDRESS]