Privacy Policy

Wealth Vista ("Wealth Vista", "we", "us", "our") provides AI-assisted retirement income, portfolio and estate planning software. This policy explains how we handle personal information on our marketing website at wealthvista.io and in the Wealth Vista application at app.wealthvista.io.

For the purposes of the EU/UK GDPR, Wealth Vista is the data controller of the personal information described in this policy, except where we process information on behalf of a professional firm that uses Wealth Vista to serve its own clients — in that case the firm is the controller and we act as its processor.

This policy covers: (a) visitors to our marketing site; (b) people who submit a contact, affiliate, demo or Vista Score form; and (c) registered users of the Wealth Vista application. It does not cover third-party websites we link to, which have their own policies.

Information you give us

• Identity and contact details: name, email address, phone number, country.
• Enquiry content: messages sent through the contact, demo request and affiliate forms.
• Vista Score answers: age band, retirement horizon, savings ranges, income expectations and other self-reported planning inputs, plus the score we calculate from them.
• Account information (application only): login credentials managed by our authentication provider, profile details and preferences.
• Financial planning information (application only): accounts, balances, holdings, contributions, goals, beneficiaries and estate documents you choose to enter or import.
• Billing information (application only): subscription tier and payment status. Card details are handled by our payment processor and never stored by us.

Information collected automatically

• Device and usage data: IP address, browser type, operating system, pages viewed, referring URL and timestamps.
• Marketing attribution: landing page, referrer and UTM campaign parameters attached to form submissions.
• Cookie identifiers, subject to your cookie choices (see section 7).

We do not knowingly collect government identifiers, biometric data, or special category data such as health or religious information. Please do not include such details in free-text fields.

• To provide, operate, secure and improve the Wealth Vista site and application.
• To generate the plans, projections, Vista Score and AI Assistant responses you request.
• To respond to enquiries, demo requests and support tickets.
• To send service messages (security notices, billing, product changes) and, where permitted, product updates you can unsubscribe from at any time.
• To measure site performance and marketing effectiveness in aggregate.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To comply with legal, tax, accounting and regulatory obligations.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Where the GDPR or UK GDPR applies, we rely on:

• Contract — to deliver the services you have signed up for.
• Consent — for non-essential cookies, marketing email and optional integrations. You may withdraw consent at any time.
• Legitimate interests — to secure our services, prevent abuse, and understand how our site is used, balanced against your rights.
• Legal obligation — to meet record-keeping and regulatory requirements.

If you choose to sign in with Google, Wealth Vista requests only two OAuth scopes: https://www.googleapis.com/auth/userinfo.email and https://www.googleapis.com/auth/userinfo.profile (together with openid). These give us your email address, name and profile picture, which we use solely to create and authenticate your Wealth Vista account. We do not request access to your Gmail, Google Drive, Calendar or Contacts. If we later offer an optional Google service integration, we will ask for its scopes separately and only after you explicitly enable it.

Limited Use disclosure. Wealth Vista's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

• use Google user data only to provide or improve user-facing features that are prominent in the Wealth Vista interface;
• do not transfer Google user data to third parties except as necessary to provide those features, for security purposes, or to comply with applicable law;
• do not use Google user data for advertising, and do not sell it;
• do not allow humans to read Google user data unless we have your explicit consent for specific messages, it is necessary for security or to comply with law, or the data has been aggregated and de-identified.

You can revoke Wealth Vista's access at any time from your Google account permissions page. On revocation we delete the associated tokens and cached Google data within 30 days.

We use essential cookies to keep the site working (theme preference, security, load balancing) and, only with your consent, analytics, preference and marketing cookies. Our cookie banner lets you accept all, reject all non-essential cookies, or choose by category, and you can change your choice at any time by clearing thewealthvista-cookie-consententry in your browser storage or reopening the banner.

Most browsers also let you block or delete cookies through their settings.

• Service providers who host, secure and support the product under contract (section 9).
• Your professional firm, if you use Wealth Vista through an advisor or wealth manager.
• Legal and safety — where required by law, court order or to protect rights, property or safety.
• Business transfers — in a merger, acquisition or asset sale, subject to this policy.

We never sell or rent personal information to data brokers or advertisers.

We rely on a small set of vetted providers, each bound by data-processing terms:

• Cloud hosting, database and authentication infrastructure.
• Application and error monitoring.
• Transactional and marketing email delivery.
• Payment processing for subscriptions.
• AI model providers that process prompts to generate planning explanations. Prompts are not used to train third-party models.

A current list of subprocessors is available on request through our contact page.

We operate internationally, and information may be processed in countries other than your own, including the United States, Canada, the European Union and India. Where we transfer personal data out of the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses and equivalent safeguards, together with encryption in transit and at rest.

• Marketing enquiries and Vista Score submissions: up to 24 months after last contact.
• Account and planning data: for the life of your account, then deleted or anonymised within 90 days of closure.
• Google tokens and cached Google data: deleted within 30 days of disconnection or account closure.
• Billing and tax records: as required by law, typically 7 years.
• Security logs: up to 12 months.

We protect information with TLS encryption in transit, encryption at rest, row-level access controls in our database, least-privilege access for staff, multi-factor authentication on administrative systems, and routine automated security scanning. No system is perfectly secure; if a breach affects your personal information we will notify you and any regulator as required by law.

Depending on where you live, you may have the right to:

• access a copy of the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your information;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting prior processing;
• not be discriminated against for exercising these rights (California);
• lodge a complaint with your data protection authority.

To exercise any right, contact us through our contact page. We verify requests against the email on file and respond within 30 days (45 days in California, extendable where the law allows). Authorised agents may submit requests with proof of authority.

Application users can request deletion from Settings inside the app, or by emailing us. Marketing contacts can request removal through the contact page. Once verified, we delete or irreversibly anonymise your personal information within 30 days, except for records we are legally required to keep. Deletion also revokes any connected Google integrations and removes the tokens.

Wealth Vista is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn we have, we delete it promptly.

Wealth Vista uses AI to summarise your plan, calculate the Vista Score and explain trade-offs in plain language. These outputs are educational tools, not financial, tax or legal advice, and they do not produce legally binding decisions about you. A human can always review any output with you, and you can ask us how a result was produced.

We update this policy when our practices change. Material changes will be announced on this page and, where appropriate, by email before they take effect. The effective date at the top always reflects the current version.

Privacy questions, rights requests and complaints can be sent through our contact page. We aim to reply within five business days. If you are in the EEA or UK and are not satisfied with our response, you may contact your local supervisory authority.