Review note for the site owner (delete before publishing): every item in
[brackets]could not be determined from the application and needs your answer. Everything else describes what the software actually does today. Change theversionin this file's header whenever the text changes.
1. Who this covers
This policy explains how Wealth by Design Financial ("we", "us") [CONFIRM legal entity name and address] handles personal information when you use wealthbydesignfinancial.com (the "Service"). It applies to visitors, account holders, coaching clients, and members of our coaching team.
2. What we collect
Account information. Your name, email address, and a password (stored only as a one-way hash — we cannot read it). If Google sign-in is offered and you use it, we receive your name, email, and profile image from Google instead of a password. We record whether your email is verified.
Sign-in and security records. When you sign in we store a session record with the IP address and browser ("user agent") the session was created from, so sessions can be managed and abuse detected. Sign-up, sign-in, and password-reset forms use Cloudflare Turnstile to tell people from bots; Cloudflare processes your IP address and browser signals for that check under its own privacy policy.
Consent records. When you accept our Terms of Service and Privacy Policy we record which version you accepted, when, and the IP address and browser used, so we can show what you agreed to. We also record whether you have opted in to marketing email, when you last changed that choice, and where you changed it.
Financial information you enter. The Service is built around a monthly budget: your take-home income, amounts by category (housing, insurance, utilities, subscriptions, food, debt payments, savings and investments, and custom lines you add), the names you give your own bank or cash accounts, your pay cadence, goal notes, personal notes, Wealth Building Roadmap progress, and the inputs to the savings-goal, retirement, and mortgage-payoff calculators (for example your age, balances, interest rates, and monthly contributions). We store what you enter; we do not connect to your bank or pull transactions.
Purchases. If you buy coaching, Stripe processes your payment. We store the product purchased, the amount, the Stripe session and payment identifiers, and whether the purchase was later refunded or disputed. We never receive or store your full card number.
Coaching records. If you work with a coach, our team records the coaching stage you are in, the pipeline stage of each purchase, budget suggestions and monthly action plans written for you, and private session notes kept by your coach.
Scheduling. Coaching sessions are booked through Cal.com, embedded on our site after payment. Details you enter into the booking form are collected by Cal.com under its privacy policy.
Usage analytics. We use Vercel Web Analytics, which records page views and aggregate traffic information without cookies and without a cross-site identifier.
Errors. If something breaks, Sentry may receive an error report with the request details needed to diagnose it, which can include your IP address.
3. How we use information
- to provide the Service: save and show you your budget, tools, and notes;
- to deliver coaching you purchase, including giving your assigned coach access to your budget, notes, and calculator inputs;
- to send account emails — welcome, email verification, password reset, purchase confirmation — which are required to operate your account and are sent whether or not you opt in to marketing;
- to send occasional emails, updates, and other communications only if you have opted in (Section 6);
- to keep the Service secure: rate limiting, bot detection, session management, fraud and abuse prevention;
- to process payments, refunds, and disputes;
- to comply with law.
4. Automated assistance (AI)
Two features send information to Google's Gemini API:
- Coach budget analysis. A coach may ask the Service to draft observations about a client's budget. The request contains the budget's monthly totals, the per-category amounts and labels, month-over-month changes, and the client's coaching stage. It does not include your name, email, or notes. The draft is reviewed and edited by your coach before anything is sent to you — nothing reaches you directly from the model.
- Blog drafting. Administrators draft articles with the same API. No client data is involved.
Blog articles carry a note that they were drafted with AI assistance and reviewed by our team.
5. Who we share information with
We do not sell personal information. We share it only with the providers that run the Service, each acting on our instructions:
- Vercel — hosts the website and provides web analytics; sees all traffic to the site and aggregate analytics.
- Neon — hosts our PostgreSQL database; everything stored in your account.
- Stripe — payments; the name, email, and payment details you give Stripe, and our purchase records.
- Cal.com — session scheduling; the booking details you enter.
- Resend — sends our email; your email address and the content of account emails.
- Upstash — rate limiting and session cache; short-lived sign-in counters and session data.
- Sentry — error reporting; technical details of failed requests, which may include your IP address.
- Cloudflare — the Turnstile bot check on the sign-up, sign-in, and password-reset forms; your IP address and browser signals.
- Google — optional Google sign-in (your sign-in profile, if you use it) and the Gemini API for the AI features in Section 4 (budget figures without your name or email).
We may also share information when required by law, to protect the rights and safety of our users or the public, or as part of a business transfer.
Your coach and your partner. Your assigned coach sees your budget, goal notes, and calculator inputs. If you share your budget with a partner, they see and can edit it.
6. Marketing email and your choices
At sign-up there is a checkbox, checked by default, to receive occasional emails, updates, and other communications. You can uncheck it then, and you can change your choice at any time from Account → Email preferences in your dashboard. Account and transactional emails (verification, password reset, purchase receipts) are sent regardless, because the Service cannot operate without them.
Updates are written by our team and sent through Resend from hello@wealthbydesignfinancial.com only to people who have opted in and verified their email address. Every update includes an unsubscribe link that works without signing in, supports your mail app's one-click unsubscribe, and shows our mailing address. We keep a record of which updates were sent to your account.
7. Cookies
We use a sign-in session cookie and related security cookies so you stay signed in and forms are protected. Vercel Web Analytics does not use cookies. We do not use advertising cookies or third-party tracking pixels.
8. Retention
We keep your account and Your Content while your account exists. [CONFIRM retention: the application does not currently delete or anonymise data automatically, and does not offer self-service account deletion. State how long records are kept after an account is closed and how a user can request deletion. Purchase and consent records may need to be kept for accounting and legal reasons even after deletion.]
9. Security
Passwords are hashed, connections are encrypted with HTTPS, sign-in attempts are rate limited, and access to coaching data is restricted to the coach assigned to you and our administrators. No system is perfectly secure; contact us right away if you suspect a problem with your account.
10. Children
The Service is not directed to children and we do not knowingly collect information from anyone under [13 / 18 — CONFIRM, consistent with the Terms].
11. Your rights
Depending on where you live you may have the right to access, correct, export, or delete your personal information, or to object to certain uses of it. Email us at the address below and we will respond. [CONFIRM which laws apply to you — e.g. a state privacy law such as the CCPA if you meet its thresholds — and whether you sell or "share" data as those laws define it; the application does neither today.]
12. Changes and contact
When this policy changes, the version and effective date at the top change and signed-in users are asked to review the new version.
Privacy questions: lee@wealthbydesignfinancial.com [CONFIRM contact address].