PRIVACY POLICY

1. Information We Collect

We collect information you voluntarily provide, including your name, email address, quiz/intake form responses, customer Stripe ID (for billing), and authentication metadata (last login, verification status).

Depending on which features you use, we also collect:

• AI Coach & support conversations — the messages you send to the AI Wealth Coach (Advanced tiers) and to the on-site support assistant (all visitors, including anonymous), along with the generated replies, are stored so we can maintain the conversation and review escalations.
• Financial-tracking entries — if you use the member portal, the net-worth snapshots (cash, investments, real estate, other assets, debts, and any notes), goals, milestones, and lesson progress you enter. The AI Coach reads your most recent snapshot to personalize advice.
• Community profile content — if you create a member profile, your chosen username, tagline, bio, company name, avatar image, and an optional short profile video. You choose whether a profile is public or shared only via a private link.
• Reviews & testimonials — the name and review text you submit, which may be displayed publicly after moderation.
• Mailing-list subscriptions — if you opt in to our newsletter or a lead-magnet download, your email address, the source of the signup, and your email preferences.
• Referrals — if you invite someone, the email address you provide for the invitation and the referral status.
• Content-moderation records — automated safety scores for uploaded images and video, and any resulting moderation strikes or account-status flags.

Payment card details are processed directly by Stripe and are never stored on our servers. We retain only Stripe-issued customer and subscription identifiers for fulfillment and refund handling.

We also collect minimal technical metadata (IP address, user agent, request timestamp) for security, rate limiting, and fraud prevention. It is not joined to your account for marketing or profiling.

2. How We Use Information

Your information is used to deliver the personalized blueprint, run the AI Coach and support conversations, power financial-tracking and member-profile features, screen uploaded media for safety, send transactional and lifecycle email, communicate about your purchase, respond to inquiries, and improve service quality. If you opt in, we also send newsletter and marketing email — you can unsubscribe at any time using the link in any such message or by updating your preferences. Community profiles and approved reviews you submit may be displayed publicly. We do not sell or rent your personal data, and we do not use behavioral advertising.

3. Data Storage & Security

Customer data, including uploaded avatars and profile media, is stored in Supabase (Postgres and Storage) with row-level security enforced and forced; only service-role keys held by our server can read or modify rows. Hosting region: US (AWS us-east-1). Data is transmitted over encrypted connections (TLS), and our database provider (Supabase) encrypts stored data at rest by default on its platform. We use reasonable technical and organizational safeguards to protect your data, but no method of transmission or storage is completely secure, so we cannot guarantee absolute security. Access to operational consoles is restricted to authorized personnel.

4. Third-Party Services

We rely on a small set of trusted vendors to operate the service. Each operates under its own privacy policy:

• Stripe — payment processing, subscription billing, customer portal, and refund handling. Your card details are submitted directly to Stripe.
• Resend — transactional and lifecycle email delivery. Open and click events are logged via webhook for delivery troubleshooting and bounce/complaint suppression.
• Supabase — Postgres database and storage for customer records, blueprints, and email logs. Hosted in the US.
• Anthropic— Claude language models power the AI Wealth Coach (Compass and Atlas tiers), the on-site support assistant (available to all visitors, including anonymous), and other generative features. The messages and context you provide to these features are sent to Anthropic for inference and may be retained per Anthropic's commercial terms.
• ElevenLabs — text-to-speech voice synthesis for the AI Coach and support assistant. When you request spoken audio, the text of the reply is sent to ElevenLabs to generate the audio.
• Cloudflare — Workers AI screens images and video you upload to a community profile for prohibited content before we store them. The uploaded media is sent to Cloudflare for automated classification.
• Slack — internal operational notifications. When a support conversation is escalated for human review, or on certain billing events, a notification that may include your email address and a short excerpt of the relevant message is posted to our private team channel.
• Vercel — application hosting and edge delivery; minimal request logs retained for ~30 days.

5. Cookies & Analytics

MoneySmith uses functional cookies required to keep you signed in to the dashboard and to remember pricing toggles. We also use browser local storage for functional purposes, such as remembering a support-assistant session identifier and voice preference. We do not use invasive tracking, ad networks, third-party retargeting, or interest-cohort cookies.

Publicly Visible Information

Some features are designed to be shared. If you set a community profile to public, its contents (username, tagline, bio, company, avatar, and any profile media) are visible to anyone who visits its page; a private profile is reachable only by someone holding its private share link, which you can rotate to revoke. Reviews and testimonials you submit may be displayed publicly, alongside the name you provide, after moderation. Do not include information in these fields that you do not want to be public.

6. Your Rights

You may request access, correction, deletion, restriction of processing, or a portable data export by emailing support@qol.one. We respond within 30 days. Stripe-side billing records are retained per Stripe's tax and compliance requirements and may persist after deletion of your MoneySmith account.

California (CCPA / CPRA): California residents have the right to know what categories of personal information we collect, to delete it (subject to legal-retention exceptions), to correct inaccuracies, and to opt out of any sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

EU / UK (GDPR): If you are in the EU or UK, you have the right to access, rectify, erase, restrict, and port your data, and to lodge a complaint with a supervisory authority. Our lawful basis for processing is (a) performance of the service contract you accepted at signup, (b) your explicit consent for AI Wealth Coach processing, and (c) our legitimate interest in maintaining security and preventing abuse.

7. Data Retention

We keep your data for as long as your account is active and as long as needed to provide the service. This includes your account details, AI Coach and support transcripts, community profiles, uploaded media, financial-tracking entries, and security and operational logs. We do not run an automated deletion schedule, so your data is not erased on a fixed timetable.

You can request deletion at any time by emailing support@qol.one, and we will delete your data unless we are required to keep it by law (for example, tax and accounting records) or need to retain limited records to enforce our terms and prevent abuse. Stripe billing records are held by Stripe under its own retention policy and may persist after you delete your MoneySmith account.

8. International Transfers

Data is stored in the United States (AWS us-east-1). If you access the service from outside the US, you consent to transfer of your data to the US. Where required, we rely on standard contractual clauses and our vendors' published transfer mechanisms for cross-border data flows.

9. Children

MoneySmith is intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with data, contact support@qol.one and we will delete it.

10. Security

We use reasonable technical and organizational safeguards, including TLS for data in transit, at-rest encryption provided by our database provider's platform, Supabase row-level security with enforced + forced policies, scoped service-role keys, rate limiting, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; you are responsible for using a strong unique password and notifying us of any suspected unauthorized access.

11. Policy Updates

This Privacy Policy may be updated periodically. The "last updated" date at the top reflects the most recent revision. Material changes will be summarized here and, where appropriate, communicated by email to active subscribers.

Changelog 2026-07-16: added ElevenLabs (voice synthesis), Cloudflare Workers AI (upload safety screening), and Slack (internal escalation notifications) as third-party recipients; corrected the Anthropic disclosure to reflect that the support assistant sends messages to Anthropic for all visitors, not only Advanced tiers; documented community profiles, uploaded avatar/video media, financial-tracking entries, reviews/testimonials, mailing-list subscriptions, and referral invites; added a "Publicly Visible Information" section; attributed at-rest encryption to the Supabase platform; expanded retention coverage. Later same day: replaced fixed auto-deletion windows (which no automated job performs) with honest request-based deletion language, and softened security wording to state we cannot guarantee absolute security.

Changelog 2026-05-19: added tiered data-collection summary, named Aeocraft LLC as operator, expanded user rights with CCPA/CPRA + GDPR detail, added retention, international-transfer, and security sections, added technical-metadata disclosure. Renumbered sections.

Changelog 2026-05-07: added explicit Resend, Supabase, and Anthropic disclosures; clarified storage region; documented AI Coach prompt handling; added age 18+ note; added "last updated" date format.

12. Contact

For privacy questions, data requests, or to report a concern, contact support@qol.one. Operator of record: Aeocraft LLC (part of the QOL network).