Privacy Policy

What we collect

• Account basics you give us: first and last name, email, phone (optional), date of birth, and your US state.
• Financial data from the banks you connect, read-only, through our provider Plaid: account balances, transactions, credit-card APRs, and liabilities.
• Operational data: app preferences, security/audit logs, and (only if you opt in) crash diagnostics with personal information removed.

We do not collect your full street address, Social Security number, or any government ID, and we never store your bank login — Plaid handles that.

How we use it

Only to give you advice: to detect your income and bills, forecast your cash, find money that's safe to redirect, and surface the one move that helps most today.

We do not use your financial data for advertising, and we never sell or rent it.

Who we share it with

• Plaid, to connect your accounts (read-only) — governed by Plaid's own privacy policy.
• Our infrastructure providers (listed in 'Subprocessors' below) strictly to operate Advizel.

We never share your data with lenders, advertisers, or data brokers. We are not paid by any product Advizel might mention.

Subprocessors

We use the following service providers, each under a data-processing agreement:

• Plaid Inc. — bank connections, transaction sync. plaid.com/legal
• Supabase Inc. — encrypted database, authentication, edge functions. supabase.com/privacy
• Anthropic PBC — the AI advisor, receiving only anonymized financial context (no name, email, bank name, merchant name, or card issuer). anthropic.com/privacy
• Resend — transactional email delivery (verification, security alerts). resend.com/legal/privacy-policy

We will update this list if subprocessors change.

How it's protected

Your data is encrypted in transit (TLS) and at rest. Access is enforced per-user at the database layer, every sensitive action is logged, and Plaid access tokens are kept in an encrypted vault. Advizel is read-only by design — it cannot move money, which removes the worst-case risk entirely.

Your rights

• Access / export: you can export a copy of your data any time from Profile.
• Deletion: you can delete your account and all associated data from Profile; this disconnects your banks via Plaid and removes your stored data.
• Correction: you can edit your personal information from Profile at any time.
• Portability: your exported data is in plain JSON you can import elsewhere.

California residents (CCPA / CPRA)

If you live in California you have additional rights under the California Consumer Privacy Act, as amended by the CPRA:

• Right to know what personal information we collect, use, and share.
• Right to delete personal information we have collected about you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined under the CPRA, so there is nothing to opt out of.
• Right to limit use of sensitive personal information.
• Right not to be retaliated against for exercising any of these rights.

Email privacy@advizel.com to exercise any of these. We respond within 45 days as required.

Data retention

We keep transaction history on a rolling basis to power forecasting and remove it when it's no longer needed or when you delete your account. Security logs are kept as long as required for safety and compliance.

Children

Advizel is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 13 (COPPA) or under 16 without verification.

Where Advizel operates

Advizel is offered to US residents only. If you access Advizel from outside the United States, your information will be transferred to and processed in the US.

Changes to this policy

We may update this policy as Advizel evolves; we'll note a new effective date above, and for material changes we'll tell you in the app before they take effect.

Contact

Questions about your privacy? Reach us from Profile → Contact support, or email privacy@advizel.com.