Privacy Policy

This Privacy Policy describes how WatsonWise (the "Service") collects, uses, stores, and shares information when you use the website, application, and related features ("we," "us," or "our"). It applies together with our Terms of Service. If you do not agree, do not use the Service.

1. Information we collect

Depending on how you use the Service, we may process:

• Account data: such as name, email address, and credentials you use to sign in (including authentication provider identifiers when you use Sign in with Google).
• Financial connection data: when you link institutions, we receive information through partners such as Plaid (e.g., account identifiers, balances, and transaction details as made available by your institution and the connection).
• Content you provide: categories, notes, budgets, or other inputs you add in the app.
• Technical and usage data: such as device/browser type, IP address, general timestamps, and diagnostic or error data—to operate, secure, and improve the Service.

2. How we use information

We use information to:

• Provide, maintain, and improve the Service (including AI-assisted features where enabled)
• Authenticate you, prevent fraud, and protect security
• Respond to support requests and comply with law
• Analyze usage in aggregate to guide product decisions (where configured)

We do not sell your personal information in the common sense of selling lists to data brokers for advertising. We may share data with service providers who process it on our behalf under contracts, as described below.

3. AI and automated processing

Some features send prompts or structured summaries derived from your data to an external AI provider to generate text such as insights or chat replies. Today, production is configured to use Google (Gemini) when AI features are enabled; depending on deployment settings, other providers (for example OpenAI) may also be supported. Those providers process the content they receive under their own terms and policies. Do not submit highly sensitive information you are not comfortable having processed by those systems. A plain-language breakdown of typical chat and categorization payloads is in our FAQ ("What gets sent to AI?").

4. Service providers and subprocessors

We rely on vendors to host and run the Service. Depending on configuration, this may include:

• Hosting and infrastructure (e.g., application host such as Vercel; database such as Neon or other PostgreSQL providers)
• Financial data linking (e.g., Plaid)
• Authentication (e.g., Google when you use Sign in with Google)
• Analytics and observability (e.g., Vercel Analytics; error reporting such as Sentry when enabled)
• AI providers when AI features are turned on

We choose providers with reasonable security practices but are not responsible for their independent processing beyond what the law requires.

5. Cookies and similar technologies

We use cookies and local storage where needed for the Service to work—for example, to keep you signed in (session), remember UI preferences (such as theme), or support analytics. You can control cookies through your browser; disabling required cookies may break sign-in or preferences.

6. Retention

We retain information as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce our agreements.

Account deletion: You may request deletion of your account and associated personal data by emailing support@watsonwise.com. After we verify your request, we will delete your account and associated personal data within ten (10) business days, except where limited retention is required for backups, fraud prevention, or legal obligations. Backup and vendor systems may retain encrypted or residual copies for a short period until normal backup rotation completes.

7. Security

We use administrative, technical, and organizational measures appropriate to the Service (such as encryption in transit, access controls, and secure handling of vendor secrets). No method of transmission or storage is 100% secure.

To report a security vulnerability, please email security@watsonwise.com. Do not use this address for general account or privacy requests—use support@watsonwise.com for those.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data, and to object to or limit certain processing. To exercise these rights, contact us using the information below. You may also have the right to complain to a supervisory authority.

9. Children

The Service is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

10. International users

Data may be processed in the United States or other countries where we or our vendors operate. Those countries may have different data protection laws than your country.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version and update the "Last updated" date. Continued use after changes means you accept the updated policy, unless applicable law requires a different process.

12. Contact

Privacy questions and data rights requests: support@watsonwise.com.

Security vulnerability reports: security@watsonwise.com.