Privacy Policy

What we collect

• Account basics you give us: first and last name, email, phone (optional), date of birth, and your US state.
• Answers you give in the app, such as a correction to your income, a bill you add by hand, or a rough credit-score range. All optional; each one only sharpens the advice.
• Financial data from the banks you connect, read-only, through our provider Plaid: account balances, transactions, credit-card APRs, and liabilities.
• Operational data: app preferences, security/audit logs, and crash diagnostics — automatic reports sent when something in the app breaks, so we can fix it. Every report is stripped of personal information before it leaves your phone: no balances, no merchant or account names, no email address. We do not use them for anything but fixing faults.
• Messages you send us: support requests are emailed to our team so we can reply; improvement suggestions (the Feedback topic) are also kept in a list we review, so repeated requests are seen as a pattern. Neither ever includes your balances, transactions, or account numbers.
• Questions you ask the in-app advisor, and its answers, so the conversation can continue where you left it. They are removed with everything else when you delete your account.
• If you turn on notifications: the push token your phone issues for Advizel. Notifications themselves never contain amounts, balances, or account names.

We do not collect your full street address, Social Security number, or any government ID, and we never store your bank login — Plaid handles that.

• Waitlist (advizel.com only): if you give us your email on our website's waitlist form, we store that email address, the date you submitted it, and which version of this promise you agreed to — nothing else. We use it to tell you when Advizel is live and to send the occasional note about how it is coming along. Every email has a one-click unsubscribe, we never share or sell it, and we delete your address whenever you ask at [email protected]. If you joined before 24 August 2026, you did so under our earlier promise: a single launch email, and deletion of your address once that email has gone out. That promise still stands in full — you will receive that one email, we will delete you afterwards, and you will hear nothing else in between, unless you tell us you would like to keep hearing from us.

How we use it

Only to give you advice: to detect your income and bills, forecast your cash, find money that's safe to redirect, and surface the one move that helps most today.

We do not use your financial data for advertising, and we never sell or rent it.

Who we share it with

• Plaid, to connect your accounts (read-only) — governed by Plaid's own privacy policy.
• Our infrastructure providers (listed in 'Subprocessors' below) strictly to operate Advizel.

We never share your data with lenders, advertisers, or data brokers. We are not paid by any product Advizel might mention.

Subprocessors

We use the following service providers, each under a data-processing agreement:

• Plaid Inc. — bank connections, transaction sync. plaid.com/legal
• Supabase Inc. — encrypted database, authentication, edge functions. supabase.com/privacy
• Anthropic PBC — the AI advisor, receiving the anonymized financial context (no name, email, bank name, merchant name, or card issuer) and the questions you type. The app asks for your explicit permission before the first question is sent, and nothing is sent until you allow it. Anthropic does not use this data to train its models and processes it under a data-processing agreement that holds it to the same protections described in this policy. anthropic.com/privacy
• Resend — email delivery: verification and security alerts, replies to your support requests, a weekly review that includes your figures if you opt in, and an amount-free morning note on the rare day a push could not reach you. resend.com/legal/privacy-policy
• Expo (650 Industries) — delivers push notifications, receiving only your push token and the amount-free notification text. expo.dev/privacy
• Sentry — crash diagnostics, received already stripped of personal information. sentry.io/privacy

We will update this list if subprocessors change.

How it's protected

Your data is encrypted in transit (TLS) and at rest. Access is enforced per-user at the database layer, every sensitive action is logged, and Plaid access tokens are kept in an encrypted vault. Advizel is read-only by design — it cannot move money, which removes the worst-case risk entirely.

Your rights

• Access / export: you can export a copy of your data any time from Profile.
• Deletion: you can delete your account and all associated data from Profile; this disconnects your banks via Plaid and removes your stored data.
• Correction: you can edit your personal information from Profile at any time.
• Portability: your exported data is in plain JSON you can import elsewhere.

California residents (CCPA / CPRA)

If you live in California you have additional rights under the California Consumer Privacy Act, as amended by the CPRA:

• Right to know what personal information we collect, use, and share.
• Right to delete personal information we have collected about you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined under the CPRA, so there is nothing to opt out of.
• Right to limit use of sensitive personal information.
• Right not to be retaliated against for exercising any of these rights.

Email [email protected] to exercise any of these. We respond within 45 days as required.

Data retention

We keep transaction history on a rolling basis to power forecasting and remove it when it's no longer needed or when you delete your account. Security logs are kept as long as required for safety and compliance.

Children

Advizel is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 13 (COPPA) or under 16 without verification.

Where Advizel operates

Advizel is offered to US residents only. If you access Advizel from outside the United States, your information will be transferred to and processed in the US.

Changes to this policy

We may update this policy as Advizel evolves; we'll note a new effective date above, and for material changes we'll tell you in the app before they take effect.

Contact

Advizel is operated by Advizel LLC, a North Carolina limited liability company, and Advizel LLC is responsible for the data described in this policy. Mail reaches us at 3919 S Providence Rd Ste B PMB 1005, Waxhaw, NC 28173.

Questions about your privacy? Reach us from Profile → Contact support, or email [email protected].