Privacy Policy

My Wealth Maps is operated by My Wealth Maps LLC, a Washington State company ("My Wealth Maps," "we," "us," or "our"). We provide estate and financial planning preparation tools at mywealthmaps.com to consumers, financial advisors, and estate attorneys.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have. We extend the privacy rights described in Section 7 to all United States residents, regardless of whether your state of residence has a law requiring them. State-specific addenda appear at the end of this Policy.

Contact: privacy@mywealthmaps.com

Mailing address: 22033 Echo Lake Rd, Snohomish, WA 98296

Information you provide directly:

• Account information: name, email address, password
• Household financial data: assets, income, expenses, liabilities, real estate, business interests, insurance policies, gift history, trust structures
• Family information: household member names, birth years, relationships, beneficiary designations
• Planning preferences: domicile state, filing status, retirement goals, and related planning inputs
• Communications: messages to support, feedback, and privacy-rights requests

From advisors and attorneys:

When a professional invites or collaborates with a household you authorize, we process the data necessary to provide that collaboration.

Information collected automatically:

• Usage data: pages visited, features used, and general interaction with the Service
• Device information: browser type, operating system, and IP address
• Cookies and similar technologies: session management and preferences (see Section 11)

Information from third parties:

• Payment information: processed by Stripe — we do not store full card numbers
• Advisor and attorney connections: limited profile information when you connect with a professional, as described in Section 5

We use personal data to:

• Provide, operate, and improve the Service, including estate-tax and planning calculations
• Display your household financial picture and planning readiness
• Enable advisor and attorney collaboration you authorize
• Process payments, manage subscriptions, and send transactional emails (confirmations, receipts, renewal reminders required by law, security alerts)
• Send marketing communications when you have consented (you may withdraw consent at any time)
• Maintain security, prevent fraud, and comply with legal obligations

We do not:

• Sell your personal information
• Share your data with advertisers or use it for cross-context behavioral advertising
• Use your financial data to train AI models
• Use your data for profiling that produces legal or similarly significant effects

We process personal data to deliver the Service you request, to meet our legal obligations (including tax and billing record retention and breach notification), to protect the Service and our users, and — for marketing communications only — based on your consent, which you may withdraw at any time.

With advisors and attorneys you connect:

When you invite an advisor or attorney and they accept, they can view your household financial data within the platform. You control these connections and can revoke access from your account settings.

With service providers (data processors):

• Supabase: database and authentication (United States)
• Vercel: application hosting (United States)
• Stripe: payment processing (does not receive your financial planning data)
• Resend: transactional and marketing email delivery
• Sentry: error monitoring (errors only; we configure Sentry not to collect personal information by default)

Each provider processes data on our behalf under a Data Processing Agreement or equivalent contractual terms. We do not authorize them to use your data for their own purposes.

We do not sell or share personal information for cross-context behavioral advertising. We do not share your data with other third parties except:

• When required by law, court order, or government request
• To protect the rights, property, or safety of My Wealth Maps or our users
• In connection with a merger or acquisition (you will be notified)

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your personal information at any time through Settings → Security → Delete account (or by emailing privacy@mywealthmaps.com).

Where you or we terminate your account, or where we discontinue the Service, we will retain your data for at least 30 days from the effective date of closure or the discontinuation notice to allow export (including via Settings → Security → Download my data while the account remains reachable), after which we may delete it, subject to any retention required by law or for legitimate compliance recordkeeping — for example, billing records (retained 7 years per IRS requirements) and a minimal deletion audit record (your account identifier, email, and record counts) retained to evidence that a deletion was performed. We honor access and deletion rights provided under applicable Washington law and under the California Consumer Privacy Act as amended, regardless of your account status.

Free-tier inactivity deletion (separate from account-closure export): If your account is on the free tier with no active paid subscription and no professional connection covering your access, we may permanently delete your account and associated planning data 90 days after the free-tier clock starts. The clock starts at account creation for never-subscribed accounts, or when paid or professional coverage ends (for example, after a cancelled subscription period ends or a professional drops the connection) for accounts that previously had coverage. Before deletion, we send email notices at approximately 60, 75, and 89 days. If those notices cannot be confirmed as sent, we do not delete on that schedule. Deletion is permanent except for records retained as described above. This 90-day free-tier path is distinct from the 30-day export window that applies when you delete your account or when we discontinue the Service.

Professional-drop access retention: When a professional ends a connection that covered your access, you keep your existing access for a 7-day retention window. Before that window closes, we send advance email notices to the address on your account. After the window, access ends unless you resubscribe, and free-tier inactivity rules may apply.

Before free-tier inactivity deletion, and before any change that ends your access, we send advance email notices to the address on your account. For free accounts, we send reminders at approximately 60, 75, and 89 days after the free-tier clock starts (about 30 days, 15 days, and 1 day before deletion). When a professional connection ends, we notify you before your retention window closes.

If we discontinue the Service, we will make reasonable efforts to notify active account holders in advance and to provide a window during which you may export your data, as described in our Terms of Service. After the export window closes, we may delete data in accordance with this Privacy Policy and applicable law. Where your account is connected to a household, an advisor, or an attorney, each party may export the data attributable to their own account; a connected household's information remains subject to that household's rights.

Anonymized, aggregated data not linked to you may be retained for product improvement.

Every United States resident may request the following, subject to identity verification:

• Access / Know: what personal data we process about you
• Correction: fix inaccurate personal data
• Deletion: delete your personal data
• Portability: receive your data in a structured, commonly used, machine-readable format
• Opt-out of sale and sharing: we do not sell or share personal information; you may still submit an opt-out request
• Opt-out of targeted advertising: we do not use personal data for targeted advertising
• Opt-out of profiling: we do not perform profiling that produces legal or similarly significant effects
• Withdraw consent to marketing emails at any time
• Appeal: if we decline a request, as described in Section 8

You can export your raw account data at any time while your account is active, at no charge, through Settings → Security → Download my data (JSON via GET /api/consumer/data-export). This right is not conditioned on holding any paid subscription. Generated Estate Plan PDFs and similar paid deliverables require an active Estate subscription.

To exercise formal privacy rights (including verified access, correction, deletion, and portability requests), submit a request in-app (Settings → Security → Privacy Rights) or email privacy@mywealthmaps.com. We fulfill verified requests — including providing your data in a structured, machine-readable format — within 45 days, with one 45-day extension where reasonably necessary. You will receive a confirmation email with a reference ID. We will not charge a fee for up to two requests per 12-month period. Instant Download my data does not replace that formal path when you need a verified rights request.

Authorized agents: you may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

We will not discriminate against you for exercising your privacy rights.

If we decline to act on a privacy request, we will explain why in our response and tell you how to appeal. To appeal, reply to your confirmation or decision email or email privacy@mywealthmaps.com with your reference ID.

We will respond to an appeal in writing within 60 days. If we deny your appeal, we will explain the reason and provide information on how to contact your state Attorney General or other applicable regulator.

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including:

• Encryption in transit: TLS 1.2+ on all connections
• Encryption at rest: AES-256 via Supabase (Postgres)
• Access controls: row-level security policies on database tables
• Authentication: email verification and optional two-factor authentication
• Session management: short-lived tokens with automatic refresh

No method of transmission or storage is perfectly secure. If you believe your account has been compromised, contact security@mywealthmaps.com immediately.

In the event of a data breach affecting your personal information, we will notify you without unreasonable delay and in accordance with applicable law, including Washington RCW 19.255.010 (within 30 days of discovery where that statute applies). If a breach affects more than 500 Washington residents, we will also notify the Washington Attorney General. We will comply with breach-notification laws of your state of residence as applicable.

We use cookies and similar technologies for:

• Session management: keeping you logged in
• Security: CSRF protection
• Preferences: remembering your settings

We do not use advertising cookies or third-party tracking pixels for cross-context behavioral advertising. You can control cookies through your browser settings; disabling cookies may prevent some features from working correctly.

We do not sell or share your personal information or use it for cross-context behavioral advertising. As a result, a Global Privacy Control (GPC) or other universal opt-out signal requires no additional action on our part — there is no sale or sharing to opt out of. We detect these signals and, should our practices ever change, we will honor them as a valid opt-out.

The Service is intended only for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such data, we will delete it. Contact privacy@mywealthmaps.com if you believe a minor has provided us with personal information.

We may update this Privacy Policy from time to time. We will post changes here with an updated version and effective date. Material changes will be communicated by email or platform notice at least 30 days before the effective date where required by law. Continued use after the effective date constitutes acceptance where permitted.

Privacy questions: privacy@mywealthmaps.com

Security concerns: security@mywealthmaps.com

Mailing address: 22033 Echo Lake Rd, Snohomish, WA 98296

Washington State registered agent: Alan Voels, 22033 Echo Lake Rd, Snohomish, WA 98296

The privacy rights in Section 7 apply to all United States residents. The addenda below provide additional disclosures required or customary in certain states. They do not limit the rights granted in the main Policy.

Notice at Collection: The categories of personal information we collect and the purposes for which we use them are described in Sections 2 and 3 of this Policy.

We do not sell or share personal information, and we do not use sensitive personal information beyond what is necessary to provide the Service.

California residents may exercise the rights in Section 7, including opt-out of sale or sharing (though we do not sell or share), via the in-app form or privacy@mywealthmaps.com. Universal opt-out signals such as Global Privacy Control are described in Section 11 — we do not sell or share personal information, so no additional opt-out action is required.

We will not discriminate against you for exercising your privacy rights. California residents may use an authorized agent to submit a request; we may require proof of authorization and may require you to verify your identity directly.

Shine the Light: California Civil Code § 1798.83 permits California residents to request certain information regarding disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing purposes.

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Oregon, Texas, Virginia, and others with similar frameworks) have the access, correction, deletion, portability, opt-out, and appeal rights described in Sections 7 and 8. We detect universal opt-out signals such as Global Privacy Control as described in Section 11. We do not sell personal data or use it for targeted advertising.

The Service is intended only for adults 18 and older. Where applicable state law restricts the sale of personal data or targeted advertising relating to consumers aged 13–17, we do not engage in such processing because we do not sell data or use it for targeted advertising.

Automatic renewal: Washington RCW 19.316 subscription disclosures appear in our Terms of Service (Section 5.2) and in pre-checkout and pricing-page billing disclosures.

Data breach notification: Washington RCW 19.255.010 requirements are described in Section 10 of this Policy.

Consumer health data: My Wealth Maps LLC provides estate and financial planning tools. We do not collect consumer health data as defined under Washington's My Health My Data Act unless you voluntarily enter health-adjacent information in free-text fields. If our data practices change, we will publish a separate Consumer Health Data Privacy Policy and obtain any required consent before collecting consumer health data.

Washington registered agent: 22033 Echo Lake Rd, Snohomish, WA 98296.