Privacy Policy

Atrium Wealth Council ("we", "us", "our") provides a private AI-powered financial planning workspace. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We collect only what we need to operate the Service for you:

• Account data — name, email, hashed password, and authentication metadata.
• Financial profile — the figures, goals, and notes you enter (income, expenses, assets, debt, household, etc.).
• Documents you upload — stored privately in your encrypted bucket and only readable by you and the AI agent you ask to analyze them.
• Plans and check-ins — content you generate inside the Service.
• Billing data — handled by Stripe; we store only the customer and subscription identifiers, never your full card details.
• Technical logs — IP, browser, timestamps, and error traces used to keep the Service secure and reliable.

• To provide, personalize, and secure the Service.
• To generate AI plans, recommendations, and check-ins for you.
• To process payments and manage your subscription.
• To send transactional emails (account, billing, security, plan updates).
• To detect, prevent, and respond to fraud or abuse.
• To comply with legal obligations.

We do not sell your personal information. We do not use your financial data to train third-party AI models.

When you generate a plan or chat with an agent, the relevant inputs are sent to our AI provider strictly to produce that response. Inputs are processed under contracts that prohibit using your data to train foundation models. Outputs are stored privately in your account.

We share data only with vetted processors that help us run the Service:

• Hosting & database — Lovable Cloud (Supabase) for application hosting, authentication, storage, and Postgres database.
• Payments — Stripe for subscription billing.
• AI inference — model providers accessed via the Lovable AI Gateway under data-processing terms.
• Email delivery — for transactional and authentication emails.

We may also disclose information when required by law, to enforce our Terms, or to protect the rights and safety of our users.

Data is encrypted in transit (TLS) and at rest. Row-Level Security policies restrict every database read and write to the owning user. Files in our document storage buckets are private by default. We follow least-privilege access for our team and log administrative actions.

No system is 100% secure. If we ever experience a breach affecting your data, we will notify you in line with applicable law.

We retain your account and financial data for as long as your account is active. You can delete content at any time. When you delete your account, we remove or anonymize your personal data within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

Depending on where you live, you may have the right to:

• Access, correct, or export your personal data.
• Delete your account and associated data.
• Object to or restrict certain processing.
• Withdraw consent for optional processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@atriumwealthcouncil.com.

We use only the cookies and local storage required to keep you signed in and to remember basic UI preferences. We do not use third-party advertising or cross-site tracking cookies.

You can review and adjust your choices at any time on the Cookie Preferences page.

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect international transfers.

We will notify you of material changes in-app or by email. Continued use of the Service after the effective date means you accept the updated policy.

Questions or requests? Email privacy@atriumwealthcouncil.com.