Privacy Policy

WEALTH OS™ ("we", "us", "our") is operated by Taylor Smith & Co. This policy explains what personal and business data we collect through the WEALTH OS™ platform, why we collect it, and the choices and rights you have over it.

If you're a client of one of our business customers (for example, your accountant or coach uses WEALTH OS™ to manage your account), your relationship for data purposes is with that business, not with us directly — please contact them first with any questions about your data.

1. What we collect

• Account information — business name, email address and/or account name, and password (stored as a salted hash, never in plain text).
• Financial data — profit & loss, cash flow, deals, client/contact records, goals, and any figures you enter manually, upload via spreadsheet, or sync from QuickBooks or Xero.
• Connected-account credentials — if you connect QuickBooks, Xero, or Stripe, we store an access token for that connection, encrypted at rest. We never see or store your QuickBooks/Xero/Stripe login password itself — that exchange happens directly with them.
• Communications — if you use the built-in AI assistant ("Jackie"), your questions and the financial context needed to answer them are sent to our AI provider to generate a response (see Section 3).
• Technical data — IP address and basic request logs, kept only as long as needed for security and abuse prevention (e.g. rate-limiting).

We don't use advertising trackers, analytics scripts, or third-party cookies. The only cookie this app sets is a session cookie needed to keep you logged in.

2. Why we collect it

We process this data to provide the service you've signed up for: to generate your dashboards, reports, and forecasts; to keep your account secure; to send password-reset emails when you request one; and to respond to support requests. Our legal basis is performance of our contract with you, and our legitimate interest in operating and securing the platform.

3. Who we share it with

We don't sell your data. We share it only with the service providers ("sub-processors") that power specific features of WEALTH OS™, and only the data each one needs to do its job:

• Intuit QuickBooks / Xero — only if you choose to connect them, to sync your accounting data.
• Stripe — only if you choose to connect it, to import your own client payment records.
• OpenAI — powers the "Jackie" AI assistant. Relevant financial context and your question are sent to generate a response.
• Resend — sends transactional emails (currently: password reset links).
• Railway — our hosting provider. Our database is hosted in the EU (Amsterdam).

Some of these providers are based outside the UK/EEA (for example, the US). Where that's the case, we rely on the safeguards those providers offer for international transfers, such as Standard Contractual Clauses. We may also disclose data if required by law.

4. How we protect it

Connected-account access tokens are encrypted at rest. Passwords are hashed, never stored in readable form. The application enforces HTTPS and standard web security headers. Access to your account data is scoped to your account only — other businesses using WEALTH OS™ cannot see it.

5. How long we keep it

We keep your data for as long as your account is active. If you close your account or ask us to delete your data, we'll delete it within a reasonable time, except where we're required to retain something for legal or accounting reasons.

6. Your rights

Under UK GDPR, you have the right to access the personal data we hold about you, ask us to correct or delete it, object to or restrict certain processing, and request a copy in a portable format. To exercise any of these, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe your data hasn't been handled properly.

7. Children

WEALTH OS™ is a business tool and isn't intended for use by children. We don't knowingly collect data from anyone under 18.

8. Changes to this policy

We may update this policy as the platform evolves. If we make material changes, we'll update the date at the top of this page.

9. Contact us

Questions about this policy or your data can be sent to taylor@taylorsmithandco.com.