Privacy Policy
Last updated September 5, 2026
Who we are
Worthwise is a product operated by Buildware ("Buildware," "we," "us," or "our"). Buildware is the data controller for purposes of this Privacy Policy.
Worthwise is operated from the United States, and your data is stored and processed there, with the providers listed below, wherever you live. If you are in Canada, that means your personal information leaves Canada and is subject to U.S. law while it is held here.
Contact: help@worthwise.money
Information we collect
We collect the following categories of information:
Information you provide
- Phone number (in E.164 format)
- Email address (entered on the Stripe checkout page when you subscribe, along with your choice on whether to receive promotional emails from us)
- Payment method details (handled by Stripe; we do not store card numbers)
- Messages you send to Worthwise
- Voice notes you choose to send (see Voice notes below)
- Public crypto wallet addresses you paste for tracking
- A read-only Kalshi API key, if you connect Kalshi (stored encrypted)
- Your partner's phone number, if you send a couples invite
- Settings you configure (cadence, day, time, timezone)
Information from your linked accounts (via Plaid)
- Account names, types, and institutions
- Account balances and balance history
- Account identifiers from your financial institutions
We also receive transaction data (merchant, amount, date, and category) for connected accounts, which is what powers spending answers, large-purchase alerts, subscription detection, and your monthly recap. Disconnecting an account deletes its transaction data, and deleting your account deletes all of it. We do not collect your Social Security number, full account numbers, or login credentials for your financial accounts (those stay with Plaid).
Information you add manually
If you add accounts manually (for institutions Plaid can't reach) or use the AI screenshot import, we store the account name, type, balance, and any holdings you enter (ticker symbols, share counts, and prices). Screenshots and pasted text you upload to the AI importer are sent to Anthropic for one-time extraction and are not retained by Worthwise after the proposal is generated.
Information collected automatically
- IP address and user-agent for web visits
- Message delivery metadata from our messaging provider. Your number is verified by the act of texting us; we do not send phone-verification codes.
- Operational logs (rate limits, error traces)
- On our marketing site: analytics and advertising measurement (Vercel Analytics, Google Ads, Reddit Ads) used to count visits and ad conversions. These never see your financial data.
How we use your information
We use your information to:
- Provide net worth summaries and answer your questions about your accounts
- Share net worth totals with your linked partner, if you both turn on couples mode
- Send scheduled SMS, RCS, or iMessage updates
- Process subscription payments via Stripe
- Communicate with you about service changes, security, or support
- Send occasional product-update emails — only if you opted in via the checkbox at checkout. Every promotional email includes an unsubscribe link, and unsubscribing takes effect immediately. Emails about your account itself (billing, security, legal notices) may still be sent regardless of this choice.
- Comply with legal obligations
- Detect and prevent fraud, abuse, or unauthorized access
We do not sell your information. We do not share your information with third parties for their advertising or marketing.
Sharing with third parties
We share information with the following providers strictly to operate Worthwise:
| Provider | Purpose | Information shared |
|---|---|---|
| Plaid | Read-only bank account linking and balance refresh | Phone number, encrypted account access tokens |
| Stripe | Subscription payment processing | Email, payment method, subscription status |
| Photon | iMessage / SMS delivery — scheduled updates and conversational replies | Phone number, message content |
| Telegram | Message delivery, if you link Telegram as a channel | Telegram chat ID, message content |
| Resend | Email delivery for product updates and account communications | Email address and your promotional-email opt-in / opt-out status |
| Anthropic (Claude) | AI-powered conversational responses and extraction of accounts from uploaded screenshots | Aggregate financial context (balances, account names, deltas). For AI import: the screenshot or text you upload, sent for one-time extraction. Subject to a data-processing agreement; Anthropic does not retain or train on this data. |
| HeyCatch | Website analytics: which pages visitors look at, and which ad brought them here. The marketing site only, never inside your Worthwise thread. | Page views, the campaign you arrived from, and general device and browser information. No financial data, and we don't send your name or email address. |
| Twelve Data | Stock, ETF, and mutual-fund price data for manually-added investment holdings | Ticker symbols only. No user identity, account information, or balances are sent. Refresh runs once daily and on user-initiated ticker searches. |
| Kalshi | Reading your event-contract portfolio, if you connect Kalshi | Your read-only API key, used to fetch your positions |
| Polymarket | Reading positions for a wallet you asked us to track | The public wallet address only |
| Blockchain data providers (Blockchair, Solana) | Reading balances of crypto wallets you add | The public wallet address only |
| Speech-processing provider | Transcribing voice notes you send; generating spoken replies you ask for | The audio of that voice note, or the text of that one reply |
| Google Ads / Reddit Ads | Advertising measurement on our marketing site | Conversion events (for example, that a checkout completed). No financial account data. |
| Convex | Database and scheduled jobs | All operational data |
| Vercel | Web hosting | Standard hosting telemetry (IP, request paths) |
We do not send full account numbers or login credentials to Anthropic or any AI provider.
AI processing of your financial data
Worthwise uses Anthropic's Claude API to generate conversational responses about your accounts. We send the context needed to answer your question: current net worth, recent snapshots, account names and types, period-over-period changes, and, when transaction tracking is on, spending summaries plus the merchant names and amounts of recent and large transactions. We never send full account numbers or credentials. Per our data-processing agreement with Anthropic, this data is not retained by Anthropic and is not used to train any AI model.
Voice notes
If you send Worthwise a voice note, the audio goes to a speech-processing provider once, to transcribe it so Worthwise can answer. The transcript then follows the same rules as any text you send. If you ask for a spoken reply, that reply's text is converted to audio the same way. Your voice is not used for anything else.
Couples mode and group chats
If you and a partner both agree to link, each of you can see the other's net worth total and your combined figure. Account-level detail is never shared between partners. In a group chat that includes Worthwise, replies are visible to everyone in that chat and are limited to combined totals. Either partner can end the link at any time by text, which stops the sharing immediately.
Chart links
If you ask for a chart, we generate it at a private, unguessable link that expires on its own. Anyone who has the link can view that chart until it expires, so share it the way you would share the number itself.
Data retention
- Account and balance data: retained while your account is active.
- Conversation history: retained for up to 24 months, then purged.
- Payment records: retained as required by tax and accounting laws (typically 7 years).
- Internal audit logs of administrative access to your data: retained for 7 years.
When you delete your account, we revoke Plaid access tokens, cancel your Stripe subscription, remove your email address from our email provider, and purge your data from our systems within 30 days, except where retention is legally required.
Your rights
Subject to applicable law (CCPA / CPRA in California, similar regimes in other states, and PIPEDA and Quebec's Law 25 in Canada), you have the right to:
- Access your data — request a JSON export of everything we hold on you
- Delete your data — email help@worthwise.money
- Correct inaccurate data
- Opt out of text messages by replying STOP, and of promotional emails via the unsubscribe link in any such email
- Pause updates without deleting your account
To exercise these rights, contact help@worthwise.money. If you are in Canada and are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to your provincial privacy commissioner.
Security
We protect your data with:
- Application-layer AES-GCM 256-bit encryption of Plaid access tokens at rest, on top of platform-level encryption at rest
- TLS 1.2+ for all data in transit
- Audit logging of internal access to user data
- Mandatory two-factor authentication on all admin consoles
- Annual security reviews and least-privilege access controls
No system is perfectly secure. If we detect a breach affecting your data, we will notify you within 72 hours.
Children's privacy
Worthwise is not intended for users under 18, and we do not knowingly collect data from anyone under 18.
Changes to this policy
We may update this Privacy Policy. When we do, we will post the updated policy here with a revised "Last updated" date. For material changes, we may provide additional notice, such as SMS. Continued use of Worthwise constitutes acceptance of the updated policy.
Contact
Privacy questions or rights requests: help@worthwise.money
Questions? help@worthwise.money