Privacy Policy

Account information: your email address (or, if you sign in with Google, your Google account identifier), and a display name if you choose to set one.

Your investing profile: the goal, time horizon, risk tolerance, experience level, investable amount, and how you heard about Nuvest, which you provide during onboarding or a per-chat setup — used to personalize the assistant's answers.

Your conversations: every message you send and every response the assistant generates, stored so your chat history is available the next time you sign in.

Account settings: your chosen persona, theme, and language preference.

Subscription and billing status: whether your account is in a trial, active, past-due, or canceled — not your card number or other payment details, which Stripe handles directly (see "Who we share it with" below).

Only if you explicitly opt in from Settings (off by default, and only offered to accounts we detect as located in the United States): your self-reported age range, and your general region (state-level, derived from your IP address at the moment you opt in — never a precise location).

To operate the Service: generating personalized responses, remembering your conversation history and preferences across sessions, and gating access based on your subscription status.

To communicate with you: a one-time sign-in code, a trial-ending reminder, or a reply to a support request you submitted.

We do not use your conversations to show you advertising, and we never sell or share your individually identifiable information — your name, email, account, or conversation content — with anyone, for any purpose.

Aggregated insights (only from accounts that explicitly opt in, entirely optional, and off by default): if you turn this on in Settings, your age range, region, and investing-profile answers (goal, risk tolerance, experience, amount, referral source) are included in an aggregated, cohort-level dataset — for example, "18% of opted-in users aged 25–34 cite retirement as their goal." We may share statistics like this with financial institutions, such as banks or retirement-plan providers, so they can build better products for people like you, and to help keep Nuvest free. This is never a per-person record — no name, email, conversation content, or anything else that could identify you individually is ever included, and any group small enough that its members might be identifiable is excluded entirely. You can turn this on or off anytime from Settings, and turning it off takes effect immediately.

Financial incentive disclosure: accounts that have not opted into the aggregated-insights program above are limited to 5 chat messages per rolling 24-hour period; opting in removes that limit. This price/service difference is directly related to the value the aggregated data provides in helping keep the Service free, and applies only to that limit — nothing else about the Service differs based on your choice. You can opt in or out at any time from Settings, with no effect on any other part of your account.

Anthropic: your conversation content is sent to Anthropic's API to generate the assistant's responses. Anthropic processes this as our service provider, under its own data-processing terms.

Stripe: if you subscribe, your billing information is handled entirely by Stripe. We never receive or store your card number — only your subscription's status (active, past-due, canceled) and Stripe's own customer/subscription identifiers.

Google: if you sign in with Google, Google authenticates you and shares your account identifier and email with us.

Resend: the service we use to send transactional email (sign-in codes, trial reminders, support replies).

Finnhub: if you ask about a specific stock or crypto price, your question's ticker symbol (not your identity or account information) is sent to Finnhub to retrieve a live quote.

VirusTotal: only relevant to documents an administrator uploads to the knowledge base, scanned for malware before use — not something a regular user's data ever passes through.

Google Analytics: anonymized, aggregate usage analytics — which pages get visited and roughly how often. We never send it anything that identifies you personally (no name, email, or account ID), and Google's ad-personalization and cross-site "Google Signals" features are turned off for this data.

Financial institutions, only from the aggregated, opt-in program described in "How we use it" above: aggregated, cohort-level statistics computed only from accounts that explicitly opted in — never your name, email, individual profile, or conversation content.

Outside of that opt-in program, we do not sell or rent your personal information to any third party for their own marketing purposes.

We use two kinds of strictly functional cookies: one that keeps you signed in (without it, the Service can't recognize your session at all), and one that remembers your language preference. We also use Google Analytics, which sets its own cookies to distinguish one visit from another for basic usage analytics (how many people visit, which pages, roughly how often) — not for advertising or cross-site tracking. We never send Google Analytics anything that identifies you personally, and we've turned off Google's ad-personalization features for this data.

Your profile, settings, and conversation history are kept for as long as your account exists.

If your subscription lapses (canceled, or a trial that ends without you ever subscribing) and stays that way, your account's data is automatically and permanently deleted 90 days later — see our Terms for the subscription details this relates to.

Administrative activity logs (sign-ins, admin actions — never the content of what you type) are kept for 90 days and then automatically deleted.

The Service is not directed at, and is not intended for use by, anyone under 18 years old, consistent with our Terms' eligibility requirement. We do not knowingly collect personal information from children.