Privacy Policy

Vestie, Inc. ("Vestie," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website, mobile app, and related services (collectively, the "Services"). By using our Services, you agree to the terms of this Privacy Policy and our Terms of Service.

1. Information We Collect

Personal Information

We collect personal information you voluntarily provide, including:

• Name
• Email address
• Bank account metadata (via Plaid), including institution name, account ID, and access tokens

Non-Personal Information

We also collect non-personal information such as:

• Device type, browser, and OS
• Usage statistics
• Referring URLs
• IP address
• Cookies and analytics data (e.g., via Google Analytics)

2. How We Collect Information

Firebase Authentication is used to collect and manage login credentials.

Plaid is used to connect to and access your financial account data. By using the Plaid integration, you grant us permission to retrieve and store relevant information needed to support investment activities.

Cookies are used to track usage patterns, maintain sessions, and improve our site and app experience. You can control or disable cookies through your browser settings.

Google Analytics is used to monitor and analyze usage trends. Data collected is anonymized and used solely for product improvement.

3. How We Use Information

We use your information to:

• Provide, personalize, and improve the Services
• Develop and support upcoming product features, including auto-invest
• Communicate with you about updates, security issues, or support needs
• Monitor usage and detect abuse or suspicious activity

4. How We Share Information

We do not sell your personal data. We may share information:

• With trusted vendors (e.g., Plaid, Firebase, DriveWealth) under strict confidentiality
• As required by law or government request
• To investigate fraud, abuse, or security concerns
• In connection with a merger or acquisition of Vestie

5. Data Retention and Deletion

We retain user data only as long as necessary to provide our Services. You may request deletion of your account and associated data by emailing us at hey@vestie.com. Data will be deleted securely in compliance with applicable laws.

6. Children's Privacy

Our Services are not intended for individuals under the age of 13. We do not knowingly collect data from children. If we learn that we have inadvertently collected such data, we will promptly delete it.

7. Security

We use technical and administrative measures to safeguard your data:

• Encryption of data in transit and at rest (e.g., AES-256, TLS 1.2+)
• Secure authentication (via Firebase Auth)
• Access control and role-based permissions

However, no system is 100% secure. By using our Services, you accept this risk.

8. Your Rights

You may:

• Access or update your personal information
• Request deletion of your data
• Opt out of marketing communications at any time

Contact us at hey@vestie.com to exercise your rights.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice within the app. Continued use of the Services indicates your acceptance.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: hey@vestie.com

Incorporated in: Delaware, USA