Privacy Policy

1. Introduction

wealthmode ("we", "our", "us"), a service provided by DaCost Software, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

Account Information

• Email address
• Password (stored as a secure hash, never in plain text)
• Authentication tokens for connected services

Financial Data (via Plaid)

• Bank account names and types
• Transaction history (merchant, amount, date, category)
• Account balances

We do NOT have access to your bank login credentials - Plaid handles authentication securely.

User-Generated Content

• Custom categories and budgets
• Transaction notes and tags
• Account nicknames

Payment Information (via Stripe)

• Stripe processes and stores your payment details
• We only receive: last 4 digits, card brand, expiration date, billing postal code

We never see or store your full card number.

Feedback You Send Us

• The message you write, stored on our own systems
• Which page you were on when you sent it

When you send feedback there is a box asking whether we may email you about it. Leave it ticked and we store your message alongside your account so we can reply. Untick it and we store no link to your account at all, which means the message is anonymous and we have no way to write back.

Usage & Analytics Data

• Basic server logs (IP address, browser type, pages visited)
• Product analytics: pages viewed, features used, and a randomly generated account identifier
• Error and performance reports for debugging

We collect this through third-party tools (Google Analytics, PostHog, and Sentry). We never send your financial data - account balances, transaction amounts, merchant names, or descriptions - to these tools.

3. How We Use Your Information

• To provide and maintain the Service
• To process transactions and subscriptions
• To communicate with you about your account
• To improve and personalize the Service
• To detect and prevent fraud
• To send product updates, tips, occasional offers, and feedback requests (you can opt out anytime in your email preferences)

4. How We Share Your Information

We do NOT sell your data. Ever.

We share data only with:

• Plaid - To connect your bank accounts (read-only access)
• Stripe - To process payments
• Google Analytics & PostHog - Product and usage analytics (no financial data)
• Sentry - Error and performance monitoring
• Email delivery provider - To send account, security, and product emails on our behalf
• Advertising partners (e.g., Meta) - When we run advertising campaigns, we may use measurement tools such as the Meta Pixel on our public marketing pages to understand ad performance. These tools are not active on pages where you view your financial data.
• Law enforcement - Only if legally compelled with valid legal process

Some of this sharing for advertising may be considered "sharing" under California law. See Sections 5 and 9 for your cookie choices and how to opt out.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for two purposes:

Essential Cookies

Required for the Service to work - for example, the secure, HTTP-only cookie that keeps you signed in. These cannot be turned off without breaking core functionality.

Analytics & Advertising Cookies

PostHog and Google Analytics track how you use the Service. When you first visit, you will be asked whether to allow analytics and advertising pixels. Advertising partners such as Meta, Google Ads, and Reddit may set cookies (for example, _fbp) on our public marketing pages to measure ad performance and optimize campaigns. These are not essential, and you can opt out at any time.

Your Choices

• Global Privacy Control (GPC): We honor the GPC browser signal as a valid opt-out of sharing for advertising.
• Do Not Track: Our analytics respect your browser's Do-Not-Track setting.
• Browser controls: You can block or delete cookies in your browser settings; note that essential cookies are required to stay signed in.
• Opt out of advertising sharing: Email [email protected] or use the "Do Not Sell or Share My Personal Information" option in Section 9.

6. Data Storage & Security

• Personal data encrypted at rest (AES-256) and all data encrypted in transit (TLS 1.3)
• Database access restricted to application only
• Regular security updates and dependency monitoring
• No storage of bank credentials (Plaid handles authentication)

Your data is stored on secure servers located in the United States.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Your account and user-generated data are permanently removed within 30 days
• We retain anonymized, aggregated data that cannot identify you
• Backup copies are purged within 90 days

8. Your Rights Under PIPEDA (Canadian Users)

As a Canadian resident, you have the following rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of Consent: Withdraw consent for data processing (may limit service functionality)
• Deletion: Request deletion of your personal information
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada

Our Privacy Officer is responsible for our compliance with privacy laws. To exercise these rights: Email [email protected] with your request. We will respond within 30 days.

9. Your Rights Under CCPA (US/California Users)

For US Residents (including California):

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We may "share" limited analytics and advertising identifiers (for example, through advertising cookies) for cross-context behavioral advertising, as "sharing" is defined under the CPRA. You can opt out of this at any time.
• Right to Non-Discrimination: We won't treat you differently for exercising these rights

Do Not Sell or Share My Personal Information: To opt out of sharing for advertising, email [email protected] or enable Global Privacy Control (GPC) in your browser - we treat a GPC signal as a valid opt-out request.

California residents may submit requests via [email protected].

10. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm:

1. We will notify you via email as soon as feasible
2. We will notify the Privacy Commissioner of Canada as required by law
3. We will provide: Description of the breach, types of data affected, steps we're taking, steps you can take to protect yourself

11. Children's Privacy

WealthMode is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

12. International Users

If you are accessing the Service from outside Canada or the United States, please be aware that your information may be transferred to, stored, and processed in these countries where our servers are located. By using the Service, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use of the Service after changes indicates acceptance of the updated policy.

14. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights, you may contact our Privacy Officer at:

[email protected]

DaCost Software
100 Main St E Unit 202 #3017
Hamilton, ON, Canada, L8N 3W4