Privacy Policy
How WealthStream collects, uses, stores, shares, and protects data
Effective September 25, 2026 · Last updated September 25, 2026
This Privacy Policy tells you how WealthStream, Inc. (“WealthStream”, “we”, “us”) collects, uses, stores, shares, and protects data. It applies to the WealthStream platform, our website at thewealthstream.com, and related services (the “Service”).
WealthStream is a multi-tenant software platform for wealth management firms and financial advisors. Firms that use the Service are our “Customers”. People who use the Service for a Customer are “Users”.
When a Customer puts data about its own clients into the Service, the Customer controls that data. We process it for the Customer and only as our agreement with the Customer permits.
2.1 Data you give us
Account data: name, work email address, firm name, role, and sign-in credentials.
Customer content: data that you or your firm put into the Service. This can include client names, contact details, household data, account and portfolio data, notes, and documents.
Support data: data that you send to us when you ask for help.
2.2 Data from connected services
Google Calendar: if you connect your Google account. Section 3 gives the full details.
Other integrations: data from other systems that you or your firm connect, for example a CRM or a custodian. We get only the data that the connection permits.
2.3 Data we collect automatically
Usage data: pages and features that you use, times, and actions in the Service.
Device and log data: IP address, browser type, operating system, and error logs.
Cookies: we use necessary cookies to keep you signed in and to keep the Service secure. We do not use cookies for advertising.
Limited Use disclosure. WealthStream’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3.1 What we access
If you connect your Google account, you permit WealthStream to access your Google Calendar data. This data can include:
Calendar events: title, date, time, duration, location, description, and conferencing link.
Event attendees: names and email addresses.
Your Google account email address, to show which account you connected.
We ask only for the calendar permissions that the features you use need. The Google consent screen shows these permissions before you agree.
3.2 How we use it
We use Google Calendar data only to give you features that you can see in the Service:
Show your upcoming client meetings in WealthStream.
Link calendar events to the related client or household record.
Help you prepare for meetings and follow up after meetings.
If you tell the Service to do so, create or update events on your calendar.
3.3 What we do not do
We do not sell Google user data.
We do not use Google user data for advertising, including retargeting or interest-based ads.
We do not use Google user data to find creditworthiness or for lending purposes.
We do not send Google user data to AI or machine-learning models, and we do not use it to develop, improve, or train AI or machine-learning models.
We do not let humans read Google user data, except: (a) when you give us permission for specific data, (b) when it is necessary for security, for example to investigate abuse, (c) when the law requires it, or (d) when the data is aggregated and anonymized for internal operations.
3.4 How we store and share it
We store Google user data on Amazon Web Services (AWS) in the United States. We encrypt it in transit and at rest.
We transfer Google user data only to give or improve user-facing features, to obey the law, for security, or as part of a merger, acquisition, or sale of assets with notice to you.
Our infrastructure provider (AWS) processes the data only for us and only under contract.
3.5 How to remove access and delete data
You can disconnect Google Calendar at any time in WealthStream settings.
You can also remove access at myaccount.google.com/permissions.
When you disconnect, we delete the stored access tokens immediately. We delete the Google Calendar data that we copied within 30 days, unless the law requires us to keep it.
To ask for deletion, send an email to privacy@thewealthstream.com.
We use data to:
Supply, operate, and maintain the Service.
Authenticate Users and keep accounts secure.
Give support and send service messages, for example security alerts and billing notices.
Monitor performance, find errors, and improve the Service.
Prevent fraud and abuse.
Obey laws and regulations, and enforce our agreements.
We do not sell personal data. We do not use Customer content for advertising.
Some WealthStream features use AI models that operate on Amazon Bedrock inside our AWS environment. These features can process Customer content that you give them, for example to write a summary.
AI features do not receive Google user data. Section 3.3 applies.
Our AI providers do not use your data to train their models.
You must review AI output before you use it. AI output is not financial, legal, or tax advice.
We share data only in these cases:
We give a list of our subprocessors to Customers when they ask.
We keep account data while your account is active.
We keep Customer content as the Customer agreement specifies. When the agreement ends, we delete or return Customer content within 90 days, unless the law requires us to keep it.
We keep logs for a limited time for security and troubleshooting.
Section 3.5 gives the retention rules for Google user data.
We use administrative, technical, and physical controls to protect data. These controls include:
Encryption in transit (TLS) and at rest.
Separation of each Customer’s data in our multi-tenant platform.
Role-based access, least-privilege access, and multi-factor authentication for our staff.
Logging and monitoring of access to production systems.
No system is 100% secure. If a breach affects your data, we will tell you and your firm as the law requires.
You can see and change your account data in the Service.
You can disconnect Google Calendar and other integrations at any time.
Based on where you live, you can have the right to access, correct, delete, or get a copy of your personal data, and the right to object to some processing. California residents have rights under the CCPA/CPRA.
If your data is Customer content, send your request to the firm that uses WealthStream. We help that firm to answer.
To make a request, send an email to privacy@thewealthstream.com. We will verify your identity before we act. We will not discriminate against you because you use these rights.
The Service is for business use. It is not for children under 16. We do not knowingly collect data from children through the Service.
We operate in the United States and store data in the United States. If you use the Service from another country, your data goes to the United States. We use appropriate safeguards for these transfers when the law requires them.
We can change this policy. We will put the new version on this page and change the “Last update” date. If we make an important change, especially to how we use Google user data, we will tell you in the Service or by email before the change starts. When the law requires it, we will ask for your consent again.
WealthStream, Inc.
60 Broadway, 10E
Brooklyn, NY 11249
Email: privacy@thewealthstream.com
Website: thewealthstream.com
