Privacy Policy

Introduction

This Privacy Policy (this "Policy") explains how Velira, LLC ("Velira," "we," "us") — the provider of the Velira financial-information and education software and, on its higher tiers, of dedicated professional financial-planning, personal tax, and estate-planning services — collects, uses, discloses, safeguards, and retains personal information in connection with the Velira application and related services (the "Service"), and the choices and rights you have.

The Velira software provides general, impersonal financial education and tools that you act on at your own discretion; the software by itself does not provide personalized investment advice. If you engage a higher tier, a dedicated licensed professional (a fiduciary CFP®, a CPA for personal tax, or an Estate Planner) provides personalized professional services to you; we describe how we handle information for those services below. Because we handle sensitive financial and tax information, protecting your information is central to how we operate. This Policy describes your rights under the Colorado Privacy Act, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other US state privacy laws. The Service is offered in and directed only to the United States.

Terms not defined here have the meaning given in our Terms of Service.

Information we collect

Account and identity information. The details you provide to create and manage an account, such as your name, email address, authentication credentials, contact details, and the profile information you choose to enter (for example, your financial situation, goals, risk tolerance, time horizon, and objectives).

Financial-account and holdings data via Plaid. When you connect a bank, card, or other financial account, we receive account, balance, and transaction information from Plaid Inc., our financial-account aggregation provider. These connections are read-only — we cannot move money.

Brokerage and investment data via SnapTrade. When you connect a brokerage account, we receive your holdings, positions, and related investment information through SnapTrade (Passiv Technologies Inc.), our brokerage-connectivity provider. These connections are read-only and data-only: we do not transmit, place, or route orders through SnapTrade, and the connection gives us no custody or trading discretion — you place every order yourself at your own broker. (See the Subprocessors list, which is the authoritative description of each provider.)

Tax information. Information you provide or connect that is relevant to tax-aware planning, such as filing status, brackets, realized and unrealized gains, tax-lot details, and — if you engage the Velira Tax tier — the personal tax documents and information needed for personal Form 1040 preparation and filing.

Professional-services information. If you engage a higher tier (Velira Wealth, Velira Tax, or Velira Estate), we collect the additional information your assigned professional needs to provide personalized financial-planning, personal tax, or estate-planning services to you — for example, information gathered during your consultation and engagement, and, for estate planning, family and beneficiary details you choose to provide.

Planning inputs. Goals, assumptions, manually entered assets (such as real estate, private holdings, or business interests), and the inputs and preferences you supply for projections, scenarios, and illustrative outputs.

Usage, device, and technical data. Information about how you interact with the Service (features used, actions taken, diagnostic and error logs) and technical identifiers such as IP address, browser/device type, and operating system, collected automatically to operate, secure, and improve the Service.

Communications and support. Information you provide when you contact us, including the contents of your messages.

We do not intentionally collect special categories of data beyond what is necessary to provide the Service.

How we use your information

We use personal information to: provide the Service, including generating your unified financial picture, projections, scenarios, general financial education, and illustrative outputs; if you engage a higher tier, enable your assigned professional to provide personalized financial-planning, personal tax-preparation, and estate-planning services to you; authenticate you and secure your account; provide support and respond to your requests; maintain, debug, and improve the Service; detect, prevent, and address fraud, abuse, and security incidents; and comply with our legal obligations, including professional recordkeeping obligations that apply to the human-tier services.

We do not use your financial data for third-party advertising. We do not sell your personal information, and we do not 'share' it for cross-context behavioral advertising as those terms are defined under state privacy laws.

AI-assisted processing

Some features use artificial intelligence to help generate summaries, explanations, projections, and illustrative outputs. AI is used as a tool to produce general, educational information; it does not provide personalized investment advice and does not create any advisory or fiduciary relationship. To provide these features, relevant portions of your financial figures and prompts are sent to our AI provider, Anthropic, through its API for processing and returned to the Service.

Per Anthropic's API terms as we understand them, data submitted through the API is not used to train Anthropic's models. We send the minimum context needed to produce a useful result and do not use your data to train any third-party model. See the AI Disclosure for details.

How we share information

We share personal information only as described here. We do not sell or rent your personal information and do not share it for others' marketing.

Categories of recipients. We disclose personal information principally to companies that perform services for us or functions on our behalf (our subprocessors and service providers), and as necessary to effect, administer, or process a transaction or service you request or authorize (for example, connecting your accounts through Plaid or routing an order you initiate through SnapTrade). We may also disclose information to comply with legal requirements.

Service providers (subprocessors). We rely on a limited set of vendors to operate the Service, each permitted to process information only to provide its service to us and bound by written confidentiality and data-protection obligations that prohibit use of your information for the vendor's own purposes. These currently include: Plaid (bank- and card-data aggregation, including American Express), SnapTrade / Passiv (brokerage connectivity and order routing you initiate), Vercel (application hosting, compute, and operational storage), Upstash (key-value and job-queue infrastructure used for operational data and scheduled background work), Anthropic (AI processing via API), Resend (transactional and account email delivery), Clerk (authentication and account identity), Sentry (error monitoring), Cartesia (speech-to-text and text-to-speech for voice features, only when voice features are enabled), and, once paid plans launch, Stripe as our payment processor and merchant of record (checkout, billing, and sales-tax handling). OpenAI is listed as an optional, dormant AI provider, and Paddle as a dormant payment processor (Stripe is the active payment processor), and we will not send your personal information to either unless and until it is activated and disclosed. A current, authoritative list — including which vendors are active versus dormant — is maintained in our Subprocessors document, which is the canonical source and controls if the two ever differ.

Your assigned professional (higher tiers). If you engage a higher tier, we make your relevant information available to the dedicated professional assigned to serve you (your CFP®, CPA, and/or Estate Planner) so they can provide the personalized services you engaged. These professionals are bound by their own professional confidentiality duties and by our confidentiality and data-protection requirements, and use your information only to serve you. Where a professional service requires transmitting information to a government agency at your direction — for example, e-filing your personal tax return — we or your CPA do so to provide that service.

Legal and safety. We may disclose information if required by law, regulation, or legal process, or where we believe disclosure is reasonably necessary to protect the rights, property, or safety of Velira, our users, or the public.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

With your direction. We share information when you direct us to, such as when you initiate a connection to a third party.

How we safeguard your information

We maintain an information-security program with administrative, technical, and physical safeguards designed to protect personal information. These include encryption in transit and at rest, authentication on account access, least-privilege internal access, logging of administrative actions, and read-only financial connections that limit what is possible even in a worst case. We also maintain procedures for the proper disposal of personal information.

We maintain an incident-response program and, consistent with applicable state breach-notification laws, will notify affected individuals and regulators of a qualifying incident within the required timeframes. No method of transmission or storage is perfectly secure, but we work to protect your information and to improve our safeguards over time. See our Security, Breach Notification, and Vulnerability Disclosure documents.

Data retention

We keep personal information for as long as your account is active or as needed to provide the Service.

When you close your account, we delete or de-identify personal information that we are not required to retain within ninety (90) days of account closure, except that we may retain information for up to seven (7) years (or any longer period required by law) where retention is required by applicable law or otherwise necessary to comply with legal, tax, or recordkeeping obligations, to resolve disputes, to prevent fraud, or to enforce our agreements. Connected-account data is deleted on disconnection or account closure on the same schedule, subject to those retention requirements. Backups are purged on a rolling schedule, and deletions are re-applied to data restored from backup so deleted records are not resurrected.

Your privacy rights (United States)

Depending on where you live, you may have rights under state privacy laws, including the right to know or access the personal information we hold, the right to correct it, the right to delete it, the right to obtain a portable copy, the right to opt out of the sale of personal information and of targeted advertising and certain profiling, and the right not to be discriminated against for exercising your rights. We do not sell personal information and do not use it for targeted advertising.

Colorado Privacy Act (CPA)

Velira is based in Colorado. If you are a Colorado resident, the Colorado Privacy Act provides the right to access your personal data, to correct inaccuracies, to delete your personal data, to obtain a portable copy, and to opt out of the sale of personal data, targeted advertising, and certain profiling that produces legal or similarly significant effects. We do not sell personal data and do not use it for targeted advertising.

Right to appeal. If we decline to act on your request, you may appeal that decision by contacting us at the privacy address below; we will respond to your appeal within the time the CPA requires and, if the appeal is denied, will provide information on how to contact the Colorado Attorney General. To exercise CPA rights, see 'How to exercise your rights.'

California (CCPA/CPRA)

If you are a California resident, the CCPA as amended by the CPRA provides rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to limit the use of sensitive personal information, subject to exceptions. We do not sell or share (for cross-context behavioral advertising) your personal information. We honor verifiable requests, will not discriminate against you for exercising your rights, and you may use an authorized agent to submit a request.

To exercise these rights, see 'How to exercise your rights.'

Other US state privacy laws

Residents of other states with comprehensive privacy laws may have similar rights to access, correct, delete, obtain a portable copy of, and opt out of the sale or targeted-advertising use of their personal data, along with an appeal right. We extend these rights to residents of states where they apply and, as a matter of practice, apply consistent protections across our user base.

How to exercise your rights

To make a privacy request — to access, correct, delete, or obtain a portable copy of your information, to opt out of any sale or targeted advertising (we do neither), or to appeal a decision — contact us at privacy@velirafinance.com or use the in-app request flow where available. We will verify your identity before acting on a request and will respond within the timeframes required by applicable law. There is generally no charge, though we may decline or charge a reasonable fee for excessive or manifestly unfounded requests as permitted by law. You may use an authorized agent where the law allows.

Cookies and similar technologies

We use only strictly necessary cookies and similar technologies — to keep you signed in and to operate the Service securely. We do not set non-essential advertising or tracking cookies. If that changes, we will provide in-app cookie controls before doing so. See our Cookie Policy for details.

United States only

The Service is offered in and directed only to the United States, and we process personal information in the United States. The Service is not intended for use outside the United States, and we make no representation that it is appropriate or available elsewhere.

Children's privacy

The Service is intended only for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18 (and, in any event, not from anyone under 13 within the meaning of the Children's Online Privacy Protection Act). If you believe a person under 18 has provided us personal information, contact us at privacy@velirafinance.com and we will take steps to delete it.

Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the version and effective date and provide notice as required by law. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Contact us

Questions about your privacy or this Policy? Contact Velira, LLC at privacy@velirafinance.com or 71 royal ann dr greenwood village co 80111.