Privacy Policy
Last updated: July 19, 2026
🔒 The short version: We collect only what we need to run the app. We don't sell your data. Ever. We don't share it with advertisers. Your financial information is kept private from advertisers and is never sold; it is shared only with the service providers listed in Section 5 (such as our AI and infrastructure providers) that help run the app.
1. Who We Are
OmniNexus Wealth ("we," "us," or "our") is an educational financial platform operated by OmniNexus Wealth LLC, a Massachusetts limited liability company. Our website is omninexuswealth.com. You can contact us at keith@omninexuswealth.com.
2. Information We Collect
We collect the following types of information when you use the Platform:
- Account information: Your email address and password (stored only as a secure one-way hash) when you create an account.
- Financial information you provide: Monthly income, fixed bills, side income, debt payments, and credit score range — entered voluntarily by you during the budgeting process.
- Investor profile information: Age range, risk tolerance, investment goals, time horizon, and investing experience — entered voluntarily during the Nexus investment profile process.
- Chat messages: Conversations with Omni and Nexus are stored to provide continuity across sessions.
- Calendar and reminders: Bill due dates, financial reminders, and events you add to the in-app calendar.
- Portfolio and holdings: The simulated positions, watchlists, and holdings in your paper-trading practice account.
- Money documents & transaction imports: If you scan a money document (a pay stub, bill, or bank or credit-card statement) or import a .csv of your bank transactions, the content is sent to our AI provider to read the figures and is processed in real time. We don't store it, and under the provider's paid-tier terms it is not used to train or improve the provider's models (see Section 5). For CSV imports, account, routing, and card numbers are automatically removed on your device before anything is sent; because a photo can't be automatically redacted, we ask you to cover any account number before you take it.
- Children's first names and ages: If you tell Omni about your kids while setting up savings goals or future funds, we store each child's first name and age so those goals make sense to you. This is information you provide about your child — we never collect anything directly from a child, and we ask for nothing else about them.
- Signals that you may be stuck or struggling: Your conversations may be automatically assessed for signs that you are frustrated, confused, or having a hard time, so that we can be notified and follow up to help. Omni will tell you when she has flagged a conversation if you ask her.
- Usage data: Basic information about how you use the Platform, such as which features you interact with.
- Waitlist information: If you join the waitlist before you have an account, we collect your name, email address, and the optional reason you share for wanting access.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Platform
- Personalize your educational experience with Omni and Nexus
- Save your progress so you don't have to start over each session
- Communicate with you about the Platform (including launch updates if you joined our waitlist)
- Ensure the security and integrity of the Platform
4. How We Store Your Data
Your data is stored securely with a trusted third-party cloud database platform using row-level security — meaning that, from your browser, your data can only be accessed by you when you are logged in. Passwords are stored only as secure one-way hashes and are never stored in plain text.
Our own secure server-side functions also access your data to provide core features — for example, assembling the context Omni and Nexus need to answer you, sending your emails, and deleting your account when you ask. These functions run on trusted servers using protected credentials and are never exposed to other users or to the public.
5. Third-Party Services We Use
We rely on a small set of trusted third-party service providers to operate the Platform. We share only the data each one needs to do its job, and each is bound by its own privacy and security commitments. By category, they are:
- Cloud database & authentication — securely stores your account, financial inputs, and chat history (with row-level security and encryption at rest) and keeps you logged in.
- AI providers — generate the responses from Omni and Nexus. To personalize your guidance, your chat messages are sent together with the financial context that makes them useful — such as your income, bills, debts, credit-score range, investor profile, and portfolio holdings. Your inputs are sent to these providers only to generate a response and are never sold. When you scan a money document (pay stub, bill, or bank or credit-card statement) or import a .csv of bank transactions, the content is sent to our AI provider to read the figures, processed in real time. This uses the provider's paid tier, under which your inputs are not used to train or improve its models and are not sold; the provider may retain data only briefly for abuse detection and legal compliance. For CSV imports we automatically strip account, routing, and card numbers on your device before sending (and again on our servers as a backstop); a photographed document can't be auto-redacted, so we ask you to cover your account number before capturing it.
- Market-data providers — supply real-time and historical prices, financial news, and economic data. We send only ticker symbols and similar public lookups — never your personal or financial data.
- Simulated investing — runs entirely within our own systems. No brokerage account is opened on your behalf with any third party, and no identity data is sent to any broker. Your Social Security number is never collected, generated, or transmitted, and no real money is ever involved.
- Bank-account linking (planned, not yet active) — this feature is not available yet, so no bank data is collected or transmitted today. If we enable it, your bank credentials would be entered directly into a secure third-party linking provider (never seen or stored by us), and we would update this policy first.
- Payment processing — will handle subscription billing if and when paid plans launch (not yet enabled, so no charges occur). We never store your full card number; payment details are handled directly by the processor.
- Email delivery — sends account, security, and product emails, plus any optional summaries you opt into. We share your email address and name to deliver them.
- Analytics & error monitoring — help us understand usage and fix bugs. All values you type into form fields — including financial amounts and passwords — are masked before any session recording is saved. These providers also receive your device's IP address and basic device and browser information to record the event. Numbers already displayed on screen may still appear in a recording; we never use this analytics data for advertising and never sell it.
- Hosting & content delivery — serve the website along with its fonts and software libraries; doing so may expose your device's IP address to these networks in order to deliver the files.
We do not sell your data to any of these providers, and they may use it only to provide their service to us. Once bank-account linking or paid subscriptions are live, we may become subject to the federal Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule; at that time we will provide any additional privacy notice those laws require and update our security commitments accordingly. If you have questions about how your data is handled, contact us at keith@omninexuswealth.com.
6. Cookies and Tracking Technologies
OmniNexus Wealth uses cookies and similar technologies (including browser localStorage) to operate the Platform and improve your experience. Specifically:
- Session cookies: Used by our authentication provider to keep you logged in securely.
- Preference cookies: Used to remember your language setting (English or Spanish) between visits.
- Analytics cookies: Used to understand how users interact with the Platform, including session recordings and heatmap data. These recordings capture on-screen activity with everything you type into form fields masked; we use them only to diagnose usability problems, never to identify you, and never for advertising, and recording is limited to your use of the Platform after you log in. You can opt out by contacting us at keith@omninexuswealth.com.
- Error tracking: Uses a small identifier to group related error reports from the same session. No personal financial data is included.
Do Not Track & Global Privacy Control: Because we do not sell or share your personal information or use it for targeted advertising, browser signals such as "Do Not Track" and the Global Privacy Control (GPC) have nothing to opt out of on our Platform today. If we ever adopt practices that qualify as a "sale" or "share" under applicable law, we will treat a GPC signal as a valid opt-out request, consistent with California and other state laws.
7. We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes. Period. We also do not "share" your personal information for cross-context behavioral advertising, and we do not engage in targeted advertising, as those terms are defined under the CPRA and other state laws.
8. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- Encryption in transit (HTTPS/TLS) for all data sent between your device and our servers
- Encryption at rest for data stored in our cloud database
- Row-level security in our database — your data can only be accessed when you are authenticated as you
- API keys and sensitive credentials stored as server-side environment variables, never exposed to the browser
No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.
9. Data Breach Notification
If a breach affecting your personal information occurs, we will notify affected users by email at the address associated with the account without undue delay and within the timeframe required by applicable state law, and in any event promptly after we confirm the breach and its scope. Where the law requires, we will also notify the relevant state regulators (such as state Attorneys General) and other parties. Our notice will describe, to the extent known, the nature of the breach, the categories of data affected, and the steps we are taking to address it.
10. Data Retention
We retain different types of data for different periods:
- Account and financial data: Retained for as long as your account is active.
- Chat history: Retained for as long as your account is active to provide conversation continuity.
- Error and diagnostic logs: Retained for 90 days.
- Analytics data: Retained for up to 12 months.
- Waitlist information: Retained until you create an account or ask us to remove you, and no longer than 24 months, then deleted.
- Backups: After you delete your account, residual copies may remain in encrypted backups for up to 30 days before being overwritten.
- Third-party tools: When you delete your account we remove your data from our systems and instruct our processors to do the same; some analytics and error records may persist on their systems until their retention periods (up to 12 months) expire.
You may request deletion of your account and all associated data at any time through the account menu in the app, or by emailing keith@omninexuswealth.com. We will delete your data from our active systems within 30 days of your request; backup and third-party copies are purged on the schedules above.
11. Where Your Data Is Processed
OmniNexus Wealth is operated in the United States, and we and our service providers store and process your data primarily on servers located in the United States. Some providers — for example our AI, hosting, and content-delivery partners — may process limited data on infrastructure in other regions. Wherever your data is processed, we require providers to protect it under commitments consistent with this policy.
12. Your Rights
You have the following rights with respect to your personal data:
- Right to access: Request a copy of the personal data we hold about you.
- Right to correction: Request that we correct inaccurate data.
- Right to deletion: Request that we delete your account and all associated data.
- Right to opt out: Opt out of analytics tracking or marketing communications at any time.
- Right to portability: Request your financial data in a portable format.
- Right to opt out of sharing / targeted advertising: We do not share your personal information for cross-context behavioral advertising, so there is nothing to opt out of; this right would apply if our practices change.
Several of these rights are self-serve in the app: you can edit your profile and budget under Settings, delete your account in-app, and unsubscribe from emails using the link in each message. To protect your financial information, we will verify your identity — typically by confirming control of the email address on your account — before we disclose, export, correct, or delete your data. To exercise any of these rights, contact us at keith@omninexuswealth.com. We will respond within 30 days.
13. California Residents — Your CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Right to Know: You have the right to request disclosure of the categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Opt Out of Sale: We do not sell your personal information. You therefore have no need to opt out of a sale, but you have this right should our practices change.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your CCPA rights, contact us at keith@omninexuswealth.com with the subject line "CCPA Rights Request." We will verify your identity and respond within 45 days.
14. Sensitive Personal Information (California)
Some information we collect is "Sensitive Personal Information" (SPI) under the CPRA. Today this is limited to your account login credentials (email plus password). If we later enable bank-account linking or paid subscriptions, financial-account numbers and linked-account credentials would also be SPI. We use SPI only for purposes the CPRA permits — to create and secure your account, provide the service you request, and prevent fraud — and never to infer characteristics about you. Because we use SPI only for these permitted purposes, we are not required to offer, and do not offer, a separate "Limit the Use of My Sensitive Personal Information" option. We will update this section before collecting any new category of SPI.
15. Other U.S. State Privacy Rights
If you reside in a state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and others), you may confirm, access, correct, delete, and obtain a portable copy of your personal data, and opt out of targeted advertising, sale, and profiling with legal or similarly significant effects. We do not engage in targeted advertising, sell personal data, or conduct such profiling, so those opt-outs do not apply to our current practices. To exercise other rights, email keith@omninexuswealth.com.
Right to Appeal: If we deny your request, you may appeal by replying to our decision or emailing keith@omninexuswealth.com with "Privacy Appeal" in the subject line. We respond within 45 days (extendable by 60 days with notice), and if we deny the appeal we will provide a way to contact your state Attorney General.
16. Children's Privacy
OmniNexus Wealth is intended only for users 18 and older, and by using it you confirm you are at least 18. We do not knowingly collect personal information from anyone under 18 (including "children" under 13 as defined by COPPA). If we learn we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us immediately at keith@omninexuswealth.com.
17. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes — such as new data collection practices, new third-party services, or changes to how we use your data — we will notify you by email at the address associated with your account at least 14 days before the change takes effect. For minor updates, we will update the date at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
18. Governing Language
This document is provided in English and Spanish for convenience. If there is any conflict between the two versions, the English version governs.
19. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: keith@omninexuswealth.com