Privacy Policy
Last updated: May 2026
🔒 The short version: We collect only what we need to run the app. We don't sell your data. Ever. We don't share it with advertisers. Your financial information stays private and is used only to personalize your experience on OmniNexus Wealth.
1. Who We Are
OmniNexus Wealth ("we," "us," or "our") is an educational financial platform operated by Keith Puopolo. Our website is omninexuswealth.com. You can contact us at keith@omninexuswealth.com.
2. Information We Collect
We collect the following types of information when you use the Platform:
- Account information: Your email address and password (encrypted) when you create an account.
- Financial information you provide: Monthly income, fixed bills, side income, debt payments, and credit score range — entered voluntarily by you during the budgeting process.
- Investor profile information: Age range, risk tolerance, investment goals, time horizon, and investing experience — entered voluntarily during the Nexus investment profile process.
- Chat messages: Conversations with Omni and Nexus are stored to provide continuity across sessions.
- Usage data: Basic information about how you use the Platform, such as which features you interact with.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Platform
- Personalize your educational experience with Omni and Nexus
- Save your progress so you don't have to start over each session
- Communicate with you about the Platform (including launch updates if you joined our waitlist)
- Ensure the security and integrity of the Platform
4. How We Store Your Data
Your data is stored securely using Supabase, a trusted database platform with row-level security — meaning your data can only be accessed by you when you are logged in. Passwords are encrypted and never stored in plain text.
5. Third-Party Services We Use
We use the following third-party services to operate the Platform. Each service may receive certain data as described below:
- Supabase — database and authentication. Your account data, financial inputs, and chat history are stored here using row-level security and encryption at rest. Supabase Privacy Policy
- xAI (Grok) — powers the Omni and Nexus AI chat responses. Your chat messages are sent to xAI's servers to generate responses. xAI Privacy Policy
- Groq (Llama 3) — powers the Bill Killer feature. When you request bill cancellation advice, the bill name and amount are sent to Groq's servers to generate step-by-step guidance. No other personal data is shared with Groq. Groq Privacy Policy
- Google Gemini — powers the Pay Stub Scanner feature. If you use the 📸 scan feature, the image or PDF you upload is sent to Google's Gemini AI to extract income data. The image is processed in real time and is not stored by OmniNexus Wealth or retained by Google beyond the processing request. Google Privacy Policy
- Plaid — provides bank account linking infrastructure. If you choose to connect a bank account, your banking credentials are entered directly into Plaid's secure interface and are never seen or stored by OmniNexus Wealth. Plaid provides us only with read-only account balance information. Plaid Privacy Policy
- Polygon.io — provides real-time and historical market data for ETF and stock prices. No personal data is shared with Polygon. Polygon Privacy Policy
- Finnhub — provides financial news, analyst ratings, and market calendar data. No personal data is shared with Finnhub. Finnhub Privacy Policy
- Alpaca Markets — provides simulated paper trading infrastructure. When you create an account, a sandboxed paper trading account is automatically created on your behalf using your email address and placeholder identity data. No real SSN or financial information is collected or transmitted. No real money is ever involved. Alpaca Privacy Policy
- Stripe — payment processing for paid subscriptions (when applicable). OmniNexus Wealth does not store your full credit card number. All payment data is handled directly by Stripe. Stripe Privacy Policy
- Resend — email delivery service used to send transactional emails (account welcome, notifications). Your email address is shared with Resend solely to deliver emails from OmniNexus Wealth. Resend Privacy Policy
- PostHog — analytics and session recording. PostHog collects anonymized usage data including which features you interact with, session recordings, and heatmaps to help us improve the Platform. Input fields marked as sensitive (passwords) are masked and never recorded. PostHog Privacy Policy
- Sentry — error monitoring. If the Platform encounters a technical error, Sentry captures diagnostic information (error type, browser, and device type) to help us identify and fix bugs. Sentry does not capture your financial data. Sentry Privacy Policy
- Netlify — hosts the Platform and serves web content. Netlify Privacy Policy
6. Cookies and Tracking Technologies
OmniNexus Wealth uses cookies and similar technologies (including browser localStorage) to operate the Platform and improve your experience. Specifically:
- Session cookies: Used by Supabase to keep you logged in securely.
- Preference cookies: Used to remember your language setting (English or Spanish) between visits.
- Analytics cookies (PostHog): Used to understand how users interact with the Platform, including session recordings and heatmap data. These help us identify usability issues and improve the product. You can opt out by contacting us at keith@omninexuswealth.com.
- Error tracking (Sentry): Uses a small identifier to group related error reports from the same session. No personal financial data is included.
Do Not Track: Some browsers send a "Do Not Track" signal. OmniNexus Wealth does not currently alter its data collection practices in response to DNT signals, but we honor opt-out requests submitted directly to us.
7. We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes. Period.
8. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- Encryption in transit (HTTPS/TLS) for all data sent between your device and our servers
- Encryption at rest for data stored in Supabase
- Row-level security in our database — your data can only be accessed when you are authenticated as you
- API keys and sensitive credentials stored as server-side environment variables, never exposed to the browser
No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.
9. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you by email at the address associated with your account within 72 hours of becoming aware of the breach, or as soon as reasonably practicable. Our notification will describe the nature of the breach, the data affected, and the steps we are taking to address it.
10. Data Retention
We retain different types of data for different periods:
- Account and financial data: Retained for as long as your account is active.
- Chat history: Retained for as long as your account is active to provide conversation continuity.
- Error and diagnostic logs (Sentry): Retained for 90 days.
- Analytics data (PostHog): Retained for up to 12 months.
You may request deletion of your account and all associated data at any time through the account menu in the app, or by emailing keith@omninexuswealth.com. We will complete the deletion within 30 days of your request.
11. Your Rights
You have the following rights with respect to your personal data:
- Right to access: Request a copy of the personal data we hold about you.
- Right to correction: Request that we correct inaccurate data.
- Right to deletion: Request that we delete your account and all associated data.
- Right to opt out: Opt out of analytics tracking or marketing communications at any time.
- Right to portability: Request your financial data in a portable format.
To exercise any of these rights, contact us at keith@omninexuswealth.com. We will respond within 30 days.
12. California Residents — Your CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Right to Know: You have the right to request disclosure of the categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Opt Out of Sale: We do not sell your personal information. You therefore have no need to opt out of a sale, but you have this right should our practices change.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your CCPA rights, contact us at keith@omninexuswealth.com with the subject line "CCPA Rights Request." We will verify your identity and respond within 45 days.
13. Children's Privacy
OmniNexus Wealth is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at keith@omninexuswealth.com and we will delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes — such as new data collection practices, new third-party services, or changes to how we use your data — we will notify you by email at the address associated with your account at least 14 days before the change takes effect. For minor updates, we will update the date at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
15. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: keith@omninexuswealth.com