Privacy Policy

1. Introduction

PlainWealth ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (bogle.web.id) and the PlainWealth application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Full name, email address, and hashed password when you register.
• Financial Data: Transaction records, account balances, portfolio holdings, budget settings, and financial goals that you manually enter or authorize us to access.
• Communication Data: Messages sent through our contact form, support requests, and email correspondence.
• Preference Data: Communication preferences, notification settings, and display preferences.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and actions taken within the Service.
• Device Data: Browser type, operating system, device type, screen resolution, and IP address.
• Cookie Data: Session identifiers and preference tokens (see our Cookie Policy).

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve the PlainWealth application.
• Account Management: To authenticate you, manage your account, and provide customer support.
• Communication: To send transactional emails (verification, password reset, security alerts), monthly reports, and service notifications you've opted into.
• Analytics: To understand how users interact with our Service and improve the user experience.
• Security: To detect and prevent fraud, unauthorized access, and other misuse of the Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Data Sharing and Disclosure

We do not sell your personal data. We share data only in the following circumstances:

• Service Providers: With trusted third-party vendors who help us operate the Service (e.g., cloud hosting, email delivery via Amazon SES). These providers are contractually bound to protect your data.
• Legal Obligations: When required by law, court order, or government regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• With Your Consent: With your explicit permission for any other purpose.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. When you delete your account:

• All personally identifiable financial data is permanently deleted within 30 days.
• Aggregated, anonymized data that cannot identify you may be retained for analytical purposes.
• Records required for legal compliance (e.g., billing records) are retained per applicable law.

6. Data Security

We implement industry-standard security measures:

• Encryption at Rest: All stored data is encrypted using AES-256.
• Encryption in Transit: All data transmission uses TLS 1.3.
• Password Hashing: Passwords are hashed using bcrypt with a per-user salt.
• Access Controls: Strict internal access policies limit employee access to user data.
• Monitoring: Continuous security monitoring and regular penetration testing.

For more details, see our Security Page.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data (also available via Account Settings).
• Deletion: Request deletion of your data (also available via the self-service Delete Account flow).
• Portability: Request your data in a machine-readable format (CSV/JSON export available from your dashboard).
• Objection: Object to certain processing of your data.
• Withdraw Consent: Withdraw consent for optional data processing at any time.

To exercise these rights, contact us at privacy@bogle.web.id. We will respond within 30 days.

8. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

9. International Data Transfers

Your data is stored in the United States. If you access the Service from outside the US, you consent to the transfer and processing of your data in the United States under US law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries, contact our Data Protection Officer:

Email: privacy@bogle.web.id
Address: 1201 Elm Street, Suite 400, Austin, TX 78701, USA
Phone: +1 (512) 555-0148