8 Total
0 High severity
6 Medium severity
2 Low severity
Summary

This document establishes Wealthfront's data collection, use, and retention practices across its investment, cash account, and lending products. The policy distinguishes between Users of planning tools and Clients under a Client Agreement: Clients' personal data is retained indefinitely due to regulatory recordkeeping obligations and generally cannot be deleted upon request, whereas Users may request deletion of their data. The policy permits data sharing with service providers, affiliates, and business partners for operational purposes, and establishes opt-out mechanisms for marketing communications and location tracking through account settings or support contact.

Technical / Legal Breakdown

This Privacy Policy, effective December 19, 2025, is jointly issued by five Wealthfront entities (Wealthfront Corporation, Wealthfront Advisers LLC, Wealthfront Brokerage LLC, Wealthfront Home Lending LLC, and Wealthfront Software LLC) and governs the collection, use, retention, and disclosure of Personal Information for Users of free financial planning tools and Clients who enter into formal service agreements, with Financial Privacy-Covered Data additionally governed by the Gramm-Leach-Bliley Act and Wealthfront's separate Financial Privacy Notice. The policy states that Wealthfront will 'never rent, sell, or trade your Personal Information to anyone,' while the terms authorize sharing with affiliated entities, service providers performing business functions, business partners offering joint products, and third parties in connection with mergers or asset transfers; the terms also authorize periodic re-access of linked third-party financial account credentials for as long as an ACH link remains active, and disclose that biometric data (selfie photographs for identity verification) is collected from Clients with destruction required within 90 days by vendor contract. The policy asserts a distinction between Users (who may request data deletion) and Clients (whose data generally cannot be deleted due to regulatory recordkeeping obligations), which is operationally significant and narrows deletion rights considerably for most active account holders; the policy also states that cross-device tracking and browsing activity matching across devices is conducted, and that the site does not respond to Do Not Track signals. The policy engages the Gramm-Leach-Bliley Act (GLBA) and its implementing Regulation S-P, CCPA for California residents, biometric privacy laws in applicable jurisdictions (including Illinois BIPA), and FCRA in connection with home lending credit information; the policy's assertion that federal privacy laws may render state privacy laws inapplicable in certain situations is a legally contested area requiring evaluation under applicable state law, and the adequacy of international transfer protections is described only generally without specifying mechanisms such as Standard Contractual Clauses.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
Medium — 6 provisions
Low — 2 provisions

Monitoring

Wealthfront has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Bank Login Credential Sharing with Yodlee and Plaid and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:17 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000367
Version ID CA-V-000746
SHA-256 57f573b99c659d48c89fd50c58ca8e065820a4bbe697dc4c5a36ce52a4a01914
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans