Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Wealthfront's data collection, use, and retention practices across its investment, cash account, and lending products. The policy distinguishes between Users of planning tools and Clients under a Client Agreement: Clients' personal data is retained indefinitely due to regulatory recordkeeping obligations and generally cannot be deleted upon request, whereas Users may request deletion of their data. The policy permits data sharing with service providers, affiliates, and business partners for operational purposes, and establishes opt-out mechanisms for marketing communications and location tracking through account settings or support contact.
This Privacy Policy, effective December 19, 2025, is jointly issued by five Wealthfront entities (Wealthfront Corporation, Wealthfront Advisers LLC, Wealthfront Brokerage LLC, Wealthfront Home Lending LLC, and Wealthfront Software LLC) and governs the collection, use, retention, and disclosure of Personal Information for Users of free financial planning tools and Clients who enter into formal service agreements, with Financial Privacy-Covered Data additionally governed by the Gramm-Leach-Bliley Act and Wealthfront's separate Financial Privacy Notice. The policy states that Wealthfront will 'never rent, sell, or trade your Personal Information to anyone,' while the terms authorize sharing with affiliated entities, service providers performing business functions, business partners offering joint products, and third parties in connection with mergers or asset transfers; the terms also authorize periodic re-access of linked third-party financial account credentials for as long as an ACH link remains active, and disclose that biometric data (selfie photographs for identity verification) is collected from Clients with destruction required within 90 days by vendor contract. The policy asserts a distinction between Users (who may request data deletion) and Clients (whose data generally cannot be deleted due to regulatory recordkeeping obligations), which is operationally significant and narrows deletion rights considerably for most active account holders; the policy also states that cross-device tracking and browsing activity matching across devices is conducted, and that the site does not respond to Do Not Track signals. The policy engages the Gramm-Leach-Bliley Act (GLBA) and its implementing Regulation S-P, CCPA for California residents, biometric privacy laws in applicable jurisdictions (including Illinois BIPA), and FCRA in connection with home lending credit information; the policy's assertion that federal privacy laws may render state privacy laws inapplicable in certain situations is a legally contested area requiring evaluation under applicable state law, and the adequacy of international transfer protections is described only generally without specifying mechanisms such as Standard Contractual Clauses.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
Wealthfront has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Bank Login Credential Sharing with Yodlee and Plaid and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.