Privacy Policy

1. Introduction

This Privacy Policy explains what information TwoVector ("we," "us," or "our"), operated by[ENTITY NAME], LLC formation pending, collects through the TwoVector application at app.twovector.com (the "Service"), how we use it, who we share it with, and the choices you have. It applies to the Service; our marketing site at twovector.com is covered separately in Section 7 (Cookies & Analytics).

By using the Service, you agree to the collection and use of information as described in this Policy. If you have questions, contact us atsupport@twovector.com.

2. Information We Collect

Account information. Your name, email address, password (stored as a salted hash, never in plain text), and authentication tokens.

Financial data. If you connect a bank account, we use Plaid to establish that connection. TwoVector never receives or stores your bank login credentials — Plaid handles authentication with your bank directly and passes us only the account balances, transactions, and identifiers needed to display and categorize your finances. If you add accounts manually, we store whatever balances and transactions you enter. We also store the budgets, categories, and net worth history you create from this data.

Work and personal data. Calendar events, contacts, meeting records and notes (including any transcripts you generate), files you upload to your drive, and scheduling links and event types you configure.

Health data. Nutrition entries, weight logs, and related health information you choose to enter.

AI chat content. Messages you send to Vec, and the account context Vec reads to answer them (for example, your transactions or calendar, when relevant to your question), are sent to our AI subprocessor to generate a response. See Section 4 (Subprocessors).

Voice and transcription data. If you use the desktop notetaker, audio you choose to record is sent to Deepgram, using your own Deepgram API key, to generate a transcript, which is then stored in your account.

Usage and device data. Standard technical data such as IP address, browser type, device identifiers, and log data, collected automatically when you use the Service.

3. How We Use Your Information

We use your information to:

• provide and operate the Service (for example, calculating your net worth or scheduling a meeting);
• power Vec's ability to answer questions about your data and, where you direct it, take actions on your behalf;
• process payments and manage your subscription;
• secure the Service and detect fraud or abuse;
• send you service-related communications (for example, billing receipts or security alerts); and
• improve the Service's reliability and features.

We do not sell your personal information, and we do not use your financial or health data to serve you third-party advertising.

4. Subprocessors and Third-Party Services

We share data with a small number of specialist providers, each scoped to a specific purpose:

• AWS (Amazon Web Services) — hosts our application, database, and file storage, in the us-east-1 (Northern Virginia) region.
• Plaid — connects to your bank to retrieve balances and transactions; TwoVector never receives your bank credentials.
• Anthropic — processes the content of your conversations with Vec, and any account context included in those conversations, to generate AI responses.
• Deepgram — transcribes audio you record in the desktop notetaker, using your own Deepgram API key.
• Stripe — processes payments and manages billing for paid subscriptions.

Each provider is contractually restricted to using your data to provide services to us, and not for their own independent purposes.

5. Data Retention

We retain your account data for as long as your account is active, so the Service can function (for example, showing your full transaction history). If you delete your account, we delete your personal data from active systems, other than data we are required to retain for legal, tax, or accounting purposes (for example, billing records), and residual copies that persist in encrypted backups for a limited period before they are overwritten in the normal backup cycle.

6. Your Rights

Access and export. You can request a copy of your data by contactingsupport@twovector.com.

Deletion. You can request deletion of your account and its data by contactingsupport@twovector.com. Deletion requests are handled by our support team.

Correction. You can correct most of your information directly in the Service (for example, editing a transaction or profile field), or by asking us to do so.

Depending on where you live, you may have additional rights under local law (for example, to object to certain processing, or to lodge a complaint with a data protection authority). Contact us and we will do our best to help.

7. Cookies and Analytics

The TwoVector application (app.twovector.com) uses only cookies that are essential to signing in and operating the Service — it does not use advertising or cross-site tracking cookies.

Our marketing site (twovector.com) uses Plausible Analytics, a cookieless analytics tool that does not use cookies or collect personal information, and reports only aggregate, anonymized traffic statistics.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, and access controls limiting who can view your data internally. No method of transmission or storage is 100% secure; see our Security page for more detail.

9. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect information from children under 18. If you believe a child has provided us with personal information, contact us at support@twovector.com and we will delete it.

10. International Data Transfers

We host the Service in the United States (AWS us-east-1). If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email or an in-app notice before it takes effect. The "Last updated" date at the top of this page reflects the most recent version.

12. Contact Us

Questions about this Privacy Policy, or a request to access, export, or delete your data? Email support@twovector.com.