Privacy Policy

This Privacy Policy applies to the Commonwealth website and web application available through commonwealthhousehold.com and its subdomains (the “Service”). Commonwealth is operated by Qiuhao Jin. “Commonwealth,” “we,” “us,” and “our” refer to Qiuhao Jin as the operator of the Service.

The Service is designed for adults in the United States who want a consolidated, read-only view of their own finances and information they intentionally share within a household. It is not intended for children under 18.

In the preceding 12 months, or since the Service began operating if shorter, we may have collected the categories below, depending on which features you used. We collect information from you, from services you authorize, automatically from your browser and infrastructure, and from other household members who invite or share with you.

We use the information described above to:

• operate, authenticate, maintain, and secure the Service;
• retrieve and organize the financial information you ask to view;
• calculate spending summaries, recurring-charge candidates, cash flow, and investment views;
• apply household permissions and your account-sharing choices;
• provide educational explanations, public market events, and read-only portfolio signals;
• run clearly labeled safety simulations, protect one-time actions, investigate errors, and maintain audit records;
• communicate with you and respond to privacy, support, or security requests; and
• comply with law, enforce our terms, and protect users, Commonwealth, and others.

We do not use connected financial information to make lending, insurance, employment, or consumer-reporting decisions. We do not use the Service to initiate payments, transfer assets, or execute securities transactions.

Before a new Plaid connection or a material data-scope expansion opens, Commonwealth shows the requested data scope, purpose, and storage summary and asks you to select “Agree.” We retain a minimal versioned record of that acknowledgment, the connection type, and the later grant or revocation time; this record does not contain balances, transactions, holdings, or credentials.

Plaid Link then presents the institutions, data categories, and purposes associated with that connection. You choose the institution and authorize the data access shown there. Commonwealth does not receive or store the bank credentials you enter inside Plaid Link.

For banking and credit accounts, we may request transaction data and related account information. For brokerage or retirement accounts, we may request investment account and holdings data. We do not add a new Plaid product or materially different use without an appropriate authorization flow.

Deactivating a connection excludes it from current Commonwealth calculations, but it does not revoke the Plaid Item or delete Commonwealth’s encrypted access token and minimal connection record. You may later reconnect or permanently disconnect it.

“Disconnect & delete” first asks Plaid to revoke the Item. If that operation and the related deletion complete successfully, Commonwealth deletes the encrypted token, connection record, account references, related sharing settings, and connection-linked preference and simulation records. If revocation or deletion fails, we display an error and may temporarily retain the record so the operation can be retried. Plaid may maintain its own authorization records under its legal obligations and policies. Learn more in the Plaid End User Privacy Policy.

Accepted household members can see the display name, email address, and role of other accepted members in that household. These basic membership details are visible so members can understand who has household access; account-sharing settings control financial-account visibility, not this membership directory.

Every connected account starts private. If you choose to share an account with a household, the current sharing level provides accepted members of that household with the account’s live account information and transaction details supported by that view. Commonwealth does not currently offer a summary-only sharing level. Sharing with one household does not automatically share with another household.

You can change an account’s sharing setting from the Accounts page. A household owner may remove a non-owner member. Removing a member also removes that member’s account shares from that household, while preserving the removed member’s personal accounts, Plaid connections, product access, and memberships in other households.

AI explanations

If you choose an AI explanation, Commonwealth sends OpenAI your question and a limited, rounded summary relevant to the view. For category explanations, the summary may include totals, category share, and transaction count, but not merchant names or a raw transaction list. Do not place bank credentials, account numbers, or other unnecessary sensitive information in your question.

We configure the OpenAI Responses API with store=false, so the response is not retained as Responses API application state for Commonwealth. OpenAI may nevertheless retain content for safety or abuse monitoring as described in its then-current API data-control documentation. Commonwealth does not intentionally enable optional model-training data sharing.

Investment events and news

To match public earnings events and news to securities in your portfolio, Commonwealth may send a limited security ticker or symbol and date range to Finnhub. We do not intentionally send your name, email, account number, position value, or quantity with those public-information requests.

To reduce repeat requests, Commonwealth may cache public Finnhub earnings responses for up to six hours and public news responses for up to 15 minutes. These public-information caches are keyed to market symbols or request parameters, not to your financial-account identity or holding quantity.

We disclose information only as reasonably necessary for the Service, as you direct, or as permitted by law. Recipients may include:

Swipe the table sideways to read every column.

We may also disclose information to professional advisers, auditors, insurers, regulators, law enforcement, or courts when reasonably necessary; to investigate fraud or protect rights and safety; or in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards and notice where required.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising and do not use connected financial information for targeted advertising or cross-selling.

Commonwealth uses essential cookies to maintain an authenticated session. When email-code sign-in is enabled, Cloudflare Turnstile processes a security challenge before a code is sent or verified. The Plaid OAuth flow may temporarily place a Link token, connection type, mode, consent reference, and return path in tab-scoped session storage so the connection can resume after redirect; the application removes that temporary state after completion or exit.

If you use large-holding-change monitoring, an encrypted portfolio baseline may be stored locally on your device. Commonwealth’s server generates the encrypted snapshot for the signed-in owner, but the baseline is not stored in Supabase. You can replace it with the current holdings from the feature or remove it by clearing Commonwealth site data in your browser.

We do not currently use third-party advertising cookies. Anonymous performance metrics contain a route path, metric name, duration, and outcome; they omit credentials and financial values and are not sent when supported Do Not Track or Global Privacy Control is enabled.

We retain each category only for as long as reasonably necessary for the purposes described below, to meet legal obligations, resolve disputes, maintain security, and enforce agreements. Retention is based on the type of record, whether your account or connection remains active, security and audit needs, and service-provider backup cycles.

Swipe the table sideways to read each retention rule.

Deletion from active systems may not immediately remove information from security logs or backups. We may retain limited information when reasonably necessary for fraud prevention, security, legal compliance, or establishing, exercising, or defending legal claims.

You may:

• review available profile and household-membership information;
• keep accounts private or change household-sharing settings;
• deactivate a Plaid connection or use “Disconnect & delete” to revoke it;
• replace local encrypted portfolio-baseline data or clear Commonwealth site data in your browser;
• avoid optional AI explanations and public-market signal features; and
• request access, correction, deletion, or a copy of personal information by contacting us.

The Service does not currently provide self-service account deletion or data export. Verified access, correction, deletion, and copy requests are handled through the email process described below, to the extent required by applicable law.

Depending on where you live, you may also have rights to know the categories and specific pieces of personal information we process, correct inaccuracies, delete information, obtain a portable copy, opt out of certain processing, restrict certain uses of sensitive personal information, appeal a refusal, and receive equal service without discrimination for exercising a right.

To submit a request, email privacy@commonwealthhousehold.com with the subject “Privacy Request.” We will verify the request using information reasonably related to your account, such as control of the signed-in email. An authorized agent may submit a request where permitted, but we may require proof of authority and direct verification with you. We will respond within the period required by applicable law.

We use administrative, technical, and organizational safeguards appropriate to the nature of the Service. These include encrypted transport, application-level encryption for Plaid access tokens, server-only credentials, access controls, household isolation, minimal retention of raw financial details, privacy-safe hashes where practical, and monitoring of security and reliability events.

No method of transmission or storage is completely secure. If you believe your account or information may be at risk, contact us promptly and disconnect affected financial connections where appropriate.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided information to the Service, contact us so we can investigate and take appropriate action.

The current Service is designed for U.S. users and U.S. financial institutions supported by our connection configuration and is not currently marketed for use outside the United States. Information may be processed in the United States and other locations where our service providers operate. If you are located in another jurisdiction, additional privacy rights may apply; contact us to exercise those rights, and we will address them as required by applicable law.

We may update this policy as the Service, providers, or legal requirements change. We will post the revised policy with a new “Last updated” date and provide additional notice when required. If a change materially expands how we use connected financial information, we will seek additional authorization where appropriate before applying the new use.

Publication note: This policy describes Commonwealth’s current consumer-facing practices. It is not a GLBA model privacy notice and does not replace any separate notice that may become legally required as the business, products, or regulatory status changes.