Privacy policy

Tellwise Inc. is a Delaware C corporation with its principal office at 540 Howard Street, Suite 300, San Francisco, CA 94105, United States. We operate the Tellwise cashflow forecasting service at gettellwise.com. We are the data controller for the personal information described in this policy. Questions go to privacy@gettellwise.com.

We use your account information to identify you, let you sign in, and send you transactional messages such as password resets and billing confirmations. We do not send marketing email without your opt-in.

We use your transaction data to compute your cashflow forecast, identify recurring patterns (income, bills, subscriptions), detect anomalies and creep, and project your balance forward with a confidence range. This is the core service.

When you request a plain-language explanation of a forecast, a summary of your spending, or a description of a warning, we send the relevant transaction data (amounts, dates, merchant names) to a language model to produce the explanation. The numbers in the forecast are computed in our own code; the language model writes the explanation around them. We describe this in more detail in section 4.

We use aggregate, de-identified usage data to understand which features are working and to improve the service. This aggregate data cannot identify you.

Tellwise uses a third-party language model to generate the plain-language explanations that accompany your forecast. When you request an explanation, we send a structured payload to the model provider containing your transaction data for the relevant period: dates, amounts and merchant descriptions, not your name or email.

This transmission happens under a business API agreement that expressly prohibits the provider from using your data to train or improve their models. Your transaction data is not used for any purpose other than producing your explanation in that session.

The forecast computation itself, including the confidence range, the recurring-pattern detection and the warning thresholds, runs in our own code. No external model is involved in the numbers; external models only produce the explanation that wraps them.

• We do not sell your personal information or your transaction data to anyone, ever.
• We do not share your data for advertising purposes or allow advertisers to target you based on your financial information.
• We do not buy personal information from data brokers.
• We do not run advertising trackers. There are no third-party advertising cookies on this site.
• We do not ask for your bank credentials. If you connect an account, the connection is read-only and established through a bank-authorised integration.
• We do not store payment card numbers. If you subscribe, Stripe handles the card and we receive only a token and the last four digits.

Our hosting provider stores the database and runs the application, within the United States. Our language model provider receives transaction data to produce explanations, as described in section 4. Stripe processes payments. These are the three processors we rely on, and this list is kept complete: if it changes, this section changes.

We may share information if required by law, court order or regulatory demand, and in that case we will notify you where the law permits.

If Tellwise is acquired or merged, your data would transfer to the acquirer, who would be bound by this policy or would obtain your consent to a new one before making any changes.

Your transaction data is encrypted at rest using AES-256 and in transit using TLS 1.2 or later. Access to production data is restricted by role, logged, and reviewed. We do not give customer support staff access to transaction content without your explicit request.

We aim to notify you within 72 hours of discovering a breach that is likely to affect your rights. Security questions go to security@gettellwise.com. Our security practices are described in more detail on the security page.

We keep your data for as long as your account is open and for the periods in the table in section 2. When you delete your account, we remove your transactions, forecasts and personal information from the active database within 30 days. Billing records are retained for 7 years as required by US tax law, stored separately and inaccessible to the application.

Server logs are deleted after 30 days. Usage counts are deleted after 24 months.

You can access, correct, export and delete the personal information Tellwise holds about you. Most of this is self-serve: transactions delete from the dashboard, and the full account deletes from Settings.

For a structured export of everything we hold, email privacy@gettellwise.com and we will provide it within 30 days at no charge.

If you are in California, the California Consumer Privacy Act gives you the right to know what we collect, the right to delete it, and the right to opt out of sale. We do not sell personal information.

If the GDPR or UK GDPR applies to you, the legal bases we rely on are: performance of a contract, to deliver the service you signed up for; legitimate interests, for security, reliability and aggregate analysis; and consent, for anything optional, which you can withdraw at any time.

To exercise any right, or if you believe something has gone wrong, email privacy@gettellwise.com. We will respond within 30 days.

Tellwise is a financial tool and is not directed at anyone under 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child's information has been submitted, contact privacy@gettellwise.com.

If we change this policy in a way that affects your rights or how we use your data, we will email account holders at least 30 days before the change takes effect. Continuing to use Tellwise after that date means you accept the updated policy. Minor clarifications, like fixing a typo or adding more detail about an existing practice, will be updated without email notice.

This policy is effective 1 January 2026.