Privacy Policy
Effective date: June 9, 2026 · Last updated: June 9, 2026
Truseta is a wealth tracking platform. We are not a financial institution, investment adviser, or broker-dealer. We never sell your data, run ads, or monetize your information. We earn revenue from subscription fees only.
Contents
1. Who we are
Truseta is a private wealth operating system for high-net-worth individuals, family offices, and their advisors. The platform is operated by Nahak Corporation, a Florida company (“Truseta,” “we,” “our,” or “us”).
Access to Truseta is by invitation or approved application only. We do not offer open public registration.
Questions about this Privacy Policy can be directed to privacy@truseta.com.
2. Data we collect
2.1 Account and identity data
When you create an account, we collect your name, email address, and authentication credentials. We use Supabase Auth for identity management and session handling. If you enable multi-factor authentication (which we require), your MFA enrollment data is stored securely.
2.2 Financial account data (via Plaid)
When you connect a bank, brokerage, retirement, or credit account using Plaid, Truseta receives and stores the following from Plaid on your behalf:
- Account names, numbers (masked), types, and institution details
- Current and available balances
- Investment holdings: securities, quantities, prices, and cost basis where available
- Liability balances (mortgages, credit cards, loans)
- Transaction history used for performance and cash flow analysis
Truseta does not receive or store your banking credentials. Credential entry and authentication with financial institutions is handled exclusively by Plaid. Plaid's own privacy policy applies to your interaction with Plaid's Link interface.
2.3 Manually entered financial data
Truseta is also used to track assets that cannot be connected automatically. This includes private equity investments, real estate properties, entity structures (LLCs, trusts, holding companies), capital call schedules, ownership percentages, cash flow records, and custom valuations. All of this data is entered or imported by you.
2.4 Documents
You may upload or link financial documents including K-1s, 1099s, partnership agreements, closing statements, and other records. Documents are processed by our AI features to extract structured data (see Section 3). Documents you link from Google Drive are accessed using your authorized Google credentials and are not copied to Truseta servers unless you explicitly import them.
2.5 Communications and AI interactions
When you use Quinn, Truseta's AI assistant, your queries and the context provided (including relevant portfolio data) are transmitted to Anthropic's Claude API to generate responses. Conversations may be stored in your account to provide continuity. We do not use your conversation data to train AI models, and we do not share it with Anthropic for training purposes.
2.6 Usage and technical data
We collect standard technical data including IP address, browser type, operating system, device identifiers, pages visited, and timestamps. This data is used for security, debugging, and service improvement. We do not sell or share this data for advertising.
2.7 Crypto account data (via Coinbase)
If you connect a Coinbase account using OAuth, we receive read-only access to your account balances and holdings. We do not receive the ability to move funds and we do not store your Coinbase credentials.
3. How we use your data
We use your data for the following purposes and no others:
- To operate and deliver the Truseta platform, including aggregating and displaying your financial data
- To compute analytics, returns, IRR, net worth, and portfolio summaries
- To power Quinn, the AI assistant, using context from your portfolio and documents
- To extract structured data from documents you upload or link
- To send platform notifications, alerts, and the daily wealth digest (where enabled)
- To authenticate your identity and maintain session security
- To detect and prevent fraud, unauthorized access, and abuse
- To comply with legal obligations
- To improve the platform based on aggregated, de-identified usage patterns
We do not use your financial data to make or suggest investment decisions, provide financial advice, or generate personalized recommendations of financial products. Truseta is a tracking and organizational tool, not an advisory service.
4. Third-party services
Truseta integrates with the following third-party services to deliver its functionality. Each operates under its own privacy policy and terms.
Plaid Technologies, Inc.
Used for connecting and syncing bank, brokerage, and investment accounts. Plaid handles credential entry and financial institution authentication. Plaid's privacy policy is available at plaid.com/legal/privacy-policy.
Anthropic, PBC
Truseta uses Anthropic's Claude API to power Quinn. Queries sent to Quinn, including relevant portfolio context, are transmitted to Anthropic for processing. Anthropic's privacy policy is available at anthropic.com/legal/privacy.
Supabase, Inc.
Truseta's database, authentication, and storage infrastructure runs on Supabase, hosted on Amazon Web Services. Your data is stored in a dedicated database instance. Supabase's privacy policy is available at supabase.com/privacy.
Vercel, Inc.
Truseta's web application is deployed and served through Vercel's edge network. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
Google LLC
If you connect Google Drive for document linking or integrate Gmail or Google Calendar with Quinn, your use is governed by Google's terms and privacy policy. Truseta requests only the minimum necessary permissions and does not store Google credentials.
Coinbase Global, Inc.
If you connect a Coinbase account, your use of the Coinbase OAuth integration is governed by Coinbase's privacy policy. Truseta receives read-only balance and holdings data only.
5. Data sharing and disclosure
We do not sell, rent, or trade your personal data. We do not share your data with advertisers or data brokers. We do not use your data to target you with advertisements.
We disclose your data only in the following limited circumstances:
- To the third-party service providers listed in Section 4, strictly as necessary to operate the platform
- To advisor or CPA accounts you explicitly authorize through the Truseta advisor portal, limited to the data scopes you grant
- To comply with a valid legal obligation, court order, or government request, after we have made reasonable efforts to notify you unless prohibited by law
- To protect the security or integrity of the platform or to prevent imminent harm
- In connection with a merger, acquisition, or sale of substantially all assets, subject to advance notice and successor privacy protections
6. Data security
We operate above baseline standards for a software product handling personal financial data.
- All data is encrypted at rest using AES-256 encryption
- All data is encrypted in transit using TLS 1.2 or higher
- Sensitive fields (Plaid access tokens, tax IDs, account numbers) are encrypted at the column level using per-user derived keys — your encrypted data cannot be decrypted using another user's key
- Encryption keys are stored in a dedicated secrets vault separate from the application database
- Multi-factor authentication is required for all accounts
- Sessions require re-authentication daily
- Access to production data by Truseta personnel is logged and requires separate authorization
- Platform access is controlled: only approved accounts can log in
If you believe your account has been compromised, contact us immediately at security@truseta.com.
7. Data retention
We retain your account and financial data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law or where encrypted backups are still within their rotation cycle (completed within 90 days).
You may request a full export of your data before account closure. See Section 8 for how to request this.
8. Your rights
You have the following rights with respect to your data:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your data and account
- Portability: request an export of your data in a machine-readable format
- Restriction: request that we stop processing your data in certain circumstances
- Objection: object to processing based on legitimate interests
To exercise any of these rights, email privacy@truseta.com from the address associated with your account. We will respond within 30 days. We may need to verify your identity before processing your request.
9. California residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
In the past 12 months, we have collected the categories of personal information described in Section 2. We have not sold any personal information and do not sell personal information. We have not shared personal information with third parties for cross-context behavioral advertising.
You have the right to know what personal information we collect, disclose, or sell; the right to delete your personal information; the right to correct inaccurate personal information; the right to opt out of sale or sharing (not applicable, as we do not sell or share); and the right not to receive discriminatory treatment for exercising these rights.
To submit a CCPA request, email privacy@truseta.com. We will respond within 45 days.
10. Children's privacy
Truseta is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us at privacy@truseta.com and we will delete the account promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice in the platform at least 14 days before the changes take effect. Your continued use of Truseta after the effective date constitutes acceptance of the revised policy.
12. Contact us
For privacy questions, data requests, or security concerns:
- Email: privacy@truseta.com
- Security issues: security@truseta.com
- Mailing address: Nahak Corporation, 1900 Glades Rd, STE 340, Boca Raton, FL, 33496