Privacy in plain English

How we collect, use, and protect your data when you use Wizely — including your financial account connections. Written so you can actually read it.

Effective Apr 27, 2026
Last updated Apr 27, 2026
Version v 1.0
The 30-second version

We connect to your bank accounts to find subscriptions. We never move your money, store your bank credentials, or sell your data to anyone — ever. You can disconnect your accounts and request deletion at any time.

01Who we are

Wizely is a subscription management app built by a small team in Brooklyn, NY. When this policy says "we" or "Wizely," we mean WizelyFinance. When we say "you," we mean anyone who creates a Wizely account or visits wizelyfinance.com.

You can reach us about anything in this document at hello@wizelyfinance.com. A real person reads every email.

02What we collect

Account data

When you sign up, we collect your name and email address. We use this to identify your account and send you alerts, receipts, and service updates.

Financial account connections

To find your subscriptions, Wizely connects to your bank and credit card accounts via a secure bank-linking service. We receive read-only access to your transaction history — we cannot initiate transactions, move money, or modify your accounts in any way. See the Your financial data section for full details.

Subscription data

Once connected, we identify and store information about your recurring charges: merchant name, amount, billing frequency, and billing date. This is the core data the app operates on.

Contact and support data

When you contact us via email or the contact form, we collect your name, email address, and the content of your message. We use this exclusively to reply to you.

Usage data

We log which features you use, your approximate location (country/region), device type, and session duration. This data is used to improve the app and diagnose errors — not to build an advertising profile.

03Your financial data

We take financial data seriously. Here is exactly what we do and don't do with it:

What we never do with your financial dataWe never store your bank username or password. We never initiate transactions or move money. We never sell, share, or license your transaction history to any third party. We never use it to build an advertising profile or score your creditworthiness.

Bank connections are established through a third-party bank-linking service. Your bank credentials go directly to that service — Wizely never sees or stores them. The connection gives us read-only access to transaction history, which we use solely to identify recurring subscription charges.

You can disconnect any linked account from your Wizely dashboard at any time. When you disconnect, we stop pulling new transaction data. You can also request full deletion of all stored transaction data — see Your rights.

04How we use it

  1. Detecting and displaying your active subscriptions and recurring charges.
  2. Alerting you when a subscription price changes or a free trial is about to convert.
  3. Processing cancellation requests on your behalf when you choose to cancel a subscription.
  4. Running AI Negotiator calls with providers on your behalf when you request it.
  5. Sending you confirmation receipts and account activity notifications.
  6. Improving the accuracy of subscription detection and the app experience.
  7. Responding to your support requests.
  8. Complying with legal requests when we genuinely have to.
What we'll never doSell your data to third parties. Use your transaction history for advertising. Share your information with employers, insurers, or data brokers. Send marketing email without your explicit opt-in.

05Who else sees it

We share data with a small set of vendors who help us run the service. Each is contractually required to use it only for the purpose listed.

VendorWhat they seeWhy
Bank-linking serviceBank connection credentials (not stored by Wizely), transaction historySecure bank account linking
CloudflareIP address, page requestsCDN & DDoS protection
AWSEncrypted account and subscription data at restHosting & infrastructure
TwilioPhone numbers dialed, call metadataAI Negotiator calls

We do not share your data with subscription providers beyond what is necessary to process a cancellation or negotiation you explicitly request.

06Your rights

Access
Request a copy of any data we hold about you. Email us and we'll respond within 5 business days.
Deletion
Delete your account and all associated data — including stored transaction history — from your account settings, or email us. We'll confirm deletion within 30 days.
Disconnection
Disconnect any linked bank or credit card account at any time from your dashboard. We stop pulling new data immediately.
Correction
If anything we hold is wrong, tell us and we'll fix it.
Objection
Tell us to stop processing your data for a specific purpose without requesting full deletion.
California (CCPA) and EU/UK (GDPR) residentsYou have additional statutory rights under your local law, but we extend the rights above to everyone regardless of jurisdiction.

07How we keep it safe

All data in transit is encrypted with TLS 1.3. Account and financial data at rest is encrypted using AES-256. We never store your bank username or password — bank connections are handled by our bank-linking partner and use tokenized access credentials, not raw credentials.

Access to production systems is restricted to a small number of engineers and requires multi-factor authentication. We do not have standing access to individual user financial data — access is logged, audited, and limited to what's needed to investigate a specific support issue you raise.

If we ever become aware of a data incident affecting you, we'll notify you within 72 hours of confirming it, with a plain-language description of what happened and what data was involved.

08How long we keep it

Data typeRetentionWhy
Account data (name, email)Until deletion requestedRequired to operate your account
Transaction history24 months rollingSubscription detection accuracy
Cancellation receipts7 yearsDispute resolution
AI Negotiator call records12 monthsOutcome verification & disputes
Support correspondence12 monthsSupport context
Server access logs30 daysSecurity monitoring

09Children

Wizely is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a minor has created a Wizely account, email us and we'll delete it immediately.

10Changes to this policy

When we update this policy, we'll bump the version number and update the "last updated" date at the top. Material changes — anything that affects what we do with your data — will be noted with a plain-language description of what changed and why, and we'll notify you by email.

11Questions

If anything here is confusing, missing, or just wrong — write to us at hello@wizelyfinance.com. We want this to be the clearest privacy policy you've read, and we can't get there without you.

Questions about your data?

We meant it about reading every email. If something here is unclear, contradictory, or just feels off — tell us and we'll fix the document, not just our reply.