Trust Center
Everything about how PeakWorth™ protects you, in one place
The short version
PeakWorth helps people make important financial decisions. That only works if you trust how we handle your information. This page pulls together everything you (or a skeptical partner, advisor, or security reviewer) might want to check before relying on us: how your data is secured, what our privacy practices are, exactly which third parties touch your data, how we handle AI, what happens to your data if PeakWorth ever shuts down, and an honest account of where we are on formal compliance.
We don't sell your data, we don't run third-party advertising trackers, and you can export or delete everything at any time. The deep links below go to the canonical pages where each topic lives in full.
A note from the founder
I built PeakWorth after years of relying on detailed financial models to make major decisions for my own family—from career moves to home purchases to retirement planning. Professionally, I've spent my career helping technology companies make complex financial decisions as a CFO, and I previously practiced as a licensed CPA. Those experiences shaped how I think about balancing today's choices against long-term financial outcomes.
Over time, I realized households deserved the same kind of decision engine that businesses rely on. That's why I built PeakWorth—to help people make better financial decisions with greater confidence and a clearer understanding of the long-term tradeoffs.
If you trust us with your financial information, I believe we owe you complete transparency about how we protect it. PeakWorth exists to help people make better financial decisions—not to monetize their financial data or push financial products.
Jump to
TLS, AES-256-GCM, bcrypt, session revocation
Privacy policy, disclosures, refunds
The third parties that touch your data
Export everything, no lock-in
What's sent, what's stripped, how to opt out
Where we are, what's planned
Data security
Your connection to PeakWorth is always encrypted in transit with TLS, the most sensitive pieces (like your Plaid access tokens) are encrypted again at rest with AES-256-GCM, passwords are hashed with bcrypt, and logging out or resetting your password revokes outstanding sessions server-side. We also offer two-factor sign-in and rate-limit login and registration globally.
Privacy & legal
We collect only the data needed to power your projections, we never sell your information, and bank linking via Plaid is entirely optional. Our privacy policy covers what we collect, how long we keep it, your access and deletion rights (including CCPA), cookies and analytics, and session-replay masking. Our disclosures page covers the educational-only nature of our projections, and our refund policy covers the 14-day trial and cancellation.
Subprocessors
These are the only third parties that receive any of your data, and only the slice they need to do their job. This is the same list maintained on our Security overview — the two pages share one source so they can never drift.
PlaidSecurity overview ↗Bank account linking. Receives bank credentials directly from you (via Plaid Link) and returns transaction and balance data.
StripeSecurity overview ↗Subscription billing. Receives your email and payment details (entered into Stripe's hosted checkout — we never see your card number).
AnthropicSecurity overview ↗AI advisor responses. Receives financial context with direct identifiers (name, email, account numbers) removed, plus the messages you type into the AI chat.
ResendSecurity overview ↗Transactional email delivery (welcome, billing, security notifications).
ReplitSecurity overview ↗Application hosting and managed PostgreSQL database.
If PeakWorth goes away
Your financial data is yours, and we build so you're never locked in. PeakWorth is in Early Access, and we think it's only fair to tell you up front what happens to your data if we ever wind the product down.
You can always export your data
You can export your data from your account at any time — not just at shutdown. Your information lives in standard, portable formats you can take to a spreadsheet or another tool. We don't trap your data in a proprietary format you can't get back out.
No lock-in, and advance notice
We never see or store your bank login credentials, so winding down a connection just means revoking a read-only token. If we ever had to sunset PeakWorth, we would give registered users advance notice and a clear window to export everything before access ends, and we would delete your data on the timeline described in our privacy policy.
AI & your data
PeakWorth uses AI in a few places — the AI Advisor chat, AI Insights, and onboarding guidance. Here's exactly how your data is handled when AI is involved:
Which provider we use
AI features are powered by Anthropic (Claude). Anthropic is the only AI provider that receives any of your financial data, and it does so as a subprocessor bound by its own terms — see the subprocessor list above.
What is sent — and what is stripped first
Anthropic receives only the financial context needed to answer your question after direct identifiers (such as your name, email address and account numbers) have been removed. Free-text messages you type into the AI chat are forwarded as written to generate a response — so please don't paste sensitive personal details (full account numbers, government IDs, passwords) into chat.
Retention & training
Your conversation history is stored in your account so you can revisit it, and you can clear it. The financial context we send powers your response; we don't sell AI inputs or outputs, and we don't use your financial data for third-party advertising.
How to opt out
AI features are optional. If you'd rather not use them, simply don't open the AI Advisor — the core projection and decision tools work without it. You can also delete your account at any time, which removes your data including your chat history.
Compliance roadmap
Where we are today: PeakWorth is in Early Access. We are not currently SOC 2, ISO 27001, or PCI-DSS certified, and we don't display badges we haven't earned. Card data never touches our servers — payments run through Stripe's PCI-compliant hosted checkout.
What we already do, today, maps to the controls those frameworks look for: encryption in transit and at rest, hashed passwords, role-limited and logged internal access, server-side session revocation, rate limiting, a written incident-response commitment, a public status page, and a documented subprocessor list.
What's planned
As PeakWorth matures we intend to pursue formal SOC 2 readiness, including an independent assessment, and to publish updates here as we reach concrete milestones. We'll only describe certifications once they're actually in hand — until then this section reflects intent, not a claim of certification.
Contact our team
- General questions — email support@peakworth.com and a member of our team will get back to you.
- Security vulnerabilities — if you believe you've found a security vulnerability, email security@peakworth.com. We'll acknowledge within three business days.
- Support — for help using PeakWorth, start with the Help Center, which covers bank linking, billing, and data questions.
Why PeakWorth exists
PeakWorth was built because households make their biggest financial decisions — buying a home, changing careers, retiring — with less rigor than a business would bring to a far smaller choice. We wanted to give families the same kind of decision engine that companies rely on, so the long-term tradeoffs of each option are visible before you commit.
Our founder spent his career as a CFO helping technology companies work through complex financial decisions, and previously practiced as a licensed CPA. PeakWorth applies that same modeling discipline to the decisions that matter most in personal life.
Small differences in these decisions compound over decades. Optimizing how you save, borrow, and plan can be worth years of financial independence — which is why we think financial optimization deserves real tooling, not guesswork.
And because you're trusting us with your financial picture, we choose transparency over hype: no badges we haven't earned, a public list of every third party that touches your data, and honest answers about where we are today. That's the standard this page exists to uphold.