Privacy Policy

Effective September 3, 2026 · Last updated September 3, 2026

This Privacy Policy explains how Sophic Wealth Group (“Sophic,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with Sophic OS, the private application available at app.sophicwealth.com (the “Platform”).

This Policy covers the Platform only. Our public website at sophicwealth.com is governed by the separate privacy policy posted there.

Financial privacy notice. Sophic is a financial institution under the Gramm-Leach-Bliley Act. Our separate GLBA privacy notice describes how we treat nonpublic personal information about our clients and explains any right you have to limit certain sharing. Where the two documents conflict as to that information, the GLBA notice controls. Request a copy at info@sophicwealth.com.

1. Scope

The Platform is private and available by invitation only. This Policy applies to information we collect through the Platform, through the invitation and onboarding process, and through communications relating to your use of the Platform.

This Policy does not apply to:

our public website at sophicwealth.com, which has its own privacy policy;
third-party sites or services we do not control; or
information governed solely by a separate agreement with you.

Where information you provided through sophicwealth.com is later used in connection with your Platform account, this Policy governs that information from the point it enters the Platform.

2. Information We Collect

Information you provide

Identity and contact: name, email, phone, mailing address, and where required for verification or tax reporting, taxpayer identification number or Social Security number, and government identification.
Financial information: income, assets, net worth, account numbers and balances, bank and routing information, tax returns and filings, financial statements, entity and estate structures, and related documents.
Account and profile: credentials, settings, preferences, and role.
Communications: messages, support requests, forms, and questionnaires you submit.

Information collected automatically

IP address, device and browser type, operating system, referring pages, pages viewed, timestamps, session activity, approximate location derived from IP, and diagnostic and performance data. Collected via cookies and similar technologies. See Section 6.

Information from third parties

Information from the person or firm who invited you to the Platform, which may include your name, email address, and the context of the referral, and from program providers, issuers, administrators, verification providers, identity and fraud-prevention services, financial institutions, and professional advisors.

3. How We Use Information

We use information to:

provide, operate, secure, and improve the Platform;
issue and administer invitations, and create, provision, and authenticate your account;
evaluate eligibility and qualification, and coordinate with program providers and administrators;
perform verification, including accredited-investor and identity verification;
process transactions and payments, including ACH entries you authorize;
communicate with you about your account, requests, and service changes;
provide support and respond to inquiries;
detect, investigate, and prevent fraud, unauthorized access, and other misuse;
maintain records and comply with legal, tax, regulatory, and audit obligations;
establish, exercise, or defend legal claims; and
with your consent where required, send informational and marketing communications.

We do not use your financial or tax information to train machine-learning models, and we do not permit our vendors to do so.

We share information only as described here:

Service providers who perform functions on our behalf, including hosting, storage, security, analytics, communications, payment processing, e-signature, and document management, under contracts limiting their use to providing those services.
Program providers, issuers, administrators, and verification providers, where necessary to evaluate qualification, process participation, or administer a program you have asked us to pursue.
Professional advisors, including attorneys, accountants, auditors, and insurers, where reasonably necessary.
Your own advisors or representatives, at your direction.
Affiliates, subject to the GLBA notice referenced above.
Legal and safety: where required by law, subpoena, regulation, or governmental request, or where necessary to protect rights, property, or safety, investigate fraud, or enforce our agreements.
Business transfer: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a successor policy with comparable protections.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Google User Data

Sophic OS connects to Google in three separate places. They grant different access, and they are not the same connection.

Your Google Calendar

When you connect your own Google account, you grant calendar access only. We read your calendar and its event details so the booking picker offers times you are genuinely free, and we create and update the events for meetings booked through the platform. Connecting your calendar does not give Sophic OS access to your Gmail, your contacts, or the files in your Google Drive.

Meeting recording

If you turn on meeting recording, your calendar is also connected to Recall.ai, our recording provider, through Recall.ai's own Google connection rather than ours. That connection is read-only on your events, plus your email address so Recall.ai knows which mailbox it connected. It is what identifies which meetings a notetaker should join. Recordings and transcripts are produced by Recall.ai and stored in your Sophic OS account.

The firm's document archive

Sophic Wealth Group keeps a single Google Drive archive of client documents, connected by an administrator using the firm's own Google account. That connection is broad, full Google Drive and Google Sheets access, because it files documents into a folder structure and a spreadsheet the firm built by hand, which a narrower “only files this app created” permission cannot reach. This access belongs to the firm's own account. Connecting your calendar never grants Sophic OS access to your personal Drive.

How we use it, and what we never do

We use Google user data only to provide the features you connected it for. We do not use Google user data for advertising, and we do not sell it or transfer it to others except as needed to provide these features, as with Recall.ai above, to comply with the law, or with your consent. Where any other Sophic Wealth privacy notice describes non-personally identifiable visitor information being provided to other parties for marketing, advertising, or other uses, that does not include any data obtained through Google APIs, which is never used for advertising.

Sophic Wealth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

You can disconnect Google at any time from your profile in Sophic OS, or revoke access at myaccount.google.com/permissions. When you disconnect, we revoke the token with Google first and then delete the stored credential from our records, so we stop accessing your Google account. Disconnecting the recording provider's calendar connection deletes it at Recall.ai as well.

5. Retention

We retain information for as long as your account is active and thereafter as necessary to provide services, comply with legal, tax, and regulatory obligations, resolve disputes, and enforce agreements, generally not less than 7 years for records of financial transactions. When retention is no longer required, we delete or de-identify the information.

6. Cookies and Tracking

We use cookies and similar technologies for authentication, session management, security, preferences, and analytics. Most browsers let you refuse or delete cookies, though the Platform may not function properly without them. We honor Global Privacy Control (GPC) signals where required by law. We do not use third-party advertising cookies.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, access controls and least-privilege provisioning, multi-factor authentication, logging and monitoring, and vendor due diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Protect your credentials and notify us immediately at info@sophicwealth.com if you suspect unauthorized access.

8. Your Choices

Account information: review and update through the Platform or by contacting us.
Marketing: unsubscribe using the link in any marketing email or by contacting us. We will still send transactional and service messages.
Cookies: manage through your browser.
GLBA sharing limits: see the financial privacy notice referenced above.

9. State Privacy Rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, correction of inaccurate information, deletion, portability, and information about our collection and sharing practices, and to be free from discrimination for exercising those rights.

Important limitation: much of the information we hold is subject to the Gramm-Leach-Bliley Act or other financial and tax recordkeeping laws, and is exempt from these rights. We will tell you if an exemption applies to your request.

To make a request, email info@sophicwealth.com. We will verify your identity before responding, and will respond within the time required by applicable law. You may use an authorized agent where the law permits.

Nevada residents may submit a verified request that we not sell certain covered information. As stated above, we do not sell personal information.

10. Children

The Platform is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact info@sophicwealth.com and we will delete it.

11. Users Outside the United States

The Platform is intended for use in the United States, and information is processed and stored there. If you access it from elsewhere, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

12. Changes

We may update this Policy. If we make a material change, we will update the “Last updated” date and provide reasonable notice through the Platform or by email. Your continued use after the effective date means you accept the updated Policy.

13. Contact

Sophic Wealth Group
6975 S Union Park Drive, Suite 600, Cottonwood Heights, UT 84047
info@sophicwealth.com