Privacy Policy

1. The short version

X1 holds your household's financial record: your documents, entities, decisions, and the corrections you make along the way. That record is yours. We use it to run the product for you. We do not sell it, we do not give it to advertisers, and we do not use your household's record to serve other customers without your explicit consent. You can export it, and you can ask us to delete it.

The rest of this policy is the detail behind those sentences. Where a detail limits a promise, the detail is stated plainly rather than buried.

2. Who we are

X1 Wealth is operated by Lever Wealth LLC, a Wyoming limited liability company doing business as X1 Wealth LLC ("X1 Wealth," "we," "us"). Our mailing address is 7660 Fay Ave - H141, La Jolla, CA 92037, United States. You can reach us at hello@x1wealth.com.

3. Two zones: the website and the platform

We treat our public marketing website and the authenticated X1 platform as two different places with two different rules.

The marketing website (pages you can visit without signing in) uses advertising measurement tools such as Google Analytics and, on some signup pages, the Meta pixel, so we can tell which of our own marketing works. These tools see website behavior such as pages visited and signup events. They never see the inside of your X1 account.

The authenticated platform (everything after you sign in) carries no advertising pixels and no ad-network code. It uses product analytics and error monitoring so we can fix problems and understand which features are used. Your financial content is never shared with advertising or ad-measurement services of any kind.

4. What we collect

On the platform, the information falls into four groups:

• Account information. Name, email, authentication details, roles, and billing records.
• Your record. The documents you upload, the accounts you connect (for example through Plaid), the entities, facts, policies, and relationships X1 organizes from them, and the people and professionals you invite or authorize.
• Your working history. Questions you ask, answers X1 gives, decisions you log, corrections and confirmations you make, and coordination with your professionals.
• Usage and device information. Product events, log data, and error reports that tell us the software is working.

On the marketing website we collect the usual website data: pages visited, referral source, and anything you submit in a form.

5. How we use information

• To provide, secure, and support the product.
• To build and maintain your household's record and keep it accurate.
• To generate the briefs, packets, answers, and suggestions you ask for.
• To process payments and manage subscriptions.
• To communicate with you about your account and the service.
• To measure and improve the product.
• To comply with law and enforce our terms.

6. What X1 learns with you stays yours

Modern AI products learn from how you use them. We think you should own that learning, so we treat the following as your information, not ours: your prompts and questions, the answers generated about your household, your corrections and confirmations, your logged decisions and their outcomes, and the memory X1 builds from all of it.

• It stays in your boundary. Your household's record serves your household. A firm's practice record serves that firm. One customer's record is never used to answer another customer's questions, except through the consented path described in section 8.
• You can take it with you. The product can generate a bounded, portable file of supported record sections. The file states whether every supported section fit within the self-serve limits and includes an integrity hash over the fields it emits. When the file is complete and X1 export signing is configured, it also includes a cryptographic signature. If a section exceeds the self-serve limits, the file is labeled incomplete and you can request a fuller access extract from us.
• You can build on it. You may use your exported record and X1 outputs about your own household or practice to train or evaluate models of your own. What X1 learned with you is yours to keep using.
• We keep the machinery. X1 retains its own software, models, scoring systems, and the platform improvements we make from operating the service in aggregate. Owning your record never means owning our code.

7. AI model providers

X1 uses commercial AI providers (currently including Anthropic, OpenAI, and Google) to process content you submit through business API services rather than personal consumer accounts. X1 does not grant those providers permission to train their models on household content. The standard commercial API terms for these services generally restrict provider training without customer permission.

We are completing a route-by-route verification of each provider's retention behavior for the specific paths X1 uses, and we maintain a subprocessor schedule available to customers on request. We will not claim a specific retention guarantee for a specific route until we have verified it.

If you connect X1 to an outside AI assistant (for example Claude or ChatGPT), the information you send through that assistant is governed by that provider's terms, not ours. X1's connectors are scoped so an outside assistant can read and propose only what your X1 permissions already allow.

8. Learning across households: consent only

A firm or program on X1 can benefit from anonymized patterns across the households it serves, but only under all of the following conditions: the household has explicitly opted in (and can revoke at any time), the pattern is drawn from a minimum-size cohort so no household is identifiable, concentration and diversity checks pass, and the result is a proposal a human at the firm must approve. No raw household record ever feeds another household or firm.

9. What we never do

• We never sell your personal information.
• We never give your information to data brokers, ad networks, or third-party advertisers.
• We never run advertising, remarketing, or tracking pixels inside the authenticated platform.
• We do not grant AI providers permission to train their models on your household content.
• We never use one customer's record to serve another outside the consented path in section 8.

10. When we share information

We share information only in these situations:

• Service providers. Companies that host, store, process, or deliver parts of the product for us (hosting, database, authentication, AI processing, payments, email, notifications, analytics, error monitoring, and financial account connectivity). They are bound to use your information only to provide their service to us.
• People you authorize. Family members, advisors, coaches, and other professionals you invite or approve. What they see is scoped by the permissions you grant, and you can revoke access.
• Legal requirements. When required by law, subpoena, or to protect the rights, safety, or property of X1, our users, or others.
• Business transfers. If X1 is acquired or merges, your information may transfer with the business. The commitments in this policy follow the data; a successor cannot use it in ways this policy prohibits without obtaining your consent.

11. Cookies and analytics

We use cookies to keep you signed in and to remember preferences. The marketing website uses analytics cookies and, on some pages, advertising measurement cookies as described in section 3. The authenticated platform uses cookies for sign-in, security, and product analytics only. Your browser settings can limit cookies; the product may not work without the sign-in ones.

12. Retention and deletion

Different information lives for different lengths of time:

• X1-controlled temporary AI processing data (such as application traces that X1 intentionally retains) is kept only as long as needed for debugging, quality, security, or legal obligations, then deleted or deidentified. Provider-side processing and retention follow the route-specific terms and settings described in section 7; we do not represent every provider route as having the same retention period.
• Your active record is kept while your account or an authorized professional relationship remains active, subject to the retention limits and legal exceptions that apply to the relevant record.
• Deleting content invokes the applicable deletion path for that item. It may not remove related shared records, derived records, legally retained records, backups, or service-provider copies at the same moment.
• Ending account access or removing a login identity prevents future sign-in and starts the applicable account-minimization process. It is not, by itself, evidence that every related record has been erased from every system.
• A verified erasure request is a separate privacy process. We verify identity, define the request scope, review legal holds and shared or professional records, apply the deletion or minimization processes available for that scope, and explain what was completed and what must be retained. We do not promise universal cross-system erasure within a single fixed period.
• Professional and compliance records (for example, approval records a firm is legally required to keep, or billing records we are required to retain) are kept for the period the law requires, even after deletion of the rest of the account.

13. Security

Your data is encrypted in transit and at rest. Authenticated roles, current professional relationships, and explicit sharing grants limit access. We record key document access and sharing events to support accountability, security review, and incident response. Documents live in private storage with scoped access rather than public links. No system is perfectly secure, and we will notify you as required by law if a breach affects your information. Our current security posture is described at x1wealth.com/security.

14. Your rights and choices

Regardless of where you live, you can: access the information we hold about you, export supported sections of your record, request a fuller access extract, correct inaccurate information, delete supported content, ask us to end account access or remove your login identity, make a verified erasure request, and opt out of marketing email. Those actions can have different scopes and consequences, as section 12 explains. If you are in a jurisdiction with specific privacy rights (for example the CCPA in California or the GDPR in Europe), those rights apply and we honor them; we do not sell or share personal information as those laws define it. To exercise any right, email hello@x1wealth.com. We will verify your identity before acting on a request and respond within the time the applicable law requires.

15. Children

X1 is for adults. Accounts require you to be at least 18. Where family features involve information about minors (for example, family governance documents), that information is provided and controlled by the responsible adult on the account. We do not knowingly collect information directly from children.

16. Changes to this policy

When we change this policy, we will update the date at the top. If a change meaningfully reduces your rights over your information, we will notify you before it takes effect and give you a chance to export your record first.

17. Contact

Questions about this policy or your information: hello@x1wealth.com.