Privacy Policy — Tidal Advisor

1. Overview

RIA Wave, LLC ("RIA Wave," "we," "us") operates Tidal Advisor, a software platform for financial advisory firms. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our platform. By using Tidal Advisor, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly (account registration, firm profile, client data entered into the platform), information generated automatically through your use of the service (usage logs, session data, feature interaction events), and information from third-party services you connect (custodian data integrations, document uploads).

3. How We Use Your Information

We use information to provide, operate, and improve the Tidal Advisor platform; to generate AI-powered features including document extraction, client intelligence files, and communication drafts; to authenticate users and enforce access controls; to detect and prevent fraud and security incidents; and to communicate with you about the service, including updates and support.

4. Client Data

Client data entered into Tidal Advisor by your firm belongs to your firm. RIA Wave processes this data only as directed by your firm and as necessary to provide the platform. We do not sell, rent, or share client data with third parties except as required by law or as necessary to operate the platform (e.g., AI processing under zero-data-retention agreements).

5. AI Processing

Certain platform features use AI services provided by Anthropic (Claude) and OpenAI (Whisper). Client data submitted to these services is processed under agreements that prohibit the use of your data to train AI models. Data is not retained by these providers beyond the duration of the API request. You can review Anthropic's privacy policy at anthropic.com and OpenAI's policy at openai.com.

6. Data Retention

We retain your firm's data for the duration of your subscription and for up to 90 days following termination, after which data is permanently deleted. You may request earlier deletion by contacting us at privacy@riawave.com. Audit logs may be retained longer as required by law.

7. Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, and row-level security at the database layer. See our Security Overview at tidaladvisor.com/security for complete details.

8. Sensitive Financial Information

Tidal Advisor is designed to never store full Social Security Numbers or complete financial account numbers. Only the last 4 digits of each are retained. Full numbers entered during document processing are discarded after extraction.

9. Cookies

We use strictly necessary cookies for session management and authentication. We do not use advertising or tracking cookies. Session cookies expire after 8 hours of inactivity.

10. Your Rights

You have the right to access, correct, or delete personal information we hold about you. To exercise these rights, contact us at privacy@riawave.com. We will respond within 30 days.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@riawave.com · RIA Wave, LLC · Scottsdale, AZ