Effective Date: March 21, 2026 · Last Updated: March 21, 2026
AdvisorAssist LLC ("AdvisorAssist," "we," "us," or "our"), a Utah limited liability company based in Salt Lake City, operates the AdvisorAssist platform, including the desktop application, website at advisorassist.app, APIs, and related services (collectively, the "Service").
This Privacy Policy describes what information we collect, how we use it, and your choices regarding your data. AdvisorAssist is designed with a privacy-first architecture: the majority of your data is stored locally on your device and never leaves your machine.
When you create an account, we collect your name and email address through Google or GitHub OAuth. We do not collect or store passwords.
When you activate the desktop application, we collect device identifiers to bind your license to your machine:
This information is used solely for license validation and anti-piracy purposes.
Payment processing is handled by Stripe. We do not directly collect, store, or process credit card numbers or bank account details. Stripe may collect billing information in accordance with their privacy policy. We receive a Stripe customer ID and subscription status from Stripe.
The following data is created and stored exclusively on your local machine in an encrypted database. This data is never transmitted to our servers:
When you visit our website, we may collect standard web server logs (IP address, browser type, pages visited). We use this information to maintain and improve the website.
We use the information we collect to:
We do not use your data to train AI models. We do not sell your data to third parties. We do not collect usage analytics or telemetry from the desktop application.
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We share information only in these circumstances:
The AdvisorAssist desktop application stores the majority of your data locally on your machine using an encrypted SQLite database. Encryption keys are generated and stored in your operating system's secure keychain:
Authentication credentials (AppDirect session tokens, Google OAuth tokens) are additionally encrypted using Electron's safeStorage API before being written to disk. This data never leaves your machine.
Important: Subscription Tier Data Flow
If you are on the Subscription tier, AI prompts are sent to a dedicated Cloud Run instance provisioned exclusively for your organization. These prompts may include account context such as customer names, revenue figures, renewal dates, and tech stack information that you have loaded into the application.
Each Subscription tier organization receives its own isolated Google Cloud Platform project. Your AI processing data is not shared with other customers or used for any purpose other than generating responses to your prompts.
Edge tier customers: If you use the Edge tier with a local AI model (Ollama), no data is sent to any external server for AI processing. All inference happens locally on your machine.
Google Gemini (optional): If you choose Google Gemini as your AI provider, prompts are sent to Google's Generative AI API. Google's use of this data is governed by their API terms of service.
The Service integrates with the following third-party services, each with their own privacy practices:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Billing info (handled by Stripe, not stored by us) |
| Google Cloud Platform | Cloud AI hosting (Subscription tier) | AI prompts with account context |
| Google Generative AI | AI processing (optional) | AI prompts with account context |
| AppDirect | Account data sync (user-initiated) | User's own session credentials (not shared by us) |
| Google / GitHub OAuth | Authentication | Name, email address |
We implement appropriate technical and organizational measures to protect your information:
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Local data: Data stored on your device persists until you delete it or uninstall the application. You have full control over your local data.
Server-side data: Account information, license records, and organization data are retained while your account is active. After account termination, we retain this data for up to 90 days for operational and legal purposes, after which it is permanently deleted.
Payment records: Transaction records are retained by Stripe in accordance with their data retention policies and applicable financial regulations.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
To exercise any of these rights, contact us at support@advisorassist.app. We will respond within 30 days.
For locally stored data, you have direct control. You can delete your local database at any time by removing the application data directory.
The Service is designed for business professionals and is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website at least 30 days before the changes take effect. The "Last Updated" date at the top of this page indicates when the policy was last revised.
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
AdvisorAssist LLC
Salt Lake City, Utah
support@advisorassist.app