We are going to tell you exactly what data we collect, exactly what we do with it, and exactly who we share it with.
The short version: we collect what you give us to run the platform. We use it to run the platform. We never sell your personal financial information, and we never use it for marketing without your permission. You control whether recruiters or employers can contact you — that setting is off unless you turn it on. The processors we rely on to run the platform are listed in section 5, and what happens if the company is ever sold is in section 9.
The long version is below. It is written in plain English because you have already read enough fine print.
Attending Financial ("we," "our," or "us") operates the physician financial planning platform at attendingfinancial.com. This Privacy Policy explains what information we collect, how we use it, and how we protect it. If you have questions, contact us at privacy@attendingfinancial.com.
1. Data We Collect
- Account information: your email address, name, and authentication credentials when you create an account.
- Profile data: career stage, specialty, employer type, income range, loan details, and other financial profile fields you enter during onboarding or in settings.
- Financial account data: if you connect accounts via Plaid, you authorize Plaid's read-only Transactions, Liabilities and Investments products, which is the consent Plaid shows you. From that access we retrieve account balances, loan balances, and investment-account transactions (used only to count your retirement contributions). We do not retrieve or store your day-to-day spending transactions, and we never store your banking credentials.
- Usage data: pages visited, features used, and interaction events to improve the platform and troubleshoot issues.
- Payment data: Free for every member. No ads, commissions, referrals, or data sales. Every member feature — the education, the tools and the tracking — is free and stays free. The platform collects no payment method for membership; voluntary support contributions are processed by Stripe, which stores the card. For accounts that ever transacted through Stripe, we store only the Stripe customer ID and subscription status — never a card number or full billing details.
2. How We Use Your Data
- To provide the platform: your profile data powers personalized AI insights and planning tools.
- To resolve any legacy Stripe billing records — the platform does not currently charge for membership.
- To send transactional emails: account confirmation, security notices, and policy-change notices via Resend.
- To improve the platform: aggregated, anonymized usage patterns help us prioritize features.
- We do not sell your data. We do not share your financial data with advertisers, insurance companies, financial product vendors, or data brokers. No recruiter or employer receives anything about you unless you have turned on career visibility (section 10), and then only the fields that setting describes.
- Service providers, including our AI provider, process information to operate the platform — section 5 lists exactly what each one receives.
3. Data Retention
- Your data is retained while your account is active.
- When you delete your account, we immediately disconnect any linked financial institutions, cancel any legacy subscription, delete the financial data synced from those institutions, scrub your direct identifiers (name, date of birth, NPI, the registry record behind your verification), and turn off career visibility, recording that you did.
- We retain a limited security and billing trail — your Plaid access audit log and Stripe billing records — for 90 days, after which the remaining records and your account are permanently deleted.
- Investment-transaction records retrieved through Plaid are reduced to contribution totals; the underlying transaction lines are not retained.
- Anonymized, aggregate usage metrics may be retained indefinitely as they contain no personal information.
4. Data Security
- Data is stored in Supabase (PostgreSQL) with row-level security policies that prevent any user from accessing another user's data.
- All data is encrypted in transit (TLS 1.2+) and at rest.
- Plaid access tokens are encrypted at rest using AES-256.
- We do not store plain-text passwords. Authentication is handled by Supabase Auth.
- Stripe handles all payment data in their PCI-compliant environment.
5. Third-Party Services
- Supabase (database and authentication) — supabase.com/privacy
- Stripe (payments) — stripe.com/privacy
- Plaid (financial account connectivity) — plaid.com/legal/#end-user-privacy-policy
- Resend (transactional email) — resend.com/legal/privacy-policy
- Vercel (hosting) — vercel.com/legal/privacy-policy
- PostHog (product analytics) — posthog.com/privacy — a first-party cookie identifies your browser to us; it is never sold or shared.
- Anthropic (AI advisor and contract reading) — anthropic.com/legal/commercial-terms — we use Anthropic's commercial API. Under Anthropic's Commercial Terms (effective June 17, 2025), Anthropic does not train its models on the content we send it. Each advisor request includes the profile figures the advisor needs to answer you — career stage, specialty, state, employer type, income, wRVU rate and loan balances — without your name, email or NPI. Contract reading sends the contract text you upload.
6. Your Rights
- Access: you can export your profile data from Settings.
- Correction: update any profile data at any time in Settings.
- Deletion: delete your account from Settings → Privacy & Data. Identifiers are removed immediately; the remaining records are permanently deleted after the 90-day window in section 3.
- Portability: contact us at privacy@attendingfinancial.com for a data export.
- Residents of California (CCPA) and the European Economic Area (GDPR) have additional rights — contact us to exercise them.
7. Cookies
- We use cookies for authentication (Supabase) and for first-party product analytics (PostHog), which tells us which pages and tools are used. We use no advertising cookies and share analytics with no one.
8. Changes to This Policy
- We will post material changes to this page, update the "Last updated" date, and email account holders at least 30 days before a material change takes effect. Continued use of the platform after that date constitutes acceptance.
- Every change is listed, dated, with what changed and why, at attendingfinancial.com/policies/changes.
9. If Attending Financial is sold, merged, or winds down
- Any successor is bound by these terms exactly as written on the day of transfer. It cannot loosen them for data collected before that day.
- You will hear from us, by email, at least 30 days before any transfer. During that window you can export everything you have entered and delete your account. If you delete before the transfer date, nothing of yours is transferred — and anything still inside the 90-day deletion window on that date is purged, not transferred.
- Your career visibility setting transfers only if it is on at the time of transfer. The setting itself and its history — when you turned it on and off — transfer as the record of your consent. Career visibility never carries a compensation figure, a contract term, or connected-account data.
- Bank and brokerage connections are severed at transfer. The stored credentials are deleted; nothing reconnects unless you choose to reconnect with the successor.
- If the platform winds down instead of transferring, you are notified, given the same window to export, and then your data is deleted.
10. Career visibility
- A setting in your account, off by default, that records whether you are open to hearing about opportunities. It carries your specialty, practice state, career stage, and the preferences you enter on that page — never a compensation figure, a contract term, a balance, or anything from a connected account.
- Turning it on creates a dated consent record you can see. Turning it off takes effect immediately and is recorded the same way.
- No recruiter or employer can see it today. There is no recruiter or employer login, list, or export. Before that ever changes you will hear from us first, and the setting is the only way anyone will reach you through Attending Financial.
11. Contact
- Privacy questions: privacy@attendingfinancial.com
- General: hello@attendingfinancial.com