Last updated 19 October 2026. Covers wealthprism.ai and the early-access list.
When you reserve a report, the form sends your email address and optional first name (and any topics you choose) through Cloudflare, which hosts the site and the form handler, to our notification service, which stores them in our reservations database and emails them to our reservations inbox using Zoho ZeptoMail. To prevent abuse we keep a one-way, keyed code derived from your IP address (not the address itself) for up to one hour. We keep them, with your founding-member number, in our reservations database hosted in the UK on Microsoft Azure (UK South), to manage the early-access list and contact you when reports open. We keep your reservation until we invite you to start your report, and for 90 days after that, so we can answer questions about it. You can ask us to delete it sooner at any time. We never sell your details or pass them to advisers or advertisers. You can ask us to delete them.
Who we are
WealthPrism Ltd is registered in England and Wales, company number 17417063, registered office 66 Shelburne Road, High Wycombe, England, HP12 3NQ. We are the “controller” of your personal data, which means we decide how and why it is used.
Questions about this notice, or want to use your rights? Email founders@wealthprism.ai. Our Information Commissioner's Office registration number is ZC267961.
What this website is
This is an information site about a product we are still building. Reports aren't open yet. When you reserve a report, the form sends your email address and optional first name (and any topics you choose) through Cloudflare, which hosts the site and the form handler, to our notification service, which stores them in our reservations database and emails them to our reservations inbox using Zoho ZeptoMail. To prevent abuse we keep a one-way, keyed code derived from your IP address (not the address itself) for up to one hour. You can't yet get a report, connect an account or be introduced to anyone.
What we collect
What you give us
Only what you choose to give us:
- Your email address, so we can send your invitation. This is the only thing you must give to reserve a report.
- Your first name, if you add it, so the email can say hello properly.
- What's on your mind, if you pick any topics after you reserve (for example “My pension” or “A death in the family”). It helps us prepare. You don't need to tell us anything sensitive, and picking none is fine.
- Anything you write to us, if you email us.
That is all. We don't ask for financial figures, account details, health information, or anything about anyone else. The Cloudflare Pages function passes submitted details to our notification service, which stores your email address, your first name (if you give it), the topics you choose, which link or campaign brought you to the site (if known), the founding-member number of the person whose invite link you used (if you used one), your founding-member number and the dates you reserved and last updated your details in our reservations database, hosted in the UK on Microsoft Azure (UK South). We use them to manage the early-access list and to contact you when reports open. Our email delivery provider (Zoho ZeptoMail) and the reservations inbox (Zoho Mail) process or hold the email under their own service and data-processing terms. If you don't use the sign-up form, we collect nothing from you apart from the technical details below.
What we collect automatically
The usual technical details when you visit any website: your IP address, browser and device type, and the pages requested. The companies that run the site keep these (see “Who else sees it”).
If you arrive from one of our links that carries campaign tags (for example a link from our “puzzle page”), we record which link or campaign brought you to the site, taken only from those tags. It is kept in your browser for that visit (session storage) until you reserve, and then stored with your reservation and included in our internal reservation notification email. We don't record the page you came from, advertising click identifiers or anything else about you.
If you arrive through a founding member's invite link (wealthprism.ai/r/ followed by their number), we record which member's invite link you used: their founding-member number. It is kept in your browser for that visit (session storage) until you reserve, and then stored with your reservation and shown in our internal reservation list. The person who invited you isn't told who you are.
Why we can use it, and on what basis
| What we do | Our legal basis (UK GDPR) |
|---|---|
| Keep the early-access list, email you when access opens, and confirm your place | Your consent, given when you submit the sign-up form. You can withdraw it at any time by emailing us, and we will delete your details. It won't affect anything done before. |
| Reply to your messages | Our legitimate interest in answering people who write to us. |
| Keep the site secure and working | Our legitimate interest in running a safe, reliable site. |
| Keep company records and answer a regulator or court if required | Legal obligation. |
What we do with it
We contact you about WealthPrism. That is the only purpose.
When you reserve a report or send an enquiry, we send a short confirmation email to the address you gave, and nothing else unless you ask.
We don't sell your details, share them with advisers or anyone else, use them for advertising, profile you, make automated decisions about you, or add you to a marketing list for anything unrelated. If you tell us to stop, we stop and we delete.
How long we keep it
- Your place on the early-access list: we keep your reservation in our reservations database until we invite you to start your report, and for 90 days after that, so we can answer questions about it. You can ask us to delete it sooner at any time by emailing founders@wealthprism.ai. Your founding-member number is not reused.
- Reservation notification emails: we manually delete the notification email from our Zoho Mail inbox within 60 days, or sooner if you ask us to delete it. Zoho says its backups are retained for three months, so backup copies may remain until they expire.
- Email content held by ZeptoMail (Zoho CPaaS): up to 60 days under our account's current content-retention setting. This applies across the account's agents and is separate from the copy delivered to our reservations inbox.
- General enquiry emails: 12 months after our last exchange.
- Technical and security logs: Cloudflare Workers Logs are retained for up to seven days under our current Paid plan. When the production reservation service is deployed, Azure Container Apps operational and access logs will be retained for up to 90 days and may include IP addresses and request or diagnostic details.
- Company records: as long as the law requires.
If you contact us through the enquiry form on our For advisers and solicitors page, your name, firm, work email and regulator are passed through Cloudflare (which hosts the site and the form handler) and sent to us by email using Zoho ZeptoMail; we keep these enquiries as described for general enquiries above.
Who else sees it
The providers below support the site, the reservation and enquiry forms, and platform features. They process the details needed to deliver your request, or to generate an AI response once platform features launch, under their applicable service and data-processing terms.
| Company | What they do | What they get |
|---|---|---|
| Cloudflare | Hosts the website and runs the Pages Function that accepts reservation submissions | Technical details of visits and, when the form is enabled, the submitted email address, optional first name, selected topics, the link or campaign that brought you to the site (if known) and the founding-member number of the invite link you used (if any) |
| Microsoft Azure | Hosts the notification service and our reservations database in UK South, and will host the Azure OpenAI deployment there. The AI deployment uses Global Standard, which may process inference data in any Azure region. Environment operational and access logs are retained for up to 90 days. | The reservation details in transit while the notification is prepared and sent; information included in AI prompts and generated responses; IP addresses and request or diagnostic details in platform logs; and the reservation details stored in our reservations database (email address, first name if given, topics chosen, the link or campaign that brought you to the site if known, the founding-member number of the invite link you used if any, your founding-member number and dates). |
| ZeptoMail (Zoho CPaaS) | Delivers reservation notifications using the UK Zoho API endpoint | The submitted details included in the email. Our account currently retains message content for up to 60 days. |
| Zoho Mail | Receives the notification in our reservations inbox, hosted in Zoho's US data centre. | The notification and the submitted details it contains. We manually delete messages within 60 days. Zoho says backups are retained for three months. |
The notification service stores reservation details in our reservations database in Azure UK South for the period above. Email copies are held by ZeptoMail and Zoho Mail according to the retention periods above.
Nobody else. Not advisers. Not advertisers. We may also share details if the law requires it, or to protect our legal rights.
If your details leave the UK
The notification service, our reservations database and the Azure OpenAI deployment are hosted in Azure UK South. The AI deployment uses Global Standard: although data at rest remains in the designated Azure geography, inference data may be processed in any Azure region. Information in AI prompts and responses may therefore be processed outside the UK. The configured ZeptoMail API endpoint is in Zoho's UK data centre, while Zoho Mail hosts our reservations inbox in its US data centre. Cloudflare operates a global network and may process data in the United States. Where a provider transfers personal data outside the UK, the appropriate contractual transfer safeguards apply, including standard contractual clauses and the UK Addendum where required, or an adequacy decision where available. Read more about Azure deployment types and data processing.
Cloudflare receives technical details of a visit whether or not you use the form. When the form is enabled, Cloudflare, the notification service, ZeptoMail and the reservations inbox provider process the sign-up details to deliver your request, and the notification service stores them in our reservations database.
Cookies and similar tools
We use Google Analytics (GA4) to see which pages are visited and where visitors come from, such as search, social media or direct visits. It sets analytics cookies only if you choose Accept on the cookie banner; until then, analytics storage stays denied. We use no advertising cookies, no advertising features or personalisation, no pixels and no session recording. You can change your choice at any time with Cookie settings.
The site stores your light or dark choice, and on the puzzle page your game progress and best scores, in your browser's local storage; these stay on your device and are not sent to us. If you arrive from a link with campaign tags, the site keeps those tags in your browser's session storage for that visit; they are sent to us only if you reserve, and are then removed from your browser. The same applies to the founding-member number in an invite link you followed. Session storage is cleared when you close the tab. Cloudflare may set strictly necessary security cookies, such as cf_clearance or __cf_bm, when its protection or challenge features are used. These are not used for advertising or analytics. The reservation and enquiry forms use Cloudflare Turnstile to check for automated abuse; it processes technical information about your browser and connection to do this. The Cloudflare Pages function requires a same-origin request and uses Cloudflare's rate-limiting service to restrict repeated submissions.
Your rights
You can ask us to:
- give you a copy of what we hold about you;
- correct anything that's wrong;
- delete your details;
- restrict how we use them, or object where we rely on legitimate interests;
- give you the details you gave us in a portable format; and
- stop using them where you gave consent, by withdrawing it.
Email founders@wealthprism.ai. We'll respond within one month, and there is no charge. We may need to check it's you first.
Complaining about your data
If you're unhappy with how we've handled your information, email founders@wealthprism.ai. We'll acknowledge your complaint within 30 days and tell you what we are doing about it. There is no charge.
If you're not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
This site is for people aged 18 and over.
When reports open
Reports aren't open yet, and nothing above covers them. Before they open we'll publish a fuller privacy notice that explains what a report needs (such as details you give us, documents you choose to share, and accounts you choose to connect with read-only access), who sees what, and how long we keep it. We'll email you before you start.
Changes to this notice
If we change this notice we'll post the new version here and update the date. If the change matters to you, we'll email you.
WealthPrism Ltd · company number 17417063 · 66 Shelburne Road, High Wycombe, England, HP12 3NQ