Privacy Policy
Vesta Prosperity PBC · Last updated: January 15, 2026 ·
Effective date: January 15, 2026
This Privacy Policy describes how Vesta Prosperity PBC ("Vesta," "we," "us," or "our")
collects, uses, shares, and protects your information when you use our website, platform,
and services (collectively, the "Services"). Vesta respects your privacy and is committed
to protecting it through compliance with this Privacy Policy.
1. Information We Collect
We may collect the following categories of information:
- Identifiers — name, address, email address, phone number, IP address
- Government identification — Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN), passport, and other identity documents as required for tax or financial services
- Tax information — income, filing history, W-2s, 1099s, Schedule C data, and related tax documents
- Financial account data — bank account information, savings and retirement account data, contribution history, and transaction records
- Device and usage data — browser type, operating system, pages visited, time spent, and referring URL
- Communications — messages you send to us through email, forms, or other channels
We collect this information directly from you, from our nonprofit partner organizations, from financial institution partners, and automatically through cookies and similar technologies.
2. How We Use Information
We use the information we collect to:
- Provide tax preparation, ITIN application, and financial empowerment services
- Open, manage, and support savings and retirement accounts on your behalf
- Verify your identity as required by IRS, banking, and anti-money laundering (AML) regulations
- Connect you to VITA sites, nonprofit partners, banks, and credit unions in your area
- Comply with applicable federal and state laws, including IRS requirements
- Prevent fraud, unauthorized access, and misuse of our platform
- Communicate with you about your account, services, and updates
- Improve, analyze, and develop our platform and services
- Fulfill our obligations to funding partners and grant-making organizations (in aggregated, de-identified form only)
We do not use your personal information for advertising, and we do not sell it to third parties.
3. Who We Share Information With
We may share your information with:
- VITA sites and nonprofit partners — to facilitate tax preparation and ITIN services you have requested
- The IRS and tax authorities — as required to process ITIN applications and tax filings
- Banks, credit unions, IRA custodians, and financial service providers — to open and manage financial accounts you have enrolled in
- Technology vendors and service providers — who assist us in operating our platform, subject to confidentiality agreements
- Law enforcement or government agencies — only when required by law, legal process, or to prevent serious harm
We do not sell your personal information. We do not share your information for marketing purposes without your explicit consent.
Please note: if you use Vesta services through a nonprofit partner organization, that organization may also have access to information you submit through their intake portal, as governed by your agreement with them.
4. Data Security & Retention
We use administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These include:
- Encryption of sensitive data in transit and at rest
- Access controls limiting data access to authorized personnel
- Secure PO Box services to protect client mailing addresses
- Regular security assessments of our systems
We retain your personal information for as long as necessary to provide our services and comply with our legal, tax, and financial regulatory obligations. In general, tax and financial records are retained for a minimum of seven years as required by IRS guidelines.
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we take these obligations seriously and will notify you as required by law in the event of a breach.
5. Your Rights
Depending on where you live, you may have certain rights regarding your personal information:
- Access — request a copy of the information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Deletion — request deletion of your personal information, subject to legal retention requirements
- Portability — request that we transfer certain information to another service in a machine-readable format
- Objection or restriction — object to or restrict certain types of processing
To exercise any of these rights, contact us at hello@growwithvesta.com. We will respond within 30 days. Note that certain rights are subject to legal limitations — for example, we may be required to retain tax and financial records regardless of a deletion request.
6. Children's Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected information from a child under 13, we will take steps to delete it promptly.
We do offer Children's Savings Account information for parents and guardians. In these cases, account information is collected from the parent or guardian, not the child.
7. California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
- The right to know what personal information we collect, use, disclose, and sell (we do not sell)
- The right to delete your personal information, subject to exceptions
- The right to opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)
- The right to non-discrimination for exercising your CCPA rights
- The right to correct inaccurate personal information
- The right to limit use and disclosure of sensitive personal information
To submit a California rights request, email us at hello@growwithvesta.com with the subject line "California Privacy Request."
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the revised policy on our website with an updated "Last updated" date. For significant changes, we may also notify you by email or through an in-platform notice.
Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.