Privacy Policy

Worthy Financial, Inc. (“Worthy,” “we,” or “us”) owns and operates the website www.worthybonds.com (the “Site”) and mobile application, Worthy Financial (the “App”). Worthy is a financial services company that offers a number of products and services to help people better save and grow their money (the “Services”). In providing our Services, we call information about you. We value the privacy of our Site visitors, App users, investors, registrants, and all others seeking to or using our Services (“you,” “your,” or “user”). Our Privacy Notice discloses the type and nature of information we collect when you visit our Site, App, when you email or otherwise communicate with us and how we use it, as well as the choices you can make about the way your information is collected and used. We also explain how any requests for personal or personally identifiable information will be used. Please note that this Privacy Notice applies to the data collection and practices of us, but also our subsidiary companies, Worthy Property Bonds, Inc. (Worthy Property Bonds and Worthy Property Bonds 2) and affiliated entities. 

Please read this Privacy Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices set forth in this Privacy Notice, you may not use our Site, App or Services. However, by doing so, you agree to the terms set forth in this Privacy Notice, including as to the collection, use, and disclosure of your personal information. 

Information We Collect About You and How We Collect It

The types of personal information we collect and share depends on how you interact with us and the Service you seek to or utilize with us. Depending on how you interact with us and our Services, the information we may collect about you may include information that may personally identify you, such as your contact information including your name, address, email address, and telephone number (collectively, “contact information”). 

There may be instances, however, when we also collect categories of personal information that are more sensitive including you date of birth, bank account information, social security number, transaction history, account transactions, survey responses, and chat submissions (collectively “sensitive information”). 

We also gather automatic information such as your IP address, IMEI/UDID, MAC address, IDFA, AAID, location information, statistics on page views and traffic, and other information collected through cookies and other tracking technologies (collectively “device information”). 

Contact information, sensitive information, and device information are collectively referred to as “personal information”. 

We may also use third party analytics tools to help optimize our service, but no personally identifiable information is collected about you unless you explicitly submit that information via our fill in forms. We may keep records and copies of all correspondence if you contact us. We may keep details of transactions you carry out through the Site and App.

Use of Cookies, Web Beacons and Other Technologies

We use cookies to personalize our Services for you and to collect aggregate information about usage of our Services. A cookie is a text file or other local storage identifier provided by your browser or associated applications. We use cookies for record-keeping purposes and to enhance the quality of your use of our Services. The cookies assign random, unique numbers to your devices to enable our systems to recognize your devices and to allow us to see how you use our Services. Additional general information about cookies and how they work is available at www.allaboutcookies.org.

The cookies we use in connection with our Services include:

• Session cookies: Session cookies are temporary cookies that expire and are automatically erased whenever you close your browser window. We use session cookies to grant users access to content and to enable actions they must be logged into their Harvest account to perform.
• Persistent cookies: Persistent cookies usually have an expiration date in the distant future and remain in your browser until they expire or you manually delete them. We use persistent cookies to better understand usage patterns so we can improve our Services. For example, we may use a persistent cookie to associate you with your Harvest account or to remember your choices for our Services.
• Third-party cookies: We permit certain third parties to place cookies through our Services to provide us with better insights into the use of our Services and user demographics and to advertise our Services to you. These third parties may collect information about your online activities over time and across different websites when you access or use our Services. For example, we utilize Google Analytics to analyze usage patterns for our Services. Google Analytics generates a cookie to capture information about your use of our Services, which Google uses to compile reports on website activity for us and to provide other related services. Google may use a portion of your IP address to identify its cookie, but this will not be associated with any other data held by Google. We may also permit third-party service providers to place cookies for our Services, as indicated above, to perform analytic or marketing functions where you are notified of them and you have consented to the usage. We do not control the use of such third-party cookies or the resulting information, and we are not responsible for any actions or policies of such third parties.

Web beacons may be used to improve your experience on our Site, including helping provide you with content customized to your interests on both our Site or in emails we send you. They also help us to understand whether users read email messages and click on the links contained within those messages so that we can deliver relevant content and offers. Our web beacons may collect some contact information (e.g., the email address associated with an email message that contains a web beacon). Worthy and our partners use cookies, pixels, tags, or similar technologies on our digital properties. We may permit third-party service providers to collect and process some information from our digital properties through these or other automated means. We may also share personal information with those providers and may have similar arrangements with interest-based advertisers.

By accessing or using our Services, you consent to the placement of cookies on your devices as described in this Privacy Notice. If you prefer not to receive cookies through our Services, you may control how your browser responds to cookies by adjusting the privacy and security settings of your web browser. Unless you set your browser settings to refuse all cookies, our system may issue cookies when you access or use our Services. If you set your browser settings to refuse all cookies, the performance of certain features of our Services may be limited or not work at all.

Uses of Information We Collect from You

We use the personal information that we collect about you for the following purposes:

• Verify your identity
• Complete transactions and transaction documents
• Enable automatic payments and fund transfers
• For research and commercials purposes, such as to improve our Services and our product offerings
• Contact you regarding a transaction you requested or to discuss a problem with your account
• Maintain regular communications with you as may be necessary to fulfill our obligations to you or to execute requested transactions
• To provide you with information about products or services you request from us or that may be of interest to you
• To better understand the behavior of our users and improve the Site, App, Services, and our product offerings
• In any other way we may describe when you provide the information; and for any other purpose with your express consent
• To comply with regulators’ requests for information and meet other legal requirements
• To provide the functionality of the Site and App
• To comply with applicable laws and regulations related to the Site’s product offerings

How We Share Your Personal Information

Like all companies similar to ours, we share customer personal information to run our business, including with our many trusted partners that perform vital functions as part of our operations. Below sets forth the reasons we may share your personal information and to whom.

We work with (among others) providers of hosting services for the Site and App, electronic signature providers, and electronic payment service providers. We may engage third parties to help us carry out certain other internal functions such as account processing, funds transfer, client services, or other data collection relevant to our business. Examples of third parties might include those that perform data processing, reporting, tax documentation, custody or escrow services. Information is shared with these third parties only to the extent necessary for us to process the transactions you initiate or perform other specific services, which may include your personal information. Our partners are legally required to keep your information confidential and secure.

We may share your personal information with unaffiliated third parties: (1) if you request or authorize it; (2) if the information is provided to help complete a transaction for you; (3) if the information is provided to: (a) comply with applicable laws, rules, regulations, governmental and quasi-governmental requests, court orders, or subpoenas; (b) enforce our Terms of Use or other agreements; or (c) protect our rights, property, or safety or the rights, property, or safety of our users or others (e.g., to a consumer reporting agency for fraud protection, etc.); (4) if the disclosure is done as part of a purchase, transfer, or sale of services or assets (e.g., in the event that substantially all of our assets are acquired by another party, your personal information may be one of the transferred assets); (5) if the information is provided to our third-party service providers to perform functions on our behalf (e.g., analyzing data, providing marketing assistance, providing customer service, processing orders, etc.); (6) for our everyday business purposes; or (7) as permitted by applicable law or otherwise described in this Privacy Notice. When you are no longer our customer or investor, we continue to share your information as described in this Privacy Notice.

We may share your information with third parties to perform services on our behalf such as:

• Providing customer care and technical support
• Sending marketing communications and providing advertising services
• Measurement and reporting of advertising frequency, attribution, and performance
• Personalizing customer experience on our digital properties
• Conducting research and analysis
• Linking your bank account for purchases
• Processing ACH payments
• Detecting fraud and other illegal activity

We may combine or share information among current or future Worthy Financial companies, including affiliates and subsidiaries. We may also sell or share your identifiers to third parties for the purpose of sending you marketing communications regarding their products and services in which you might be interested.

Sometimes we may be required to share personal information for legal reasons, for example, if we are required to do so by a regulation, court order, subpoena or other legal process. We may also share information when we believe it is necessary to comply with the law or to respond to a government request, or when we believe disclosure is necessary or appropriate to protect Worthy, our customers, or others.

We also may share personal information in connection with product or service offerings (including sharing with business partners or interest-based advertising). As a general rule, when we share personal information the contract between us and the receiving party places specific limits on how they use the information, including that they must keep your information confidential and secure.

Additionally, we may share personal information in the event of a corporate sale, merger, acquisition, joint venture, reorganization, divestiture, dissolution, liquidation, or similar event.

We may share your personal information with law enforcement or other government agencies as required by law or for the purposes of limiting fraud. We reserve the right to disclose your personally identifiable information when we believe that disclosure is necessary to protect our rights or to comply with a judicial proceeding, court order or legal process. We further reserve the right to disclose any of your personal information that we believe, in good faith, appropriate or necessary to take precautions against liability, to investigate and defend against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of the Site or our services, or to protect the rights, property or personal safety of Worthy, its users, issuers, or others.

We may also share your information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Site users is among the assets transferred.

We may disclose analytics information, which is information that does not identify you personally, with third parties as described in this Privacy Notice and for our commercial purposes. 

We will share with our Service Providers only that information necessary for them to perform their functions according to their respective privacy policies, and we require them to commit to use your personal information in accordance with their respective privacy policies. Specifically, we partner with Plaid Technologies, Inc. (“Plaid”) to gather user’s data from financial institutions. By using our service, you grant Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid in accordance with Plaid’s End User Privacy Policy.

Additionally, we will share your personal information, including contact information and sensitive information regarding your bank account information with our payments provider, Dwolla, for the purpose of allowing you to fund your Worthy account and in accordance with Dwolla’s Privacy Notice. By registering and funding a user account on the Site, you agree to be bound by Dwolla’s Privacy Policy.

Our digital properties link to other companies’ websites, many of which have their own privacy policies. Be sure to review the privacy policy on the website you are visiting to understand their privacy practices—this Privacy Notice will not apply to others’ digital properties.

Do Not Track Signals

Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties. We do not use technology that recognizes DNT signals from your web browser.

Accessing Your Information

You must notify us of any change in your personal information by updating your Worthy account profile through our Services. Any changes will affect only future uses of your personal information.


Subject to applicable law, which might, from time to time, oblige us to store your personal information for a certain period of time, we will respect your wishes to correct inaccurate information. Otherwise, we will hold your personal information for as long as we believe it will help us achieve our objectives as detailed in this Privacy Notice.


You can ask us whether we are storing your personal information, and you can ask to receive a copy of that personal information. Before sending you any personal information, we will ask you to provide proof of your identity. If you are not able to provide proof of your identity, we reserve the right to refuse to send you any personal information. We will respond as quickly as we can to your requests for details of personal information we hold about you.

Information You Share Socially

Our Site, App and Services may allow you to connect and share your actions, comments, content, and information publicly or with designated individuals, friends, followers, etc. We are not responsible for maintaining the confidentiality of any information you share publicly or through social media.

Our digital properties may include ways to interact and share using social media, through features such as a “thumbs up” button, “share this” button, or interactive mini-programs that run on our Site (“widgets”). These features may collect information such as your IP address or the page you are visiting on our Site and may set cookies to enable the feature to function properly. Social media features can be hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the Privacy Notice of the social media company providing the feature. Please be mindful of your personal privacy needs and the privacy needs of others, as you choose whom to connect with and what to share and make public. We cannot control the privacy or security of information you choose to make public or share with others. We also do not control the privacy practices of third parties. Please contact those sites and services directly if you want to learn about their privacy practices.

Account Security

In consideration of your use of the Site, you agree to (a) provide accurate, current, and complete information as may be prompted by any registration forms on the Site (“Registration Data”); (b) maintain the security of your password and identification; (c) maintain and promptly update the Registration Data, and any other information you provide to Worthy, to keep it accurate, current, and complete; and (d) be fully responsible for all use of your account and for any actions that take place using your account.

How We Safeguard Your Personal Information

We have put in place security systems designed to prevent unauthorized access to or disclosure of Personally Identifiable Information, and we take all reasonable steps to secure and safeguard this Information, including:

• Our Site’s password-protected section requires users to give us unique identifiers such as their email address;
• We employ a secure channel, using Secure Sockets Layer (SSL) encryption, the standard for secure Internet network connections, to protect information exchanged over the Internet between your web browser and our servers;
• We encrypt your Social Security Number at-rest, so it will be inaccessible in the event of a data breach;
• We provide access to our databases containing Personal Information on a need-to-know basis only; and

We use automated tools to monitor network traffic to identify unauthorized attempts to upload information, change information, or otherwise seek to gain unauthorized access to our systems.

Unfortunately, the transmission of information via the internet is not completely secure. Although we employ commercially reasonable, industry-standard methods to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

Choices About How We Use and Disclose Your Information

We aim to provide you with choices regarding the personal information you provide to us. Users of our Site, App, and Service may therefore opt out of some communications from our Site or our partners. 

We have created mechanisms to provide you with the following control over your information: 

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Site may then be inaccessible or not function properly.
• Emails from the Company. If we have sent you a promotional or marketing e-mail, you may send us a return e-mail asking to be omitted from future e-mail distributions or click the “unsubscribe” link at the bottom of each non-transactional email. Please note that you are not able to opt out of receiving communications about your account or related transactions with us.
• From time to time, we may send surveys, requests for feedback regarding user experience, and Site operations or additional services from us or from our marketing partners, including by telephone to cellular phone numbers or text messages, if you have provided us with these numbers. The completion of surveys or requests for feedback or acceptance of any offer is voluntary. If you do not wish to receive these offers, surveys, or user feedback emails, please opt out in any offer email received from us. Worthy honors your privacy preferences, and you may opt out of all data sharing with third party advertisers by emailing us at support@worthybonds.com. 

California Privacy Rights

If you are a California resident, California law grants you the ability to receive additional information regarding how we collect, use and share your “personal information” (as defined in the California Consumer Privacy Act (“CCPA”)), other than the personal information we collect in connection with providing our services.


Depending on how you use our Site and services, we may collect the following categories of personal information about you, in addition to the information we collect in connection with providing our services:

• Identifiers, such as name, contact information, and Internet Protocol (IP) address
• Internet or other network information, such as use and interaction with our Site, and browsing history

Your California Privacy Rights – “CCPA Notice”

California law grants additional privacy rights to California residents. In particular, the California Consumer Privacy Act of 2018, as amended by the California Privacy rights Act of 2020  (CCPA) requires businesses to disclose, for the past 12 months, (i) the categories of personal information collected, (ii) the sources of the collected personal information, (iii) the purposes for which the collected personal information is used, (iv) the categories of personal information disclosed for a business purpose, and (v) the categories of any personal information sold or shared. We provide these disclosures in the following table. 

When we use the term “personal information” in this CCPA Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. 

This information is used and disclosed for the purposes and to the categories of third parties described in the rest of this page’s Privacy Notice. 

We may sell or share information you provide to us to third parties.  However, Residents of the State of California may ask us to provide them with a list of the types of personal information that we have disclosed during the preceding year to third parties for their direct marketing purposes, and the identity of those third parties.

Your Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware (beginning January 1, 2025), Indiana (beginning January 1, 2026), Iowa (beginning January 1, 2025), Kentucky (beginning January 1, 2026), Maryland (beginning October 1, 2025), Montana (beginning October 1, 2024), Oregon, New Hampshire (beginning January 1, 2025), Nebraska, New Jersey (beginning January 15, 2025), Tennessee (beginning July 1, 2025), Texas (beginning July 1, 2025), Utah, Virginia, you may have certain data subject rights subject to eligibility thresholds as may be applicable. Depending on the circumstances, these state laws may permit you to request that we:

• Right to Know what personal information we have collected about you in the last 12 months, the purposes for which we collected your personal information and the categories of third parties with whom we shared your personal information. 
• Right to Limit the use and disclosure of sensitive personal information we collect about you.
• Right to Opt Out of the sale of your personal information, and the right to opt-out of the sharing of your personal information for cross-context behavioral advertising.
• Right to Correct/Rectify inaccurate personal information that we have about you.
• Right to Equal Treatment. We will not discriminate against you for exercising your data subject rights.
• Right to Delete personal information we have collected from you, and require that our service providers do the same (subject to some exceptions).

The Right to Limit Use of Your Sensitive Personal Information

You can direct us to only use your sensitive personal information (for example, your financial account information, or your precise geolocation data) for limited purposes, such as providing you with the services you requested.

The Right to Know

You have the right to request any or all of the following information relating to the personal information we have collected about you or disclosed in the last 12 months, upon verification of your identity:

• The specific pieces of personal information we have collected about you;
• The categories of personal information we have collected about you;
• The categories of sources of the personal information we have collected about you;
• The categories of personal information that we have disclosed about you to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
• The categories of personal information we have sold about you, and the categories of third parties to whom this information was sold; and
• The business or commercial purposes for collecting or selling personal information about you.

You can make a request to know up to twice a year, free of charge. 

The Right to Request Deletion

You have the right to request the deletion of personal information that we have collected from you, and to require that the third parties we have shared it with also delete it, subject to certain exceptions in which we are required to retain such information, including compliance with other laws and court orders. We may maintain a confidential record of deletion requests solely for the purpose of preventing the personal information of a consumer who has submitted a deletion request from being sold, for compliance with laws or for other lawful purposes.

The Right to Correct Inaccurate Personal Information

You have the right to request that we correct inaccurate personal information we maintain about you.  Once we receive a verified request to correct your inaccurate personal information, we will use commercially reasonable efforts to correct it.

Do Not Sale or Share My Personal Information

You have the right to direct us not to sell or share personal information we have collected about you to third parties now or in the future.

For purposes of this Privacy Notice “sell” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or buy electronic or other means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.

“Share” means sharing “communicating orally, in writing, or by electronic or other means, a consumer’s personal information . . . to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration”

To opt-out of the sale or sharing of your contact information click here or email us at support@worthybonds.com.

Please note that we do not sell or share and have not sold or shared (as the terms “sell”, “sold”, “share”, or “shared” are defined by U.S. consumer privacy laws, your device information or sensitive information and have not sold or shared your personal information in the immediate 12 months.

The Right to Non- Discrimination

You have the right not to receive discriminatory treatment for exercising any of the rights described above. However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.

How to Exercise Your California Privacy Rights

You may contact us to exercise these rights at support@worthybonds.com.

We will need to verify your identity before processing your request. In order to verify your identity, we may require matching identifying information you provide us to the information we maintain about you in our systems or a successful login to your account (as applicable). 

We use good faith efforts to respond to a verified consumer request to know or to delete within forty-five (45) days after its receipt. If we need more time (up to 90 days), we will inform you of the reason and the needed extension period in writing.

You do not need to create an account with us to exercise your privacy rights. However, we may ask you to provide additional personal information so that we can properly identify you in our dataset and to track compliance with your opt-out request. We will only use personal information provided in an opt-out request to review and comply with the request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems and authenticate you as authorized to receive the information.

Once you make an opt-out request, you may change your mind and opt back in to personal information sales at any time by contacting us at support@worthybonds.com.

Authorized Agent

You may use an authorized agent to make a data subject privacy request on the resident’s behalf. To make a request on behalf of a consumer, the authorized agent must provide a copy of either (a) a letter signed by the consumer authorizing the agent to submit a request on the consumer's behalf, or (b) a power of attorney, duly authorized and issued pursuant to applicable probate law. The authorized agent must email one or both documents to support@worthybonds.com and include a phone number where the agent may be reached during regular business hours.

Verification Process and Right to Appeal

Within 45 days of a valid and verifiable data subject request, if we do not take any action on the request, we will let you know why, which is usually because we cannot verify your identity or we have verified your identity but identified that you are not and have not been an eligible consumer in the relevant time period and not able to exercise data subject rights. 

If you live in Colorado, Connecticut, or Virginia and are unsatisfied with our decision not to take action on your request to exercise one of your privacy rights, you may appeal our decision. Although other state laws do not grant its residents this right, we accept appeals from other state residents using the same process.

If you are a Colorado resident you may contact the Colorado Attorney General if you have concerns about the result of your appeal, which you can do by clicking here.

Financial Incentives

We do not currently offer incentives in exchange for the retention, sale, or sharing of personal information.

Compliance Information

The number of requests to know we have received, complied with in whole or in part, or denied; 0

The number of requests to delete we have received, complied with in whole or in part, or denied; 0

The number of requests to opt-out we have received, complied with in whole or in part, or denied; 0

The median or mean number of days within which the business substantively responded to requests to know, requests to delete, and requests to opt-out; 0

Participation by Children and Teens

Due to federal law (as reflected in the Children’s Online Privacy Protection Act), WE DO NOT ALLOW INDIVIDUALS WHO WE KNOW ARE UNDER 18 TO PARTICIPATE IN OUR SITE OR SERVICES. YOU MUST BE AT LEAST 18 YEARS OLD TO USE OUR SITE AND SERVICES. Please understand that we cannot necessarily tell if a user is providing us with his or her true age.

Where You Can View and Correct Your Information

We urge you to review your information regularly to ensure that it is correct and complete. If you believe that any of your information is incorrect, or if you have any questions regarding this Privacy Notice, please contact us at Support@worthybonds.com

How Long We Retain Your Personal Information

We will keep your personal information while you have an account with us or while we are providing Services to you. Thereafter, we will keep your personal information for as long as is necessary:

• To respond to any questions, complaints or claims made by you or on your behalf;
• To show that we treated you fairly; or
• To keep records required by law.

Links to Other Sites

If you follow any links that direct you away from the Site or App, this Privacy Notice will not apply to your activity on the other websites you visit. We do not control the privacy policies or the privacy practices of any third parties.

Notification of Changes

From time to time, Worthy may change this Privacy Notice. This Privacy Notice may be updated as such needs dictate, and we will always communicate these changes to you by posting the updated Privacy Notice on the Site and/or notifying you via email in the event of any substantive or material changes. You are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically visiting our Site and this Privacy Notice to check for any changes. Your continued use of the Site following any such change constitutes your agreement to follow and be bound by the Privacy Notice, as changed.

Contact Us

If you have questions or concerns, you can contact us at support@worthybonds.com.