Your numbers stay yours

We don’t need your account information.

Rough numbers are enough for a good plan. Tell MyCIO about your money the way you’d tell a friend — it computes the full plan from what you said, labels every assumption it made, and shows you exactly what each real figure would sharpen. You type only what you choose to share: MyCIO holds no money, places no trades, and needs no brokerage.

Nothing to connect

MyCIO doesn’t need a link to your bank or brokerage. No credentials, no Plaid, no token inputs — the numbers you type are enough, and linking your accounts is something you’d only ever do because you chose to. Today, the way a number gets into your plan is that you put it there: you type it, say it in conversation, or confirm it from a statement you chose to read from.

That is a design decision, not a limitation. Because MyCIO computes and plans — it holds no money and places no trades — it never needs the keys to your accounts. It only ever needs the shape of your situation, at whatever precision you choose to give it.

What is stored

Only the facts you typed or confirmed, plus what the engine computed from them:

• Your account basics — name, email, and password hash.
• The planning facts you gave — goals, ages, amounts, jurisdiction, the tax details you provided.
• Your scenarios and decisions — so the plan stays a living document instead of starting over.
• Conversation context you chose to plan with, so you never re-explain your mortgage.

Every one of these facts is visible inside your plan, in its “Your information & sources” section — each with its provenance: confirmed from a statement, entered by you, or approximated as a disclosed assumption. Nothing feeds the math without appearing there. The formal data-protection detail lives in the Privacy Policy.

What is never stored

• Bank logins and brokerage credentials. Your plan runs on the numbers you type — no account credentials are held. If account linking is ever offered, it will be strictly optional and yours to grant.
• Aggregator tokens. No Plaid or similar account-linking service is required — your plan never depends on one.
• Card numbers. If you buy a plan, payment happens on Stripe’s checkout page — your card details are entered there, not on MyCIO.

And your data is never sold, and never used to train AI — the models learn from engine-generated synthetic data, not from you.

Rough numbers are first-class

You don’t need to gather statements to start. Say it the way you’d tell a friend — “about $300k saved, maybe $2,000 a month” — and the plan works. Anything you didn’t say becomes a visible, editable assumption, labeled as such next to the numbers you actually gave.

Then the plan shows you what precision buys: which real figure would sharpen the answer, and by how much. MyCIO asks for a document or an exact number only when the answer would actually move your result — not as an intake form, and never as a condition of getting started.

See everything, delete everything

Every fact you’ve given is listed with where it came from, and each one is yours to edit or remove at any time — from the plan’s “Your information & sources” section or simply by telling MyCIO to forget it.

If you want it all gone, account deletion in Settings permanently deletes your account and all MyCIO data — your right under GDPR Article 17. It cannot be undone.

Share your plan with your tax advisor — when you’re ready

Sharing is something you initiate, when it’s useful — walking a tax advisor through the plan, giving an accountant the year-by-year picture, keeping a partner on the same page. A share link renders a read-only plan summary: the verdict, the projection, the trade-offs — what they need to weigh in.

What it never carries: the “Your information & sources” section — the raw inputs and account details you typed stay off the shared page — and none of the edit controls. And you can revoke a share whenever you like. Quick shares of your free check are narrower still: your confidence band only, never your amounts.

How your data is protected

• Encrypted in transit. Everything between your browser and MyCIO travels over TLS (HTTPS) — the same encryption your bank uses for its own site.
• Stored on our own servers. Your plan data lives in our own database, on infrastructure we run — not in third-party data warehouses or analytics platforms, and it is never sold.
• Isolated to your account. Access is enforced row by row at the database level: your data is readable by your login and no one else’s. Another person sees your plan only when you explicitly share it — and you can revoke that share at any time.

Computed, not advice

MyCIO provides computed model outputs from your own inputs and published assumptions. It is informational — not personalized investment, tax, or legal advice — and creates no advisory relationship. It holds no money, manages no portfolio, and places no trades. You choose from the options it computes; every choice is recorded with a timestamp.