Pre-launch policy draft, effective 13 July 2026. The operator identity, contact details, launch jurisdictions, processor list, and governing privacy terms require legal approval before public production.
Data we process
- Account identity and preferences, including email address, display name, and timezone.
- Trading statements, parsed trades, balances, analytics, and any public profile information you choose to publish.
- Broker connection metadata and encrypted broker credentials when you connect a supported service.
- Security and audit events needed to protect accounts and diagnose failures.
How data is used
Data is used to authenticate users, import and analyze statements, generate dashboards, operate optional public profiles, secure the service, and provide support. The application does not execute trades or provide brokerage services.
Storage and security
Refresh sessions are stored as hashes and transported in HttpOnly cookies. Broker credentials use authenticated AES-256-GCM encryption. Statement objects are private and use the configured storage encryption. These controls reduce risk but no online service can promise absolute security.
Retention and deletion
Raw statement uploads are retained for the configured period, 30 days by default, after processing reaches a terminal state. Parsed analytics remain until the account is deleted. Account deletion removes primary database records and queues private statement objects for durable deletion retries. Backup copies and provider object versions expire under the operator's approved retention schedule, which must be finalized before public launch.
Your controls
Authenticated users can download a JSON export and permanently delete their account from Settings. Public profiles remain private unless the user explicitly publishes them and can be unpublished.
Processors and international transfers
Hosting, database, and object-storage providers may process data only to operate the service. The final provider list, data locations, transfer mechanism, and request contact must be published after the staging/production providers and legal entity are selected.