Privacy policy

What we store. Your email, a password hash (never the password), your questionnaire answers, derived investor profile, generated portfolios and an audit trail of your actions in the app.

What we do not store. Brokerage credentials, account numbers, balances or any means of moving your money. We do not sell personal data.

Why we store it. To keep your session secure, personalize risk limits, show your history, and meet auditability expectations for financial tooling.

Your controls. You can request export or deletion of your account data. Refresh tokens are revocable and expire automatically.

Security. Passwords use Argon2 hashing, transport is HTTPS-only in production, tokens are short-lived, and access is role-restricted and logged.