Privacy Policy

Last Updated: December 18, 2025

Privacy at a Glance

✅ Your portfolio data is private and encrypted

✅ We never sell your personal information

✅ Payment details are handled securely by Stripe

✅ You can request data deletion at any time

✅ We only collect what's necessary for the service

1. Information We Collect

Account Information: When you sign up, we collect your email address and encrypted password. If you use Google SSO, we receive your email and profile information from Google.

Portfolio Data: The investment information you upload (securities, positions, values) is stored securely to provide analysis and maintain your session history.

Usage Information: We collect information about how you interact with our service, including pages visited, features used, and analysis sessions created.

2. How We Use Your Information

We use your information to:

  • Provide portfolio analysis and AI-powered insights
  • Maintain your account and session history
  • Process subscription payments (via Stripe)
  • Send service-related notifications (trial ending, subscription status)
  • Improve our service and develop new features
  • Comply with legal obligations

We do NOT use your information to:

  • Sell or rent your personal data to third parties
  • Share your portfolio positions with anyone
  • Send marketing emails (unless you opt-in)
  • Make investment decisions on your behalf

3. Data Security

Encryption: All data is encrypted in transit using HTTPS/SSL and at rest in our secure PostgreSQL database.

Payment Security: We use Stripe for payment processing. Your credit card information never touches our servers and is handled by Stripe's PCI DSS Level 1 certified infrastructure.

Authentication: Passwords are hashed using industry-standard bcrypt algorithm. We support secure Google SSO authentication.

File Storage: Portfolio files are stored securely in AWS S3 with access controls and encryption.

4. Information Sharing

We only share your information in the following limited circumstances:

Service Providers: We use trusted third-party services:

  • Stripe: For payment processing (they see billing information only)
  • AWS: For secure file storage
  • Abacus AI: For AI-powered portfolio analysis (LLM processing)

Legal Requirements: We may disclose information if required by law, court order, or government request.

We never sell your data to advertisers or third-party marketers.

5. Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Correction: Update incorrect information
  • Deletion: Request permanent deletion of your account and data
  • Export: Download your portfolio analysis history
  • Opt-out: Unsubscribe from marketing emails (if any)

To exercise these rights, contact us at [email protected] or use the account settings in your dashboard.

6. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels.

7. Data Retention

We retain your account and portfolio data as long as your account is active. If you cancel your subscription, your data remains accessible for 90 days, after which it may be deleted unless you resubscribe.

You can request immediate deletion of your data at any time by contacting support.

8. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out:

Email: [email protected]

Website: https://myportfolioanalyst.abacusai.app