DRAFT. Have this policy reviewed before relying on it, and replace everything in [square brackets] with your own details.
Privacy Policy
Last updated: [date]
Who is responsible
[Your name or business name] is the data controller. Contact: [contact email].
Your account
When you create an account we keep your email address and your password, stored only as a scrypt hash, never in readable form. We also keep when you signed up, your plan and trial dates, whether you've confirmed your email, which emails you've chosen to receive, and on the Free plan the times you used AI reports (kept for 7 days, to count your weekly allowance). A login cookie keeps you signed in for 30 days or until you log out. It's the only cookie we set, and it's needed for the site to work.
Your saved app data
Your watchlist, alerts, saved decisions, goals, targets, settings and the date you started investing are saved to your account, so they're the same on every device you log in on. If you've connected Trading 212, we also save the list of what you hold (names, symbols and share counts) and a daily figure for your account value and money paid in, for your value chart, dividend reminders and weekly email. Only you can see this data. Logging out removes it from that browser; deleting your account removes it from our server.
Your Trading 212 API key
When you add your Trading 212 API key and secret in Settings, we check them with Trading 212 and save them to your account, encrypted with AES-256-GCM. The encryption key is kept separately from your account data and our backups. Your key is used only by our server to fetch your account data from Trading 212 when you (or a feature you've switched on) need it. It's never shown back to you or anyone else in full, never written to logs, and is deleted when you remove it in Settings, when Trading 212 rejects it, or when you delete your account. You can also cut off access at any time by deleting the key in Trading 212.
Emails
We send account emails (confirming your address, password resets, receipts and changes to your plan). On Pro we can also send watchlist alerts, ex-dividend reminders and a weekly summary; each can be switched off in Settings → Emails. Emails are sent by Resend on our behalf.
Payments
Payments for Pro are handled by Stripe. We never see or store your card details. We keep your Stripe customer and subscription references, your plan, and when your paid period ends. See Stripe's privacy policy at stripe.com/privacy.
AI reports
AI summaries are written by Anthropic's Claude from market data we send it. If you ask a follow-up question, your question is sent too. A portfolio check-up sends your holdings as percentages only, never amounts of money. Anthropic doesn't use this to train its models under its commercial terms.
Usage counts
To see which features are used, we count how often each part of the app is opened each day, and how many different people used it that day. This uses no cookies and no third-party tools, and isn't linked to your account: daily counts use a code that changes every day and is then thrown away.
Technical information
Our server and hosting provider see standard technical information such as your IP address, used for security (for example limiting login attempts) and kept in logs for [retention period]. The stock symbols and search words you look up are used to fetch data and aren't linked to you.
Pro waitlist
If you joined the Pro waitlist, we keep your email address, your preferred billing (monthly or yearly), whether you got a founding-member place, and when you signed up, to email you about Pro and apply your founding price when you subscribe with the same email. To be removed, email [contact email].
Who else processes data
- [Hosting provider] runs our server, in [country].
- Stripe (payments), Resend (email) and Anthropic (AI reports), as described above.
- Market data comes from Yahoo Finance; our server sends it only stock symbols. Your browser loads fonts from Google Fonts.
We don't sell your data or use it for advertising.
How long we keep it
We keep your account and saved data until you delete your account (Settings → Security → Delete account), which removes them from our server straight away. Backups are kept for up to 14 days. Payment records are kept by Stripe as required by law.
Your rights
Under UK GDPR you can ask for a copy of, correction of, or deletion of your personal data, and you can complain to the Information Commissioner's Office (ico.org.uk). You can delete your account yourself at any time, or contact us at [contact email].