Privacy Policy
Last updated: 2026-04-30
1. What we collect
When you create an account we collect: your first name, last name, email address, phone number, and country. When you sign in, we record the time and the IP address used.
2. What we don't collect
We do not use third-party analytics, advertising trackers, social-media pixels, or session-replay tools. We do not sell your data. We do not share your data with third parties for their own marketing.
3. How we use it
Personal data is used solely to operate your account: to authenticate you, to display your portfolio and transactions, and to communicate with you about the Service.
4. Storage and security
Data is stored on our own infrastructure. Passwords are hashed using argon2id and never stored in plaintext. Sessions use HTTP-only cookies with strict same-site policy. We log administrative actions for audit purposes.
5. Cookies
We use a single authentication cookie ("token") which is required for the Service to function. We do not set tracking, marketing, or analytics cookies.
6. Your rights
You may request access to, correction of, or deletion of your personal data at any time. To exercise these rights, contact us through the Service.
7. Retention
We retain account data for as long as your account is active. When you delete your account, your personal data is removed within 30 days, except where required for legal or audit purposes.
8. Changes
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change.