Privacy Policy

Who We Are

PortfolioTrackr ("we", "us", "our") is a personal investment portfolio tracking service available at portfoliotrackr.com. We are committed to protecting your personal data and respecting your privacy.

If you have any questions about this policy, contact us at [email protected].

Data We Collect

We collect only the data necessary to provide the Service:

• Account data — your name and email address when you register
• Portfolio data — investment positions, trade history, price targets, and notes you enter
• Notification preferences — phone numbers, Telegram chat ID, and alert settings you configure
• Payment data — subscription status and billing dates. We do not store card details — payments are handled by Stripe
• Screenshot images — when you use the AI trade import feature, images you upload or paste are sent to our AI parsing service to extract trade data. Images are processed transiently and are not stored after parsing is complete
• Usage data — basic server logs including IP address and browser type for security and debugging purposes

How We Use Your Data

We use your data solely to provide and improve the Service:

• To operate your portfolio tracker and display your positions and performance
• To send price alerts and notifications you have opted into
• To manage your subscription and billing
• To send account-related emails such as verification, password reset, and subscription receipts
• To detect and prevent fraud or abuse

We do not use your data for advertising, profiling, or any purpose unrelated to providing the Service.

Third Parties We Share Data With

We share minimal data with the following third-party services, only as required to operate the Service:

• Stripe — processes payments. Your card details go directly to Stripe and never touch our servers. Stripe Privacy Policy →
• Twilio — sends WhatsApp and SMS alerts to numbers you provide. Twilio Privacy Policy →
• Telegram — delivers alerts to your Telegram account via your chat ID. Telegram Privacy Policy →
• Anthropic (AI trade parsing & fundamental analysis) — when you use the AI trade import feature (text or screenshot), or the AI fundamental analysis feature on a position, the relevant content is sent to Anthropic's Claude API. For trade import, only the text or image you provide is transmitted; no other personal data is included. For fundamental analysis, the ticker, your entry / target / stop-loss values, and publicly-available market data for that ticker are sent. Anthropic does not use API-submitted data to train its models per their commercial terms. Images and inputs are processed transiently and not retained on our servers. Anthropic Privacy Policy →

We do not sell, rent, or share your personal data with any other third parties.

International Data Transfers

Our servers and most of the third-party processors listed in Section 04 are located in the United States. If you are accessing the Service from the European Economic Area (EEA), the United Kingdom, or another jurisdiction outside the United States, your personal data will be transferred to and processed in the United States, which may have data-protection laws different from those in your country.

For transfers of personal data out of the EEA or UK we rely on the following lawful safeguards under Article 46 of the EU GDPR (and the equivalent UK GDPR provisions):

• Standard Contractual Clauses (SCC) — we rely on the European Commission's 2021/914 Standard Contractual Clauses as the legal basis for transferring personal data to processors located in countries without an EU adequacy decision. Each third-party processor we work with (Stripe, Twilio, Anthropic, our hosting provider) maintains SCCs as part of their Data Processing Agreement.
• EU-US Data Privacy Framework — where applicable, our US-based processors are certified under the EU-US Data Privacy Framework, providing an additional layer of safeguard.
• UK International Data Transfer Addendum (IDTA) — for transfers from the United Kingdom, the UK IDTA addendum to the SCCs applies.

To request a copy of the safeguards we have in place for a specific transfer, email [email protected].

Data Retention

We retain your data for as long as your account is active. If you delete your account, all your personal data including portfolio positions, trade history, and notification preferences is permanently deleted from our systems within 24 hours.

Anonymised aggregate data (such as total number of users per plan) may be retained for business analytics.

Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — export your portfolio data via the export feature
• Objection — object to processing of your data

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Cookies

We use only essential cookies required to operate the Service — specifically a session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or analytics cookies. See our Cookie Policy for full details.

Security

We take reasonable technical measures to protect your data including HTTPS encryption, hashed passwords, and restricted database access. However, no system is 100% secure and we cannot guarantee absolute security.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance.

Contact