Privacy Policy

1. Information we collect

We collect three broad categories of information:

• Account information — your name, email address, password (stored as a salted hash, never in plain text), and tenant/organization details you provide when you register.
• Portfolio data you enter — the transactions, holdings, currencies, and notes you add to track your portfolios. We do not require or collect brokerage account credentials; you enter this data yourself or import it from a file you upload.
• Usage and device information — log data such as IP address, browser type, pages visited, and timestamps, collected automatically to keep the Service secure and reliable.

2. How we use your information

• To provide, operate, and maintain the Service, including calculating valuations, cost basis, and performance from the data you enter.
• To authenticate you and keep your account and portfolio data secure.
• To communicate with you about your account, security notices, and — only if you opt in — product updates.
• To diagnose technical issues and improve the reliability and performance of the Service.
• To comply with legal obligations.

3. How we store and protect your data

Portfolio data is scoped and isolated per tenant at the database level, so one organization's data is never mixed with another's. Access to the Service is protected by token-based authentication with short-lived sessions, and access within an organization is controlled by role (root, admin, editor, or view-only). Data is transmitted over encrypted (HTTPS) connections.

4. Third-party services

We use third-party providers to supply market prices, foreign-exchange rates, and similar reference data needed to value your portfolios, and infrastructure providers to host the Service. These providers process data on our behalf under contractual confidentiality and security obligations. This includes our cloud host (Microsoft Azure), which also provides error and performance monitoring (Application Insights) for the server, and image hosts from which the app loads asset logos and profile pictures (your browser contacts them directly). We do not sell your personal information or portfolio data to third parties, and we do not share it with third parties for their own marketing purposes.

5. Cookies

We use a minimal set of cookies and browser storage to keep you signed in and remember your preferences (such as your selected tenant and display settings). We do not use analytics, advertising, heatmap, session-recording or cross-site tracking tools. See our Cookie Policy for details.

6. Data retention

We retain account and portfolio data for as long as your account is active. If you delete your account, we delete or anonymize your personal information and portfolio data within a reasonable period, except where we are required to retain it for legal, tax, or security purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage most of this yourself from your account settings, or contact us using the details below and we'll assist you.

8. Children's privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service before the change takes effect. The "Last updated" date above reflects the most recent revision.

10. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@fundguards.com.