Privacy Policy

1. Data We Collect

• Account data: your email address, a hashed password, and an optional display name.
• Portfolio data: the holdings you add or upload (symbols, share counts, cost basis, buy dates) and the portfolios you create.
• Usage data: basic technical and activity logs (e.g., pages used, timestamps, IP address, user agent) needed for security, auditing, and reliability.
• Preferences: notification and email settings you choose.

We do not knowingly collect data from anyone under 18, and we do not request sensitive categories of personal data.

2. How We Use Your Data

• To provide the Service — authenticate you, store your portfolios, compute analytics and signals.
• To improve the platform — diagnose issues, understand which features are useful, and harden security.
• To communicate with you — service notices, and the email alerts/digests you opt into.

3. What We Do NOT Do

• We do not sell your personal data.
• We do not rent or trade your portfolio data.
• We do not share your data with third parties for their own marketing.

We use a limited set of service providers strictly to operate the Service; they may process data only on our instructions. Specifically:

• AI provider (Anthropic). When you use the NCX Analyst, chat, or briefing features, the relevant context — which can include your holdings, performance, and the names you ask about — is sent to Anthropic to generate the response, and nowhere else. It is used to answer your request, not to train models or for any purpose of theirs.
• Hosting, email delivery, and market-data vendors. To run the platform, send the notices and digests you opt into, and supply prices and reference data.
• Brokerage (only if you connect one). If you choose to connect a brokerage, your API keys are encrypted at rest and used only to read your positions and to place orders you explicitly confirm. We can never withdraw or transfer funds, and we never trade on your behalf without your per-order confirmation.
• Payment processor (Stripe). For paid plans, billing is handled by Stripe; we do not store your full card details.

4. Data Storage & Security

Your data is stored in a secured PostgreSQL database. Passwords are hashed (never stored in plaintext), access is authenticated, and the platform runs behind TLS encryption. No system is perfectly secure, but we apply reasonable administrative and technical safeguards and retain data only as long as needed to provide the Service or meet legal obligations.

5. Your Rights

You can, at any time:

• Access the data associated with your account.
• Export your portfolio data.
• Delete your holdings, portfolios, or your entire account.
• Correct inaccurate account information.

To exercise these rights, use the in-app controls or contact us at privacy@nuvor.io.

6. GDPR & CCPA

If you are in the EU/EEA/UK, you have rights under the GDPR including access, rectification, erasure, restriction, portability, and objection; our legal bases for processing are performance of our contract with you, your consent (for optional emails), and our legitimate interests in operating and securing the Service. If you are a California resident, the CCPA gives you the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising your rights — and, as noted above, we do not sell personal information. Requests can be made at the contact address below.

7. Cookies

We use only the cookies and local browser storage necessary to keep you signed in and to remember basic preferences (such as your selected portfolio). We do not use third-party advertising or cross-site tracking cookies.

8. Changes to This Policy

We may update this Policy as the Service evolves. Material changes will be communicated through the Service or by email, and the "Last updated" date above will change.

9. Contact

For privacy questions or requests, contact privacy@nuvor.io. Nuvor, Inc. is the data controller for the Service, at 1522 Western Ave STE 84575, Seattle, WA 98101.