Last updated: August 5, 2026
Nuvor, Inc. (“Company,” “Nuvor,” “we,” “our,” or “us”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when providing services to you through our websites, applications, and services that link to this policy (our “Services”), including the Nuvor platform and the Nuvor Cortex (NCX) features, and our practices for using, maintaining, protecting, and disclosing that information. Our approach is simple: we collect only what we need to run the Services well, we never sell your personal data, and we do not run ads. You are the customer, not the product.
This policy applies only to information we collect:
Through the Services, including when you join our waitlist or create an account.
In communications, including email, chat, and other electronic messages, between you and the Services.
It does not apply to information collected by any third party, including your brokerage (such as Alpaca Securities LLC), our payment processor (Stripe), or any other application, website, or content that may link to or be accessible from the Services. Those third parties’ own privacy policies govern the data they hold about you, and we encourage you to review them.
Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and disclosure of your information as described in this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Services after we make changes as described there is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Children’s and Minors’ Data
Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 18. If we learn we have collected or received personal data from a child under 18 years old, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at privacy@nuvor.io.
The Personal Data That We Collect or Process
“Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, or any other identifier we may use to contact you online or offline.
The types and categories of personal data we collect or process include:
Account and contact information, including your email address, a hashed password (we never store passwords in plaintext), an optional display name, and other contact information you provide us, including when you join our waitlist or contact support.
Portfolio data, including the holdings you add or upload (symbols, share counts, cost basis, buy dates) and the portfolios and watchlists you create, whether entered by hand or imported by CSV.
Values and goals profile information, including the preferences you set about what you will back or avoid (for example, supporting environmental protection, fair labor, domestic manufacturing, innovation, or community, or avoiding gambling or tobacco) and your stated goals and risk preferences. We use this information only to run the values-alignment and portfolio-fit features you request. We recognize these preferences can reflect your personal views, and we apply the same protections to them as to all of your personal data: never sold, never disclosed for anyone else’s marketing, and deletable at any time.
AI chat data, including the questions and prompts you submit to the NCX Analyst, chat, and briefing features, and your conversation history.
Learning and paper-trading activity, including lesson progress, simulated trades, and virtual-cash balances.
Payment information. Billing for paid plans is handled by Stripe. We receive limited billing information, such as your plan, payment status, and the last digits of your payment card; we do not store your full card details.
Preferences, including the notification and email settings you choose.
Device information, including your IP address, operating system and version, browser type and settings, and other device information.
We also collect:
Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature. We will not attempt to re-identify de-identified or aggregated data.
Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as the pages and features you access and use, timestamps, page response times, and download errors, which we need for security, auditing, debugging, and reliability.
If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.
How We Collect Your Personal and Other Data
You Provide Information to Us. We collect information about you when you interact with our Services, such as when you join the waitlist, create or update an account, add or import portfolio data, set your values and goals profile, submit prompts to the AI features, practice with paper trading, subscribe to a paid plan, or communicate with us.
Automatically Through Our Services. As you navigate through and interact with our Services, we use automatic data collection technologies to collect the device and technical information described above. The only such technologies we use are cookies and local browser storage that are necessary to keep you signed in and to remember basic preferences (such as your selected portfolio). We do not use web beacons, third-party advertising cookies, or cross-site tracking technologies, and we do not collect information about your online activities over time and across third-party websites or services (behavioral tracking).
From Service Providers and Your Brokerage. We may receive personal data about you from service providers we engage to perform services on our behalf, such as our payment processor (limited billing status information from Stripe). If you choose to connect a brokerage account, we receive your positions, balances, and order status from that brokerage, together with the API credentials you generate and supply for the connection, which we encrypt at rest. Market and reference data about securities comes from our data vendors and public sources; it is data about the market, not about you.
How We Use Your Information
We use information that we collect about you or that you provide to us, including any personal data, to:
Provide you with the Services and any contents, features, information, products, or services that we make available through the Services, including to authenticate you, store your portfolios, compute analytics and signals, run the values-fit and learning features you use, and generate AI responses to your requests.
Fulfill and manage subscriptions and payments, and provide you with notices about your account or subscription, including expiration and renewal notices.
Improve our Services, including by analyzing your information and creating aggregated data derived from your information to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them. We do not use your personal data to train machine-learning or large language models - Nuvor’s internal models are trained only on market data - and we do not share your information with third parties for their model training. See the AI and Large Language Model Training Disclosure below.
Communicate with you, including service notices and the email alerts and digests you opt into. You can opt out of non-essential emails at any time.
Protect the security of the Services, including to detect and prevent fraud, abuse, and security incidents.
Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including our Terms of Service, and for billing and collection.
Comply with our legal obligations.
Fulfill any other purpose for which you provide the information, in any other way we may describe when you provide the information, or for any other purpose with your consent.
We do not use your personal data for targeted advertising, and we do not make decisions about you that produce legal or similarly significant effects by solely automated means. NCX outputs are informational analytics you request; we do not use them to grant or deny you anything.
AI and Large Language Model Training Disclosure
Nuvor does not use your personal data - including your AI chat data, portfolio holdings, and values profile - to train any machine-learning or large language model, whether Nuvor’s or a third party’s. Nuvor’s internal models are trained only on market data, such as prices, technical indicators, public filings and disclosures (including congressional and insider trading filings), and news sentiment. When you use the AI features, your prompt and the relevant context (which can include your holdings, performance, values profile, and the names you ask about) are transmitted to our AI provider, Anthropic, solely to generate your response. Anthropic does not use your data to train its models, and our Anthropic API data retention is set to 30 days. You can delete your AI conversations at any time - deleting a conversation removes our stored copy, and deleting your account deletes your chat history.
Who We Disclose Your Information To
We do not sell your personal data, we do not share it for cross-context behavioral advertising or targeted advertising, and we do not disclose it to third parties for their own marketing or their own model training.
We may disclose aggregated or de-identified information that does not identify any individual without restriction, provided we will not attempt to re-identify it. We may also disclose personal data that we collect or you provide as described in this privacy policy:
To contractors, service providers, and other third parties we use to support the Services and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them. These are currently: our AI provider (Anthropic), as described in the AI disclosure above; our hosting, email delivery, and market-data vendors, to run the platform, send the notices and digests you opt into, and supply prices and reference data; and our payment processor (Stripe), for paid-plan billing.
To your brokerage, only if you connect one and only at your direction, such as when we transmit an order you have explicitly confirmed.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Nuvor’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Nuvor is among the assets transferred; provided that any successor will be bound by this policy with respect to personal data collected under it, or we will notify you before your personal data becomes subject to a different policy. A business transfer does not change our no-sale commitment as to data collected under this policy.
To comply with any court order, law, or legal process, including to respond to any government or regulatory request. Where lawful and practicable, we will notify you of legal demands for your data.
To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Nuvor, our users, or others.
To fulfill the purpose for which you provide it, for any other purpose disclosed by us when you provide the information, or with your consent.
Your Rights and Choices About Your Information
This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live. Regardless of where you live, you can at any time, using the in-app controls or by contacting us at privacy@nuvor.io:
Access the data associated with your account.
Export your portfolio data in a portable format.
Delete your holdings, portfolios, AI conversations, or your entire account.
Correct inaccurate account information.
Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, some Services features, including staying signed in, may be inaccessible or not function properly. Because we use only strictly necessary cookies and do not engage in behavioral tracking, data sales, or targeted advertising, browser “Do Not Track” (DNT) signals do not change how the Services operate; the practices such signals address do not occur on our Services.
Promotional Emails. If you do not wish us to use your contact information to send you optional alerts, digests, or product emails, you can opt out by adjusting your notification settings in your account or by using the unsubscribe link in any such email. We will still send you service and account notices.
Your State Privacy Rights
Depending on your state of residency, you may have certain rights related to your personal data, including:
Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format.
Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.
Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.
Opt Out of Sales, Targeted Advertising, and Certain Profiling. You may request that we not use your personal data for these purposes. As described above, we do not sell personal data, do not use it for targeted advertising, and do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, so there is no such processing to opt out of.
Important: The exact scope of these rights varies by state, and there are exceptions under which we may not have an obligation to fulfill a request. We will not discriminate against you for exercising any of your rights. To exercise any of these rights, use the in-app controls or contact us at privacy@nuvor.io. We will verify requests (typically by confirming your control of the email address associated with your account) and respond within the time required by applicable law. Where applicable law provides for it, you may use an authorized agent to submit a request on your behalf; we may require proof of the agent’s authorization and verification of your identity. To appeal a decision regarding a consumer rights request, reply to our decision or email privacy@nuvor.io with the subject line “Privacy Appeal”; if your appeal is denied, you may contact your state Attorney General.
Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process a request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law; because we do not sell or share personal data or engage in targeted advertising, such signals do not change how the Services operate.
EU, EEA, and UK Residents
If you are in the EU, EEA, or UK, you have rights under the GDPR and UK GDPR including access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent where processing is based on consent. Our legal bases for processing are the performance of our contract with you (providing the Services), your consent (optional emails and, where required, the values profile), our legitimate interests (operating, securing, and improving the Services), and legal obligation (tax and accounting records). Where we transfer personal data outside the EEA or UK, including to service providers in the United States, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You may lodge a complaint with your local supervisory authority. Nuvor, Inc. is the data controller.
How We Protect Your Personal Data
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure, in accordance with accepted industry standards. Among other measures, passwords are hashed and never stored in plaintext, brokerage API credentials are encrypted at rest (with the encryption key held separately from the database), never returned to your browser, redacted from our logs, and isolated per user, and data in transit is protected by TLS encryption. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. The safety and security of your information also depends on you: you are responsible for keeping your account credentials confidential and for taking steps to protect your personal data against unauthorized use, disclosure, and access. If a breach affecting your personal data occurs, we will notify you and regulators as required by applicable law.
How We Retain Your Personal Data
We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. In particular:
Account, portfolio, values, learning, and AI chat data are retained while your account is active and deleted when you delete them in-app or close your account, except as described below.
Records of confirmed brokerage orders and billing records are retained as required for tax, accounting, and regulatory purposes, including after account closure.
Security and technical logs are retained for a limited period for security and auditing, then deleted or de-identified.
Deleted data may persist in encrypted backups for up to six months before being purged on the normal backup cycle.
When you delete your account, we complete deletion within 30 days, subject to the exceptions above. At the end of the applicable retention period, personal data will be deleted, destroyed, or de-identified.
Changes to Our Privacy Policy
We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of material changes through the Services or by email before they take effect, and we will notify you of other changes by updating the “last updated” date and posting the updated policy on the Services. If a change would materially expand how we use previously collected personal data, we will provide notice and obtain any consent required by applicable law.
Contact Information
To exercise your rights or to ask questions or comment about this privacy policy or our privacy practices, contact us at: privacy@nuvor.io, or by mail to Nuvor, Inc., 1522 Western Ave STE 84575, Seattle, WA 98101. Nuvor, Inc. is the data controller for the Services.