Privacy Notice

1. Portfolio data stays in your browser

Trade files, holdings snapshots, lots, corporate actions and the calculations derived from them are stored locally in your browser's IndexedDB storage. We do not upload or store your portfolio holdings on our servers. You can export or erase this data at any time from the Data Management screen.

2. Personal data we collect

• Account data — email address, hashed login credentials or your Google account identifier. Purpose: creating and securing your account. Legal basis: performance of our contract with you.
• Subscription data — plan, price, status, billing period and the payment provider's customer and subscription identifiers. Purpose: giving you access to paid features. Legal basis: performance of our contract.
• Support messages — anything you send us. Purpose: answering you. Legal basis: legitimate interests.
• Technical data — IP address, device and browser information and error logs generated when you use the Service. Purpose: security, fraud prevention, diagnosing faults and improving the product. Legal basis: legitimate interests.

Payment card details are collected and processed by our Merchant of Record; we never see or store them.

3. Who we share data with

• Service providers / subprocessors — hosting, database, and authentication providers that run the Service on our behalf.
• Merchant of Record (Paddle) — for the sale of Pro passes, payments, tax compliance, invoicing and fraud prevention. Card and bank details are entered directly with Paddle and are never stored by us.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

4. International transfers

Our providers may process data outside your country. Where that happens we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. Retention

We keep account and subscription records for as long as your account is active and for as long afterwards as we need them for legal, tax and accounting obligations. After that they are deleted or anonymised. Deleting your account removes your account and subscription records; browser-stored portfolio data is removed when you clear it from the Data Management screen or clear your browser storage.

6. Your rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests or withdraw consent. If you are in the UK or EEA you also have the right to complain to your supervisory authority, and we aim to respond to requests within one month. Contact support@finance.swapnilpopat.in to exercise any of these rights.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database security so that account holders can only read their own records.

8. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and to store your portfolio data locally. We do not use advertising cookies. You can clear this storage in your browser settings, which will sign you out and remove locally stored portfolio data.

9. Contact

Privacy questions: support@finance.swapnilpopat.in