What we hold, who can see it, and how to remove it.
This page describes what the product does today. The privacy notice is the binding text, and it lists every service that handles your data. Where the two differ, the notice applies.
What we never ask for
- Your brokerage or bank loginNothing is linked to your accounts, so there is no login to hand over. The product cannot place trades, and it cannot move or withdraw money.
- A passwordYou sign in with Google and nothing else, so there is no password of ours to leak. Your Google account’s own protection, including two-step verification if you have turned it on, guards the way in. Settings can sign you out on every device at once.
Who can see what
- Only youYour holdings, trades, cash and email inbox. Row-level security in the database ties each of those rows to your account, so one account cannot read another’s.
- Other membersYour community profile: your name, handle, photo and bio, the investing preferences you chose (experience, risk, goals and sectors) and which plan you are on. Also anything you post.
- AnyoneYour name, handle, photo and bio, your investment philosophy if you wrote one, and how many people you follow and are followed by.
- A fund you publishIf you publish a fund in Community, other members see what it holds and how it has performed in percentages. They never see how much money is in it. A fund is private until you publish it.
Your private import address
- It is hard to guess, and easy to replaceYour address carries 26 random letters and digits. Make a new one at any time from Email Import, and the old one stops working at once.
- Anyone who has it can write to itThat is why nothing sent to it reaches your holdings until you check it in. Mail must pass the sender’s DKIM or SPF check and come from your own address, your Gmail forwarding or a broker on the coverage list. Anything else is held for you to see, and nothing in it is read.
- What is keptThe whole email is stored encrypted only while it waits to be read, and is cleared once it has been read, or after seven days if it cannot be. A short excerpt of about 2 KB, and what was read from it, stay with the item in your inbox until you delete your account. That includes items you discard.
The brokers whose own mail is accepted are listed on the coverage page.
Services that handle your data
They include Supabase, which holds the database and sign-in; Vercel, which hosts the site; Google, which runs sign-in, and whose Analytics loads only if you accept analytics cookies; Anthropic, whose AI reads the statements, exports and emails you import and answers Oli; Stripe, which takes payments; and Cloudflare, which receives the email you forward.
The privacy notice is the full list, and says what each one sees.
Deleting your data
In Settings, under Account, press Delete my account and confirm. It takes effect at once. Any subscription is cancelled first, and then your profile, portfolio, trades, cash, email inbox, posts, messages and AI conversations are deleted.
Some things stay. Stripe keeps the payment records the law requires. A room you created stays for its members, no longer linked to you. Messages you sent us through a form are kept until you ask us to delete them.
You can also remove a single holding or cash account yourself at any time. For a copy of your data first, write to finvestoros@gmail.com.
Reporting a security problem
Write to finvestoros@gmail.com with “Security” in the subject. Tell us what you found and how to reproduce it, and please test only against your own account.