Privacy policy

• Your portfolio. The holdings, transactions and earnings reminders you add, so the terminal can show them. We never ask for broker logins or bank credentials.
• Where your portfolio is kept. With an account, on our database, so it follows you from one device to the next. Without an account, in your browser's storage, and a random guest ID in a cookie lets our server recognize the browser. A guest's portfolio reaches our database only if you create a share link: the positions the link shows are saved under that guest ID.
• An account, if you create one: the email, social login or wallet address you sign in with.
• Your email, if you join the newsletter or the Pro list.
• What you give the import. A screenshot, a PDF statement or pasted text goes through our server to Anthropic's Claude, which reads the positions; broker files the importer recognizes are read on our server without it. Nothing joins your portfolio until you confirm the review. An Interactive Brokers Flex token serves that one request and is never stored.
• How the product is used: the steps of the import (landed, started, imported) and which link brought you, filed under your guest ID or your account, so we can see what helps people get started. If you have an account with an email and an import doesn't go through, we may write to you once, by hand, to help you finish it: nothing to sell in it, and if you answer “stop” we won't write again.
• Visit analytics: pages viewed, referrer, country and device, through Vercel Web Analytics (no cookies) and Google Analytics (cookies, see below).
• Product analytics and session replays: through PostHog (cookies, see below), the pages and clicks of a visit and a replay of the screen in which every digit is drawn as • and form fields are masked. When you are signed in, they are tied to your account ID.
• Error reports: when a page breaks, the error, the page's route, your browser and an approximate location (city) that Sentry derives from the connection. Tickers, amounts and emails are filtered out; no IP address or portfolio data is kept.

Google Analytics runs through Google Tag Manager under Google Consent Mode, and PostHog follows the same answer. If you visit from the EU/EEA, the UK or Switzerland, neither sets an analytics cookie or records anything until you accept, and you can decline. Elsewhere, both are on by default. The first-party cookie that remembers which link brought you follows the same answer. Advertising storage is off for everyone: the site runs no ads and sells no data.

You can change your answer at any time: Cookie settings.

• Vercel: hosting, the server the import and the assistant run on, and cookieless visit analytics.
• Supabase: the database that stores accounts, their portfolios and alerts, share links and the newsletter list.
• Privy: sign-in by email, social account or wallet.
• Anthropic (Claude): reads what you give the import, as described above.
• DeepSeek: answers the questions you type into the assistant and writes the portfolio review, from your holdings.
• Google: Analytics and Tag Manager, as described above.
• PostHog: product analytics and session replays, as described above. It also counts each AI request (model, tokens, time), never what was asked or answered.
• Sentry (EU region): error reports, as described above.
• An email delivery service: the emails an account with an email address receives (a welcome, portfolio summaries and reminders, each with a link to stop them), the alerts the automatic watch sends about your portfolio, and the newsletter if you join it.

Sell your data, show you ads, or share your portfolio with anyone beyond the services above, unless you create a share link yourself.

With an account, you can do it yourself: in the View menu of your portfolio, “Download all my data” saves everything we keep about you as a file, and “Delete my account” erases it, sign-in included. Without an account, “Reset portfolio” in the same menu erases your positions, in this browser and on our database. For anything else, a copy of your data, its correction or its deletion, write to contact@portfolio-terminal.com. If you are in the EU or the UK, you can also complain to your data protection authority (in France, the CNIL).