1. Introduction
Welcome to Portfolio Rebalancer ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our portfolio management application.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided via OAuth)
- Profile picture (if provided via OAuth)
- Authentication provider information (GitHub or Google)
2.2 Portfolio Data
We store information you provide about your investment portfolios:
- Portfolio names and descriptions
- Asset holdings (ticker symbols, shares, allocations)
- Target allocations and rebalancing preferences
- Portfolio templates you create or use
2.3 Usage Data
We automatically collect:
- Log data (IP address, browser type, pages visited)
- Device information
- Usage patterns and analytics
- Session information
3. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Authenticate your account
- Store and display your portfolio data
- Calculate rebalancing recommendations
- Fetch real-time stock prices and market data
- Improve and optimize our application
- Communicate with you about service updates
- Monitor and analyze usage patterns
- Detect and prevent security issues
4. Data Storage and Security
4.1 Where We Store Data
Your data is stored securely in:
- Neon Database (PostgreSQL) - encrypted at rest and in transit
- Vercel infrastructure for application hosting
4.2 Security Measures
We implement industry-standard security measures:
- HTTPS encryption for all data transmission
- Secure authentication via OAuth 2.0
- Session-based access control
- Regular security updates and monitoring
- Database encryption at rest
5. Third-Party Services
We use the following third-party services:
- GitHub OAuth: For authentication (subject to GitHub's privacy policy)
- Google OAuth: For authentication (subject to Google's privacy policy)
- Yahoo Finance API: For real-time stock price data (no personal data shared)
- Vercel Analytics: For performance monitoring and error tracking
We do not sell your data to third parties.
6. Demo Mode
When using Demo Mode:
- All data is stored locally in your browser
- No personal information is collected
- No account is created
- Demo data is cleared when you close your browser or clear cookies
- We only collect anonymous analytics about demo usage
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correct: Update or correct your information
- Delete: Request deletion of your account and data
- Export: Download your portfolio data in JSON format
- Object: Opt out of analytics tracking
You can exercise these rights through your account settings or by contacting us.
8. Data Retention
We retain your data:
- As long as your account is active
- Until you request deletion
- For up to 30 days after account deletion (for backup purposes)
9. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication and session management
- Remembering your preferences (theme, settings)
- Analytics and performance monitoring
- Demo mode data storage
You can control cookies through your browser settings.
10. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- Sending you an email notification (for significant changes)
12. Contact Us
If you have questions about this privacy policy or your data, please contact us at:
This privacy policy is effective as of November 1, 2025.