Privacy Policy

1. Information We Collect

We collect the following information when you use DeskFi:

• Account information: Name, email address, and hashed password when you create an account
• Profile data: Your investment preferences, risk tolerance, goals, and budget settings from onboarding
• Trading 212 API key: If you choose to connect your brokerage account, we store your API key to sync portfolio data
• Portfolio data: Holdings, positions, cost basis, and performance data synced from Trading 212
• Usage data: Feature usage, research queries, and interaction patterns to improve the Service

2. How We Use Your Data

Your data is used to:

• Display your portfolio dashboard and analytics
• Generate AI-powered analysis, allocation recommendations, and research
• Personalise the Service based on your investment profile and preferences
• Improve the Service and develop new features

3. AI Processing

Your portfolio data and investment profile are sent to AI language models to generate analysis and recommendations. This data is processed in real time and is not used to train AI models. We use third-party AI providers (such as Anthropic) and their respective privacy policies also apply to data processed through their services.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. API keys are stored in encrypted form. We use secure, authenticated database connections and enforce HTTPS for all communications.

We do not sell, rent, or share your personal data or portfolio information with third parties for marketing purposes.

5. Third-Party Services

We integrate with the following third-party services:

• Trading 212: To sync your portfolio data via their API
• AI providers: To generate analysis and research (e.g., Anthropic Claude)
• Hosting provider: Our application is hosted on Vercel

Each of these services has its own privacy policy. We only share the minimum data necessary for the service to function.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and portfolio information within 30 days. Some data may be retained in backups for up to 90 days.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect your Trading 212 API key at any time
• Export your data

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at support@portfoliodesk.app.