Made with Emergent
Last updated: April 28, 2026
This Privacy Policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. We are committed to protecting your personal information and being transparent about how we use it.
Portfolio Engine ("we", "us", "our") operates an educational investment platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
By using our Service, you consent to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
| Data Type | Examples | Purpose |
|---|---|---|
| Account Information | Email, name, profile picture (via Google) | Account creation and authentication |
| Investor Profile | Risk tolerance, investment horizon, market location | Personalized recommendations |
| Portfolio Data | Instrument tickers, quantities, purchase prices | Portfolio tracking and analysis |
| Payment Information | Processed by LemonSqueezy (we don't store card details) | Subscription management |
| Contact Information | Email for waitlist, support inquiries | Communication and support |
We use your information to:
We maintain operational logs of email communications sent to you, including delivery status, subject line, and technical metadata. These logs are used solely for debugging delivery issues and ensuring reliable communication. Logs are retained for 12 months and are accessible only to authorized technical personnel.
Under the GDPR, we process your data based on:
| Legal Basis | Applicable Processing |
|---|---|
| Contract Performance | Providing our Service, processing payments, account management |
| Consent | Marketing emails, optional analytics, waitlist signup |
| Legitimate Interest | Security, fraud prevention, service improvement |
| Legal Obligation | Tax records, legal compliance, responding to legal requests |
We share your data with the following third-party services:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Google (OAuth) | Authentication | Email, name, profile picture | Link |
| LemonSqueezy | Payment processing | Email, payment details | Link |
| FRED API | Economic data | No personal data shared | Link |
| Resend | Email delivery | Email address | Link |
| MongoDB Atlas | Database hosting — SOC 2 Type II certified | All account data (encrypted) | Link |
| Anthropic | AI-powered analysis and automated insights generation (portfolio summaries, rebalancing suggestions, cycle analysis, behavioral coaching) | Anonymized portfolio structure (instrument types, sector allocations, performance metrics, economic phase context, user risk profile). We do NOT share specific quantities, cost basis values, purchase dates, full name, or any directly personally identifiable information beyond what is necessary for analysis generation. | Link |
When generating AI-powered analysis and automated insights, portfolio data is processed by Anthropic's API under a data processing agreement. Anthropic processes this data solely to generate the requested analysis and does not use it to train AI models (per Anthropic's API usage policy). Data transmitted to Anthropic is anonymized to remove direct personal identifiers before transmission.
We retain your data for the following periods:
You can request deletion of your data at any time (see Section 7: Your Rights).
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data ("Right to be Forgotten")
Right to Portability
Receive your data in a machine-readable format
Right to Restrict Processing
Limit how we use your data
Right to Object
Object to processing for direct marketing
To exercise any of these rights, contact us at:
We implement appropriate technical and organizational measures to protect your data:
While we implement robust security measures, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials.
Your data may be processed in countries outside your residence, including the United States. When we transfer data internationally, we ensure appropriate safeguards:
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@portfolioengine.io.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related questions or to exercise your rights:
EU/EEA Residents: For GDPR-related matters, EU and EEA residents may contact us directly at support@portfolioengine.io. We will respond to all GDPR requests within 30 days as required by law. Please note that Portfolio Engineis operated from the United States. If you are unsatisfied with our response to a data protection request, you have the right to lodge a complaint with your local data protection supervisory authority.
We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. You can customize your preferences or reject non-essential cookies.
By using this site, you agree to our Privacy Policy and Terms of Service.
Made with Emergent