Privacy

If you create an account, authentication is handled by Neon Auth, which holds your email address and sign-in credentials. Everything else is stored in a Neon Postgres database against your user id:

• the transactions, dividends, interest and wealth entries you import from Excel;
• the valuation-model assumptions you save per company;
• any verified snapshot you issue, with the figures it contains and its public code (revocable from the dashboard).

Prices, fundamentals and financial statements live in tables shared per ticker, not per user: they say nothing about who holds what.

The portfolio X-ray and the no-account trial read the Excel inside your browser and keep it only in browser session storage (sessionStorage), which is cleared when you close the tab. The file is not uploaded anywhere. The tax draft and the FIFO calculator also compute locally.

The browser additionally stores your chosen language, your display currency, and the fact that you have read the disclaimer. There are no advertising or cross-site tracking cookies.

• Vercel: hosting and serverless functions. It receives the HTTP requests (and therefore the IP address) and provides Vercel Web Analytics, which we use for aggregate page views.
• Neon: database and authentication.
• Yahoo Finance: prices and company data. Queries are made by the server and carry ticker symbols only, never who asked for them.
• logo.dev: company logos. Your browser requests those images directly, so logo.dev sees its IP address and the ticker requested.
• Google Fonts: interface typefaces, loaded by the browser.
• Notion: hosts the text of the analyses, which the server reads to publish them.
• Interactive Brokers: only if you use the optional verification. The read-only Flex token you paste is used for that call and is never stored, never logged and never returned.

The code contains no advertising, marketing or cross-site tracking SDK beyond Vercel Web Analytics. Your portfolio data is not sent to any third party: the only recipients are the infrastructure providers listed above.

You can remove positions from the dashboard and revoke any verified snapshot you have issued. To delete the whole account and everything attached to it, write to @trimmtrack.