How we handle your data.

1Introduction

Portfolio-IQ LLC ("PortfolioIQ", "we", "our", or "us") respects your privacy. This Privacy Policy explains what data we collect when you use portfolio-iq.online or any PortfolioIQ-branded service, why we collect it, how we use it, and the choices you have. By using PortfolioIQ you agree to the practices in this policy.

This policy is global. We tailor specific rights and contact paths based on your jurisdiction (see Section 6).

2Information we collect

Account information

• Identity: name, email, password (stored hashed; we never see the plain text).
• Profile: optional fields like investment goals, risk tolerance, time horizon.
• Payment: handled by Stripe — we receive the last 4 digits and brand, not the full card number.

Portfolio & brokerage data

• Holdings: tickers, quantities, average prices you enter or that get auto-imported.
• Brokerage connections: when you link via SnapTrade or Plaid, we receive read-only holdings and balances. We do not see your broker password and never have signing authority over your accounts.

Crypto wallet data (Prediction Markets)

• Wallet address: the public address you connect via Reown / WalletConnect for Polymarket trading. We never receive your seed phrase or private keys.
• Trade signatures: orders are signed in your wallet; we forward them to Polymarket's exchange.
• Compliance attestation: before you can connect a wallet, we ask you to confirm you are not a US person (US law prohibits us from offering prediction-market trading to US persons). We store the timestamp and IP address of this attestation as a compliance record. This record is retained even if you later delete your account, to the extent required for legal compliance.

Technical & usage data

• Device & browser: IP address, user agent, screen resolution.
• Usage events: what pages you visit, what features you click. Powers GA4 funnel analytics.

3How we use your information

• Provide and operate the PortfolioIQ service — display your portfolios, compute P&L, generate insights.
• Authenticate you and protect against abuse (rate-limiting, bot detection, fraud).
• Process payments and manage subscriptions (via Stripe).
• Send transactional emails (welcome, password reset, billing receipts, security alerts).
• Generate AI briefings and theme correlations using third-party LLM providers — only the content you've added is fed into prompts, never your password or full payment data.
• Improve the product via aggregated analytics (we don't sell individual user data, ever).

4Third-party services we use

PortfolioIQ integrates with the following — when you use those features, your data is shared with these providers under their own privacy practices.

• Stripe — payment processing (stripe.com/privacy).
• SnapTrade — brokerage account linking and trade execution (snaptrade.com/privacy).
• Plaid — bank/brokerage linking for legacy connections (plaid.com/legal).
• Polymarket — prediction market trades you place via our widget go through Polymarket's CLOB API. Your wallet, your trades; we never custody funds. Trade data settles on the Polygon blockchain and is therefore public on-chain.
• Polygon.io & CoinGecko — market price data (no personal info shared).
• OpenAI — generates AI briefings and theme labels. We send only the content needed to produce that response. openai.com/policies/privacy-policy
• Google Analytics 4 & Meta Pixel — anonymous usage analytics. You can opt out via your browser's Do-Not-Track or ad-blocker.
• Sentry — error tracking. Stack traces may include the URL of the page where an error occurred but no portfolio holdings.
• AWS — hosting (servers and managed database).

5Data storage & security

Your data is stored on AWS-managed databases in the United States. We encrypt connections in transit (TLS 1.2+) and at rest. Passwords are hashed with Argon2/PBKDF2. We follow industry-standard access controls — only the engineers who need access can touch production data, and access is logged.

No system is 100% secure. If we discover a breach affecting your data, we'll notify you and the relevant authorities within the timeframes required by law.

6Your rights

Depending on where you live, you have some or all of the following rights:

• Access: request a copy of the data we hold about you.
• Correction: ask us to fix anything inaccurate.
• Deletion: ask us to delete your account and associated data, subject to legal retention requirements (e.g., billing records).
• Portability: request your data in a portable format.
• Objection: object to certain processing (e.g., analytics).
• Withdraw consent: for any consent-based processing.

To exercise any of these rights, email team@portfolio-iq.online. We respond within 30 days.

7Cookies & analytics

We use cookies for three purposes: (1) authentication (keeping you logged in), (2) preferences (theme, last view), and (3) analytics (GA4, Meta Pixel). Analytics cookies can be disabled in your browser without breaking the core product.

8Children's privacy

PortfolioIQ is intended for adults (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has registered, email us and we'll delete the account.

9International transfers

Our servers are in the United States. If you access PortfolioIQ from outside the US, your data is transferred to and processed in the US. For EU/UK users, we rely on Standard Contractual Clauses where required.

10Changes to this policy

We'll post the updated effective date at the top of this page. Material changes get a notice via email or an in-app banner at least 14 days before they take effect.

11Contact us

Privacy questions or requests should go to team@portfolio-iq.online with subject line "Privacy".

Mailing address: Portfolio-IQ LLC, c/o Alfa Algorithms, Luxembourg.