Privacy Policy
Last updated: July 2026
Informed Portfolio is built to need as little of your personal data as possible. Here's exactly what we collect and why, in plain English.
1. What we collect
Without an account: analyses run anonymously; we keep standard server logs (IP, timestamps) for security and abuse prevention. With an account: your email, an irreversibly hashed password (bcrypt — we never store or see the plain password), an optional display name, and the things you choose to save: portfolios (tickers + weights), analyses, and monitoring settings. If you write to us through the contact form we also store that message with your name and email address, so your enquiry survives an email-delivery failure (see §7 for how long).
2. What we use it for
To run the product: signing you in, saving and re-opening your work, sending the monitoring alert emails you set up, and enforcing plan limits. That's it.
3. What we never do
We do not sell your data, share it with advertisers, or build advertising profiles. We don't ask for — and you should never enter — brokerage credentials, account numbers, or balances. Portfolios here are ticker lists and percentages, not linked accounts. (One honest caveat: if you use the optional screenshot import, whatever is visible in the image you choose to upload is sent for reading — see §6.)
4. Cookies
One httpOnly session cookie keeps you signed in. Product analytics is currently switched off, so no analytics cookie is set and no usage events are collected; if we turn it on we use a privacy-respecting service (PostHog) to measure which pages and features are used, and we'll say so here. We do not use advertising or cross-site tracking cookies, and we don't sell or share this data.
5. Service providers
We use a small number of processors to operate the product, and share the minimum each one needs: a market-data provider (receives the tickers being analyzed), an email delivery service (receives your email address and the contents of the emails we send you), our cloud hosting and database provider, and a product-analytics provider (PostHog — currently switched off, see §4).
6. The AI provider — including screenshot import
Two features send data to our AI provider (Anthropic's API), and it's worth being specific about what: AI Insights sends the condensed, derived figures from the analysis being explained — not your email address or account details. Screenshot import sends the image you upload, because reading the holdings out of it is the whole feature. Before that image leaves our servers we resize it to a pixel ceiling and re-encode it, which strips embedded metadata such as camera and location EXIF tags; we don't store the image afterwards, and we never use your data to train models. Anthropic processes it as our service provider under their API terms. A brokerage screenshot can show your name, an account number and your balances — so if you'd rather not send those, crop to the holdings table first, or type the tickers in instead. Screenshot import is entirely optional and every tool works without it.
7. Retention & deletion
Saved work is kept while your account exists. Deleting a portfolio, analysis, or monitor removes it. Messages you send us through the contact form are stored — your name, email address and the message itself — so that an enquiry is never lost if our email delivery fails; we keep them for up to 24 months and then delete them automatically. To delete your whole account and its data, or a contact message you've sent us, contact us at support@informedportfolio.com — we'll process it promptly. (Self-serve account deletion is on the roadmap.)
8. Security
Passwords are bcrypt-hashed, sessions are httpOnly cookies, traffic runs over HTTPS in production, and API keys are kept server-side only. No system is perfectly secure, but we follow standard practices and keep the data we hold to a minimum.
9. Changes & contact
If this policy changes materially we'll note it here with a new date. Questions: support@informedportfolio.com or the contact page.