Financelyz ("we", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
We collect the following categories of data:
Account Data
Financial Data (User-Entered)
This data is only used to provide you with the portfolio and alert features. It is never shared with third parties or used for advertising.
Financial Data (Broker-Connected, Read-Only)
You can disconnect your brokerage account at any time from the Strategy tab. Disconnecting immediately revokes access and deletes the synced holdings.
Chat History
Chat messages are stored to provide persistent history. You can delete individual sessions at any time. Free plan chats are not persistently stored.
Usage Data
We use your data solely to provide and improve the service:
We do NOT sell your data to third parties. We do NOT use your data for advertising.
Your account and application data is stored using Supabase, a PostgreSQL-based backend-as-a-service platform. Supabase is SOC 2 Type II compliant and stores data in secure, encrypted databases. Data is protected with Row Level Security (RLS) — you can only access your own data.
Authentication is handled by Supabase Auth, which supports email/password and Google OAuth. Passwords are never stored in plaintext — they are hashed using industry-standard bcrypt.
Payments are processed by Stripe, a PCI-DSS compliant payment processor. We never store your credit card numbers, CVV codes, or full card details on our servers. Stripe handles all payment data directly.
We store only your Stripe Customer ID (a non-sensitive identifier) to manage your subscription status. Stripe's privacy policy is available at stripe.com/privacy.
If you choose to connect a brokerage account, we use SnapTrade, a third-party financial data aggregator, to establish a READ-ONLY connection to your brokerage.
Through this connection we can read your account holdings and positions. We CANNOT place trades, withdraw funds, or otherwise act on your account — SnapTrade connections are configured with read-only permissions only, enforced at the API level.
The access credential ("user secret") SnapTrade issues for your connection is encrypted (AES-256-GCM) before it is stored. Synced holdings are stored the same way as manually entered holdings (see Section 1) until you disconnect, at which point they are deleted along with the connection itself.
You may disconnect your brokerage account at any time from the Strategy tab in the app. SnapTrade's own privacy policy is available at snaptrade.com.
You have the following rights regarding your data:
To exercise these rights, contact us at support@financeterminal.app. We will respond within 30 days.
For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). The legal bases for processing your data are:
You have the right to lodge a complaint with your local data protection authority if you believe your rights under GDPR have been violated.
We use the following cookies:
We do not use tracking cookies or third-party advertising cookies.
We retain your data for as long as your account is active. If you request account deletion, your data will be permanently deleted within 30 days, except where retention is required by law (e.g., financial records for tax purposes may be retained for up to 7 years).
For privacy-related inquiries, data access requests, or to exercise your rights, contact us at:
Email: support@financeterminal.app
Response time: within 30 business days