Your data. Your control.

Your core data (portfolio, account, login) sits on EU servers at Supabase in Stockholm. For payment, email, hosting and analytics we use US providers under a recognised EU data-transfer framework (EU-US DPF or Standard Contractual Clauses).

Broker PDFs are parsed only transiently in memory and discarded immediately, never stored. We extract transaction data only, such as date, quantity and price. We never even read your name, account number or IBAN.

We have no access to your brokerage account. We cannot buy, sell, or transfer anything. Your broker credentials are never requested.

Signal and risk analysis runs directly in your browser. For daily alert checks, we compute server-side without requiring you to be logged in. Price data and PDF imports also flow through our servers.

Data is encrypted in transit and at rest. Row-level security technically enforces that every account can only ever see its own data. On top of that: rate limiting and modern security headers.

Processing under EU data protection regulation: minimal data collection, cookieless analytics with no consent banner, full rights of access and erasure.

One click, immediate, irreversible. All portfolios, transactions, settings, and saved signal records are deleted permanently.