Privacy Policy

Automatically Collected Information

When you access our Service, we automatically collect certain information about your device and usage:

Information You Provide

You can browse without an account. If you sign in, our sign-in provider Clerk holds your email address and name, and we store your account ID with what you save:

• Portfolios, holdings and watchlists you add
• Chat questions you ask and the answers we generate
• Account preferences, learning progress and subscription status
• Feedback or support requests you send us

Files you upload to import a portfolio are read to extract your holdings and are not stored.

Brokerage Connections

If you choose to connect a brokerage account, the connection is made through SnapTrade, a third-party brokerage data connection provider. You enter your brokerage login on SnapTrade's secure connection screen. We never receive or store your brokerage username or password. Connecting is optional. We use the connection to read your account data; we do not place trades or move money.

Once connected, we receive from SnapTrade and store against your account:

• The brokerage name, account names and account identifiers (which can include the account number your brokerage uses)
• Cash balances and the positions you hold: tickers, number of shares or units, and average purchase price
• Connection status and the time of the last sync, or the error if a sync failed

We use this to build the portfolio views and analysis you see in the Service. SnapTrade issues each user a secret that lets us read your accounts; we store it encrypted and use it only to request your data from SnapTrade.

When you disconnect a brokerage, we delete the portfolio we built from it, ask SnapTrade to remove the connection, and, if it was your last connection, ask SnapTrade to delete your SnapTrade user and erase the stored secret. A record that the connection existed (brokerage and account name, status and timestamps) stays on your account until you delete your account. SnapTrade keeps data under its own privacy notice. Your brokerage keeps its own records.

Cookies and Tracking

We use cookies and browser local storage, and we do not use third-party advertising cookies or track you across other websites. These are the ones in use:

• Clerk (sign-in): cookies that keep you signed in and tell the site whether a session might exist. Set when you visit and needed to sign in.
• ShareValue.ai (your choice): a cookie named sv_consent, kept for 12 months, that remembers whether you pressed Accept or Reject, or turned session recording off. It is set only when you choose. Where we ask for consent, it is the only thing we store before you choose, apart from the referral code described below.
• PostHog (analytics), without cookies: if you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, or your browser sends a Global Privacy Control signal, PostHog runs until you press Accept with no cookies and no local storage. It keeps a random identifier in memory for the current page only, does not record sessions, does not capture clicks or text, and does not link activity to your account. If you press Reject, or withdraw your choice later in Cookie settings, it returns to this mode and we delete the entries described below.
• PostHog (analytics), with cookies: after you press Accept, and by default for visitors outside those places, PostHog sets a cookie and a local-storage entry with names starting ph_ that identify your browser so we can count visits and see how features are used. Signed-in activity is then tied to your account ID, not your email address.
• PostHog (session recording): outside the European Union, the European Economic Area, the United Kingdom and Switzerland, and when your browser sends no Global Privacy Control signal, we record sessions with masking unless you turn it off with Turn off session recording in Cookie settings in the footer. Inside those places, or with a Global Privacy Control signal, sessions are recorded only after you press Accept. Form fields, chat messages and saved-view names are masked, and sign-in, account, portfolio, brokerage-linking, admin and leaderboard pages are never recorded.
• Sentry (error monitoring): sets no cookies. Session Replay is off by default and loads only if you have pressed Accept, in which case it keeps a session identifier in your browser storage while you browse.
• Paddle (payments): loads on the pricing and checkout pages and, for subscribers, on other pages so payment-recovery prompts can reach you. Paddle may set its own cookies or local storage under its privacy notice.
• ShareValue.ai (referral link): if you arrive through a friend's referral link, a session-storage entry named sv_ref_pending holds the referral code and the time you clicked, so the referral can be applied if you create an account. It is kept for the current browser session only, is deleted once the referral is applied or refused, and is stored even where we ask for consent because it delivers the referral you followed.
• ShareValue.ai (preferences): local-storage entries for preferences such as theme, display settings, learning progress and your acceptance of our terms.
• Vercel (hosting): may set a short-lived security cookie if its bot protection challenges a request. We also read your approximate country from your IP address, at the moment of the request, to decide whether to ask for consent; we do not store it beyond your browser session.
• ShareValue.ai (campaign source): where analytics cookies are allowed (outside the places above, or after you press Accept), a local-storage entry named sv_first_touch, or a cookie named sv_ft if local storage is blocked, kept for 90 days, holding the campaign parameters, referring site and landing page of your first visit; and a session-storage entry named sv_entry_page holding the first page of your visit. Where we ask for consent, we write neither until you press Accept, and we delete them if you reject or withdraw.

You choose in the banner we show where consent is required, and anyone can change their choice, or turn session recording off, at any time with Cookie settings in the footer. We treat a Global Privacy Control signal as a request to stay cookieless until you press Accept. You can also block or delete cookies and local storage in your browser settings, though sign-in will not work without Clerk's cookies. To ask us to stop analytics for your account, email privacy@sharevalue.ai.

Service Providers

We share data with these third-party service providers (sub-processors) who help us operate the Service:

These providers process your data only to provide their service to us, under their own terms and privacy policies.

Legal Requirements

We may disclose information if required by law or to:

• Comply with legal process (subpoenas, court orders)
• Protect our rights and property
• Prevent fraud or security threats
• Protect user safety

Business Transfers

If ShareValue.ai is acquired or merged, your information may be transferred to the new owner.

General Rights

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Objection: Object to certain data processing

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

See our Do Not Sell My Personal Information page for more details.

European Residents (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing