Privacy Policy
What we collect
- Account data — your email address, optional name, and password hash, managed by our authentication provider (Supabase).
- Product data — positions and watchlist entries you create, plan and billing status, and product-usage events used to improve the service.
- Technical data — standard server logs (IP address, user agent, timestamps) kept for security and abuse prevention.
What we use it for
- Operating your account and delivering the features you subscribe to.
- Sending transactional email: sign-in links, password resets, and — if you enable them — pick and IPO alerts.
- Aggregate, de-identified analytics to understand what to improve.
What we never do
- We do not sell or rent your personal data to anyone.
- We do not share your portfolio data with third parties, advertisers, or data brokers.
- We do not use your email for marketing you did not opt into.
Processors
We rely on a small set of infrastructure processors: Supabase (authentication and database), Vercel (hosting), Anthropic (AI processing of advisor-chat messages), and a payment processor at billing launch (Stripe). Each processes data only as needed to provide its service.
Cookies
The service uses essential cookies only: your authentication session and your theme preference. There are no advertising or cross-site tracking cookies.
Retention and deletion
Account data is retained while your account is active. Deleting your account removes your profile and portfolio data within 30 days, except records we must keep for legal or billing compliance.
Your rights
You may request a copy of your data, correction, or deletion at any time by emailing hello@invexa.uk. We respond within 30 days.
Contact
INVEXA · London, United Kingdom · hello@invexa.uk