Privacy Policy

aiportfolioanalyst.com, Inc.

Last Updated: April 23, 2026

This Privacy Policy explains how aiportfolioanalyst.com, Inc. ("Company," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our website, software, and services (the "Service"). It also describes your rights under California law.

Key points at a glance:

• We only use cookies that are strictly necessary for the Service to function.
• We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• We do not use your information to build or train advertising profiles.
• We use a small number of service providers (payment, email, AI analysis, market data) strictly to deliver the Service.
• California residents have specific rights under the CCPA/CPRA, described in Section 11.

1. Scope

This Privacy Policy applies to personal information we collect through our websites (including aiportfolioanalyst.com and aiproanalyst.com), our software-as-a-service platform, and related communications.

This Privacy Policy does not apply to third-party websites, brokerage platforms, or services linked to or integrated with the Service. Those third parties have their own privacy policies, which you should review.

2. Information We Collect

We collect the following categories of personal information. Categories are listed as defined in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act ("CCPA/CPRA").

(a) Identifiers

• Name, email address, account username, and password (stored in hashed form);
• IP address, device identifiers, and browser type;
• Account ID and internal User ID assigned by the Service.

(b) Commercial Information

• Subscription plan, subscription status, billing history;
• Records of transactions with us.

(c) Financial Information

• Portfolio holdings, transaction records, cash balances, and broker-account identifiers that you upload, import, or enter into the Service;
• Payment information processed by our payment processor (we do not store full payment card numbers on our servers; our payment processor does).

(d) Internet or Network Activity

• Pages viewed within the Service, features used, date and time of visits, and referring pages (collected through server logs and strictly-necessary cookies).

(e) Inferences

• Automated analytical outputs generated by the Service based on your portfolio data. These outputs are intended for your use and are not used to build marketing or advertising profiles.

Sensitive Personal Information. We do not intentionally collect categories of information defined as "sensitive personal information" under the CCPA/CPRA (such as government identifiers, precise geolocation, health information, racial or ethnic origin, religious beliefs, genetic or biometric data, or the contents of private communications), except to the extent your account password itself qualifies. We do not use or disclose sensitive personal information for purposes other than those permitted under California Civil Code § 1798.121(a), so you are not required to submit a separate "Limit the Use of My Sensitive Personal Information" request.

3. How We Collect Information

We collect information in the following ways:

• Directly from you when you register an account, enter portfolio data, upload statements, connect a broker feed, contact support, or communicate with us;
• Automatically when you use the Service, through server logs and strictly-necessary cookies (see Section 5);
• From third-party services you authorize, such as a broker-feed sync (for example, if you choose to connect your IBKR Flex or Schwab read-only feed, we receive the data those services return for your account);
• From our payment processor, which reports subscription and payment status back to us.

4. How We Use Your Information

We use your personal information only for the following business purposes:

• To provide, operate, and maintain the Service;
• To generate automated analytical outputs on your portfolio;
• To create and manage your account, authenticate you, and secure the Service;
• To process subscription payments and manage your subscription;
• To send you transactional emails (for example, account confirmations, payment receipts, and security notices);
• To respond to your inquiries and provide customer support;
• To monitor and improve the Service, investigate technical issues, and prevent fraud or abuse;
• To comply with legal obligations, court orders, and enforce our Terms of Service.

We do not use your personal information for advertising or marketing purposes directed at you based on your portfolio or analytical outputs. We do not sell your personal information.

5. Cookies and Similar Technologies

We use only strictly-necessary cookies. These cookies are required for the Service to function and cannot be disabled without breaking core functionality. Specifically, we use cookies for:

• Maintaining your login session;
• Remembering your authentication state;
• Protecting against cross-site request forgery and other security threats;
• Load balancing and server routing where applicable.

We do not use advertising cookies, cross-site tracking cookies, social-media pixels, or third-party analytics cookies that build profiles about you. Because we use only strictly-necessary cookies, we do not display a cookie consent banner. You may configure your browser to block or delete cookies, but doing so may prevent you from using parts of the Service (including logging in).

6. How We Share Your Information

We share personal information only in the following limited circumstances:

(a) Service Providers

We use a small number of service providers to operate the Service. These providers are contractually restricted from using your personal information for any purpose other than providing services to us. The categories are:

• Payment processing — to process subscription payments and refunds;
• Transactional email delivery — to send account and billing emails to you;
• AI analysis provider — portfolio symbols and summary metrics are sent to an AI service (currently Anthropic’s Claude) to generate the commentary portion of your analysis. The AI provider is contractually prohibited from using this data to train its models or for any purpose other than returning the analysis to us;
• Market data providers — we retrieve securities pricing and fundamentals from third-party market data feeds. These calls use ticker symbols and do not transmit your personal identifiers;
• Hosting and infrastructure — servers, storage, and backup infrastructure used to operate the Service.

(b) Legal Compliance

We may disclose information if required to do so by law, subpoena, court order, or regulatory request, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or others.

(c) Business Transfers

If the Company is involved in a merger, acquisition, financing, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

(d) With Your Consent

We may share information for other purposes with your explicit consent.

7. We Do Not Sell or Share Your Personal Information

THE COMPANY DOES NOT SELL YOUR PERSONAL INFORMATION. THE COMPANY DOES NOT SHARE YOUR PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING.

Because we do not sell or share personal information in the senses defined by the CCPA/CPRA, we do not display a "Do Not Sell or Share My Personal Information" link. However, you retain the right to submit such a request if your circumstances change; instructions are in Section 12.

8. Data Retention

We retain your personal information for as long as your account is active, plus a reasonable period afterward for legal, tax, audit, and fraud-prevention purposes.

When you delete your account, we delete or anonymize your portfolio and personal data within a reasonable period, except for records we are legally required to retain (for example, billing records for tax purposes) or information retained in routine backup archives that are purged on a rolling schedule.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These include encrypted transport (TLS) for data in transit, hashed passwords, access controls, and server-side network segmentation.

No system is completely secure, however, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorized access to your account.

10. International Users

The Service is hosted and operated in the United States. If you access the Service from outside the United States, your personal information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

11. Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights with respect to your personal information:

• Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we have shared your information.
• Right to Delete. You may request that we delete the personal information we have collected from you, subject to certain exceptions (for example, information we need to complete a transaction, comply with a legal obligation, or protect against fraud).
• Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
• Right to Portability. You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt Out of Sale or Sharing. As noted above, we do not sell or share personal information. This right is preserved for you in case our practices change in the future.
• Right to Limit Use of Sensitive Personal Information. As noted above, we do not use sensitive personal information for purposes that would require a separate limit request.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights. We will not deny you the Service, charge you different prices, or provide a different level or quality of service because you exercised your rights.

12. How to Exercise Your Rights

To exercise any of the rights described in Section 11, please contact us by email at legal@aiportfolioanalyst.com with the subject line "Privacy Rights Request." Your request should include:

• Your name and the email address associated with your account;
• A clear description of the right you wish to exercise;
• Any additional information we need to verify your identity.

We will acknowledge your request within ten (10) business days and respond substantively within forty-five (45) calendar days, with one extension of up to forty-five (45) additional days where reasonably necessary. If we need more time, we will notify you in writing of the reason and extension period.

To protect your information, we may need to verify your identity before fulfilling a request. For most requests, we will verify your identity by confirming that you control the email address associated with your account and by matching information you provide in the request with information we have on file.

13. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. Your authorized agent must provide written permission signed by you, and we may require you to verify your identity directly before responding. We will not respond to agent requests that lack verification.

14. Children’s Privacy

The Service is not intended for and is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete it. If you believe we have collected information from a child under 18, please contact us at legal@aiportfolioanalyst.com.

15. Third-Party Links

The Service may contain links to third-party websites, including brokers, financial news sites, and other resources. We are not responsible for the privacy practices of those third parties. You should review their privacy policies before providing personal information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last Updated" date at the top of this Policy and, where required by law, provide additional notice through the Service or by email. Your continued use of the Service after the revised Policy takes effect constitutes your acceptance of the updated Policy.

17. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, or wish to exercise any of your rights, please contact us at:

• aiportfolioanalyst.com, Inc.
• Attn: Privacy Officer
• 1188 St Charles Ct, Los Altos, CA 94024, USA
• Email: legal@aiportfolioanalyst.com

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.