Privacy policy
Last updated 23 September 2026
1. What we collect
Account data (e-mail, name, password hash), investor profile data you enter (age, financial figures, goals, risk answers), usage events, support conversations and purchase records (from Stripe: amounts and status, never card numbers).
2. How we use it
To generate your blueprint and research, to run the service, to process payments, to respond to support requests, to measure the product with your consent, and to meet legal obligations.
3. AI processing
AI providers (OpenAI and Anthropic, United States) receive numeric summaries and identifiers from your blueprint and your coach questions. They do not receive your name, e-mail, phone, documents or payment data. Under our agreements they do not train on this data.
4. Processors and regions
Supabase (database and authentication, Seoul region), Vercel (hosting, Frankfurt), Stripe (payments), Resend (e-mail), market-data providers (requests contain instrument symbols only). Transfers outside the UAE rely on contractual safeguards under the UAE Personal Data Protection Law.
5. Cookies and analytics
Essential cookies keep you signed in and remember your language. Analytics load only with your consent and can be withdrawn at any time from cookie settings.
6. Retention
Data is kept while your account exists. On deletion, personal data is removed within 30 days; anonymised aggregates and records required for tax or fraud prevention may be retained as required by law.
7. Your rights
Access, export, correction, deletion, restriction and objection. Export and deletion are self-service in account settings; other requests go through support.
8. Security
Encryption in transit, row-level security in the database, server-only secrets, signed payment webhooks and audit logs. No system is perfectly secure; report concerns through support.
9. Children
The service is not for anyone under 18.
10. Contact
Use the in-product support chat or the contact page for privacy requests.