Privacy

Only what the app needs to work:

• your account: email address and password (encrypted, never readable by us);
• what you enter: portfolios, transactions, watched securities, currency conversions, declared savings and goals;
• your preferences: language, display currency, notifications, technical indicators, articles read;
• at sign-up: the name of the site you came from (a domain such as “google.com”, never the exact address nor your path), to count where sign-ups come from; without a sign-up, nothing is sent or kept.

No brokerage data is requested or stored: Everyfolio connects to no broker account, and will never ask for your banking credentials.

What you write on a transaction — the reason for a purchase or a sale — is read by nobody but you. That text is never analyzed, by a person or by a program, enters no statistic, and leaves with the rest of your data on export as on deletion.

The library can be read without an account. Reading an article creates no data with us: no account, no cookie, no analytics, no tracker. Vercel sees the request for as long as it takes to serve it, as for any page. Only two things stay in your browser: your dismissal of the language banner and, for the length of the tab, the name of the site you came from — sent only if you create an account. Nothing else is sent to us.

Your data is hosted with Supabase, in a Canadian region (ca-central-1). Each user can read and modify only their own data: that separation is enforced by the database itself, not merely by the interface. The application that reads this data and shows it to you runs on Vercel, in the Washington (United States) region: each request passes through there for the time it takes to serve you, with no content kept — its technical logs are short-lived; your data itself stays hosted in Canada.

Running the app means calling a few external services:

• Twelve Data — prices, history and security search;
• Marketaux — financial news;
• Bank of Canada — official exchange rates;
• Anthropic — plain-language explanations of events, from structured market data;
• Cloudflare Turnstile — anti-robot check on public forms;
• Resend — sending confirmation and password-reset emails;
• Vercel — hosting and running the application: it processes each page you request, for as long as it takes to serve it, without keeping its content.

The first six receive what they need — a ticker symbol, an amount, an email address to send to — never your portfolio as a whole. Vercel is the exception by nature: it runs the application, so it processes what the application shows you, without storing it.

Your data is not sold, rented, or passed on for advertising purposes. There is no advertising tracker in the app.

From your profile: “Delete my account”, at the bottom of the page. The confirmation screen details what will be deleted, offers to export your data first, then requires your email address and your password. Deletion is immediate, complete and irreversible. If you no longer have access to your account, write to privacy@everyfolio.app from the address associated with it — the request is then handled manually.

The “Write to us” link opens your mail client: the application sends nothing and stores nothing. We then receive the address you write from and whatever you chose to include. Nothing is collected automatically, except the title of the article your question comes from — added to the draft, visible, and yours to delete before sending.

Your message is used to answer you, and sometimes to turn a question into an article. It is kept for as long as it takes to reply, then deleted. If it inspires an article, only the reworded topic is kept — never your message, never your address. Nothing is used for other purposes, cross-referenced with your account, or passed on.

The person in charge of the protection of personal information at Everyfolio is Keven Laverdière. For any question about your information, a request for access, correction or deletion, or a complaint, write to privacy@everyfolio.app — the only address for these requests.