Privacy before portfolio data.

The free builder reads the holdings CSV you explicitly select and calculates with it in your current browser tab. It does not upload file content, company targets or results, and does not store them in cookies, local storage or an account. Inputs stay in page memory; refreshing or using Reset clears them. The fictional example contains no real portfolio or current ETF data.

The builder has no brokerage connection, sign-in requirement or product analytics lifecycle. Vercel serves the application files and receives ordinary web requests, including connection metadata such as the requested URL and IP address; those requests do not include your imported file or calculation inputs.

Imported company identifiers, dates and source labels are user-supplied and unverified. The builder does not fetch source URLs or access the private founder data described below.

• Account and authentication details needed to sign in and keep one owner’s data isolated.
• For one selected brokerage account: account identity, balances, positions, activities, fees, dividends and security identifiers needed for calculations.
• Exact ETF share-class identity, dated official-issuer or provider holdings evidence, security-company links and the derived exposures needed to show underlying companies.
• Founder-access state, saved route inputs, calculation evidence and receipt status, plus support and data-rights requests you submit.
• Source, timestamp, coverage and quality evidence needed to explain each result.

TrustPortfolio does not ask for or store your brokerage password. The connection is completed through the brokerage-connection processor.

Raw issuer and provider holdings files remain private server-side evidence. They are used only where the source terms permit the required processing and authenticated derived display; they are not redistributed as public raw files.

We process this data to authenticate the approved founder, load one selected brokerage account, calculate portfolio and underlying-company results, check route reachability, preserve private receipts, show coverage and data quality, answer support requests, protect the service and meet legal obligations.

Portfolio information is not used for advertising, sold to data brokers or used to generate personalised investment recommendations.

Supabase provides authentication and application data services. SnapTrade provides the read-only brokerage connection. Vercel delivers the web application. Mailgun delivers account and support email.

Data is otherwise disclosed only when needed to provide the service, comply with law or protect users and the service.

The free builder does not send product analytics. The founder workspace and informational pages use a closed set of categorical journey events. Analytics payloads do not contain portfolio values, weights, returns, ISINs, tickers, fund or company names, broker names, account identifiers, dividends or free-text support content.

Account and portfolio data is kept only for as long as needed to provide the private tool or meet a legal, fraud-prevention or security obligation. The founder can disconnect the brokerage connection directly. Requests to export owned data, remove private source material or delete the account are handled through Account → Support; they are not self-service actions. Deletion from backups and processors can take additional time where technically or legally required.

Subject to applicable law, you may request access, correction, deletion, restriction or export of personal data, object to certain processing, withdraw consent where consent is the basis, and complain to a supervisory authority.

The data controller is the operator identified in the Terms. After signing in, use Account → Support to exercise a data right or ask a privacy question.

Never send a broker password, provider token or portfolio export through a general support message.