Privacy Policy

Account information: your email address and password (or, if you sign in with a third-party provider, the identifier that provider gives us) when you create an account.

Financial account data: when you connect a brokerage or other financial account through our data-aggregation partner, SnapTrade, we receive and store account balances, holdings, positions, and related account metadata. We never receive or store your brokerage login credentials — those are entered directly with SnapTrade and your financial institution, not with us.

Manually-entered data: any assets you choose to add yourself, such as real estate, vehicles, or cryptocurrency held outside a linked exchange.

Payment information: if you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not receive or store your full card number — Stripe provides us a payment token, invoice history, and subscription status only.

Usage data: standard technical information such as IP address, browser type, device information, and pages visited, collected automatically to help secure and improve the Service.

To provide, operate, and maintain the Service — including displaying your net worth, linked account balances, holdings, and allocation.

To process subscription payments and manage billing.

To communicate with you about your account, security, or changes to the Service.

To improve, secure, and troubleshoot the Service.

To comply with legal obligations.

We do not sell your personal or financial information. We share information only with:

• SnapTrade, Inc. — to retrieve your linked account balances and holdings on our behalf.

• Stripe, Inc. — to process subscription payments.

• Supabase, Inc. — our database and authentication provider, which stores your account data on our behalf.

• Other service providers who help us operate the Service (such as hosting and email delivery), bound by confidentiality obligations.

• Law enforcement or regulators, if required by law or legal process.

We use industry-standard safeguards to protect your information, including encrypting sensitive stored credentials at rest (AES-256). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time by contacting us.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain uses of it. To exercise any of these rights, contact us at holdiosupport@gmail.com.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

We use cookies and similar technologies necessary to keep you signed in and to operate the Service securely. We do not currently use cookies for advertising or cross-site tracking.

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at holdiosupport@gmail.com.