Privacy Policy
Effective August 9, 2026
Stockveil is a portfolio tracker. Our entire business is showing you your own money clearly — not monetizing it. The short version: we collect only what the product needs, everything sensitive is encrypted at rest, we never sell or share your data for advertising, and you can delete everything yourself at any time.
What we collect
- Account basics — your email, name, and password (stored only as a salted hash). Optionally your birthdate and location, which power age-aware retirement guidance; both are optional and editable.
- Financial account data, read-only — when you connect a brokerage or retirement account, we receive account names, balances, holdings, and transaction history from that institution through an aggregator (see below). We never receive the ability to move money, place trades, or change anything at your institution.
- Credentials we deliberately do NOT collect — you enter institution usernames and passwords directly into the aggregator's secure window (Plaid Link or Yodlee FastLink). Those credentials never touch Stockveil's servers. The aggregator gives us a revocable access token instead, which we store encrypted.
- Your own AI keys — Stockveil's AI features run on API keys you bring (OpenAI, Anthropic, or Google). They are encrypted at rest and used only to make requests you initiate.
- Content you choose to publish — if you opt in to the Community, the title, description, and percentage-based performance of your portfolio become visible to other logged-in members. Dollar amounts stay hidden unless you explicitly enable them.
How we use it
Exclusively to operate the product: displaying your portfolio, computing analytics (returns, dividends, risk metrics), generating the AI research and advisor responses you request, and sending the service emails an account requires. We do not sell personal data, we do not share it with advertisers or data brokers, and we do not use your financial data to train AI models.
Who processes data on our behalf
- Plaid — connects financial institutions you choose. By linking an account through Plaid you also grant Plaid the rights described in the Plaid End User Privacy Policy. You can review and revoke Plaid connections at my.plaid.com.
- SnapTrade and Envestnet Yodlee — alternative read-only account aggregators, used the same way for institutions Plaid doesn't cover (and vice versa).
- Market-data providers (Financial Modeling Prep, Apify, Alpaca) — receive only ticker symbols, never your identity or balances.
- Your chosen AI provider (OpenAI, Anthropic, or Google) — receives the portfolio context needed to answer the questions you ask, under your own API key and that provider's terms.
- Infrastructure — Stockveil runs on servers we operate; databases are access-controlled and per-user secrets are encrypted with keys held in HashiCorp Vault.
Consent
Creating an account requires actively checking a box agreeing to the Terms of Service and this Privacy Policy; we record the timestamp of that consent. Connecting a financial account is a second, separate consent — nothing is linked until you complete the aggregator's flow yourself, and you can disconnect at any time.
Security
All traffic is TLS-encrypted. Aggregator tokens and AI keys are encrypted at rest (AES-256) with keys stored in HashiCorp Vault, separate from the database. Passwords are bcrypt-hashed. Access to production systems is limited and audited.
Retention and deletion
Full details live on the Data Deletion & Retention page. The one-line version: your data lives as long as your account does, you can delete your account yourself from Settings → Profile, and deletion is immediate and permanent.
Your rights
You can access and edit your data in the app, export your holdings, disconnect any linked institution, and delete your account entirely — all self-serve. For anything else (a copy of your data, a question this page doesn't answer), email [email protected].
Changes
If this policy changes in a way that matters, we'll say so in the app before the change takes effect. The effective date at the top always reflects the current version.
Stockveil provides educational analysis, not individualized financial advice.