Effective October 9, 2026
PortfolIQ processes the information needed to create your account, provide portfolio tracking, secure the service, and respond to support requests. We do not sell personal information or use it for third-party advertising.
Michael Penzin operates PortfolIQ and is responsible for the personal information processed by the service. Contact us at the email below for privacy questions or requests.
Providing information is voluntary; you are not legally required to create an account or upload portfolio data. An email address and authentication details are needed for an account; standard registration also asks for first and last names. Transaction data is needed for portfolio calculations. Without the required information, we cannot provide the corresponding features. Support messages, social sign-in and device notifications are optional.
We use this information to authenticate you, calculate and display portfolio analytics, synchronize supported records, operate widgets and notifications, provide portfolio hints, maintain security, troubleshoot problems, and respond to support requests.
We process the information you provide for the purposes described in this policy. Where GDPR applies, the grounds for processing depend on the purpose: providing the service you request, legitimate interests in securing and maintaining the service where balanced against your rights, compliance with legal obligations, or consent where required. Optional consent can be withdrawn. Dismissing the storage notice does not give consent to advertising or optional tracking.
Service providers receive information needed for their functions: Fly.io hosts the application; Google Sheets supports account and transaction synchronization; Google and Apple verify social sign-in when used; Brevo delivers password-reset emails with your email address and reset-message content; browser push services and Apple receive device subscription details and notification content for enabled device delivery. Market-data requests to Yahoo and TASE/Maya include requested instrument symbols. Provider use depends on the features and service configuration.
When AI hints are enabled for the service, OpenAI receives calculated portfolio totals, holding symbols and metrics, recent activity summaries, market context and language to generate a hint. This input does not include your name, email address or uploaded broker file, but it contains financial information and is not anonymous. Hints may be requested automatically when the dashboard loads. If AI is not configured, the service uses a local summary instead. AI hints are informational and do not make decisions for you.
Apps you authorize and clients using your API keys can access data within the permissions you grant; manage or revoke access in Account Settings. Strategies and presets you publish are visible to other users, and their imported copies may remain after you remove your original. Community result contributions require a separate opt-in and are shown as aggregate metrics after participation thresholds. We may also disclose information where legally required. We do not sell personal information or use it for third-party advertising.
Hosting, synchronization, authentication, email, push and AI providers may process information outside Israel or your country of residence. Applicable data-transfer requirements depend on the destination, provider and law governing the processing. Contact us for details about providers and transfers relevant to your data.
Account and portfolio records are generally retained while your account is active. Account Settings lets you request permanent account deletion: live local account records are removed and Google Sheets cleanup is attempted; external cleanup can remain pending. A deletion record containing your email address and deletion details is retained to prevent account recreation or resynchronization. Deletion does not clear storage on your devices, files you exported, or copies shared with other users. Security, support, provider and backup records can have separate retention; contact us about retained records or outstanding cleanup.
You may request access to your personal information and correction of inaccurate information by contacting support. You can edit your profile in Account Settings and export transactions as CSV from the transaction table; that CSV is not a complete copy of all account information. Contact us for a broader copy or another privacy request. Depending on the law that applies, you may also have rights to deletion, restriction, objection, portability, withdrawal of consent and a complaint to the relevant privacy authority. We may need proportionate identity verification to protect your account. Do not send passwords or authentication tokens.
We use authentication, access controls and other safeguards to protect information, but no online service can guarantee absolute security. Keep your device and exported files secure. You can manage sign-in methods, connected apps and notification preferences in Account Settings; device notification permission is controlled separately by your browser or operating system.
For application support, privacy requests, account questions, or legal inquiries, contact us by email. Please do not include passwords, authentication tokens, or complete financial statements.
Privacy Policy · Cookies & browser storage · Terms of Use · Support · PortfolIQ