Privacy Policy | UpMyFolio

At UpMyFolio, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered financial tools.

1Information We Collect

We collect information that you voluntarily provide to us when you register on the Service, express an interest in obtaining information about us, or otherwise when you contact us.

Authentication Data: When you sign in via Google OAuth, we collect your email address, name, and profile picture to create and manage your account.
Usage Data & Interactions: We log the natural language queries you type into our AI Screener, the stocks you view, and your interactions with the AI Auditor to improve our models and provide a personalized experience.
Technical Data: Our API gateway (NGINX) temporarily logs IP addresses, browser types, and request timestamps strictly for rate-limiting, security monitoring, and DDOS protection.

2How We Use Your Information

We use personal information collected via our Service for a variety of business purposes described below:

To facilitate account creation and logon process.
To manage your premium subscription and track AI credit usage.
To protect our Services (e.g., fraud monitoring and prevention).
To respond to user inquiries and offer support.

3Data Sharing with Third-Party AI Providers

UpMyFolio leverages advanced Large Language Models (LLMs) to power features like the AI Screener and Forensic AI Auditor.

Important: When you submit a natural language query or generate a stock analysis, your prompts and relevant public financial data are transmitted securely to our AI provider (Google Gemini) via their API. We do NOT send your personal identification details (like your name or email) to these AI providers. However, you should not input highly sensitive Personally Identifiable Information (PII) into the AI search bar.

4Cookies, Web Beacons & Third-Party Advertising (Google AdSense)

We use cookies and similar tracking technologies to enhance user experience, remember your preferences, and maintain secure authentication sessions via NextAuth.js.

Google AdSense & Advertising Cookies Notice

Third-party vendors, including Google, use cookies (such as the DoubleClick cookie) to serve ads based on a user's prior visits to UpMyFolio or other websites across the Internet.

Google's use of advertising cookies enables it and its network partners to serve relevant advertisements to our users based on their browsing behavior and visits to UpMyFolio and other websites.

Your Choices & Opt-Out: Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info.

For more information on how Google manages data in its advertising products, please visit How Google uses information from sites or apps that use our services.

5Data Security and Retention

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

If you have questions or comments about this Privacy Policy, please email us at [email protected].

1Information We Collect

We collect information that you voluntarily provide to us when you register on the Service, express an interest in obtaining information about us, or otherwise when you contact us.

Authentication Data: When you sign in via Google OAuth, we collect your email address, name, and profile picture to create and manage your account.

Usage Data & Interactions: We log the natural language queries you type into our AI Screener, the stocks you view, and your interactions with the AI Auditor to improve our models and provide a personalized experience.

Technical Data: Our API gateway (NGINX) temporarily logs IP addresses, browser types, and request timestamps strictly for rate-limiting, security monitoring, and DDOS protection.