Privacy Policy

At UpMyFolio, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered financial tools.

1Information We Collect

We collect information that you voluntarily provide to us when you register on the Service, express an interest in obtaining information about us, or otherwise when you contact us.

• Authentication Data: When you sign in via Google OAuth, we collect your email address, name, and profile picture to create and manage your account.
• Usage Data & Interactions: We log the natural language queries you type into our AI Screener, the stocks you view, and your interactions with the AI Auditor to improve our models and provide a personalized experience.
• Technical Data: Our API gateway (NGINX) temporarily logs IP addresses, browser types, and request timestamps strictly for rate-limiting, security monitoring, and DDOS protection.

2How We Use Your Information

We use personal information collected via our Service for a variety of business purposes described below:

• To facilitate account creation and logon process.
• To manage your premium subscription and track AI credit usage.
• To protect our Services (e.g., fraud monitoring and prevention).
• To respond to user inquiries and offer support.

3Data Sharing with Third-Party AI Providers

UpMyFolio leverages advanced Large Language Models (LLMs) to power features like the AI Screener and Forensic AI Auditor.

Important: When you submit a natural language query or generate a stock analysis, your prompts and relevant public financial data are transmitted securely to our AI provider (Google Gemini) via their API. We do NOT send your personal identification details (like your name or email) to these AI providers. However, you should not input highly sensitive Personally Identifiable Information (PII) into the AI search bar.

4Cookies and Tracking Technologies

We use NextAuth.js to manage your session. This relies on secure, HttpOnly JWT cookies to keep you logged in. We do not use highly invasive third-party tracking pixels (like Facebook Pixel) on our core dashboard to ensure your financial research remains private.

5Data Security and Retention

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.