Privacy policy

Controller

My Analysis AI is responsible for the personal data described here. Contact us using the contact address published on this website.

Data we collect

• Account data: email address and an encrypted password hash, managed by our authentication provider (Supabase).

• Content you create: watchlists, portfolio positions you enter, saved valuations and their inputs.

• Usage and security data: request logs (time, route, status, approximate performance), rate-limit counters and error reports. Logs do not contain passwords, tokens or API keys.

• Preferences stored in your browser, such as theme and valuation settings.

Why we use it (legal bases)

• To provide the Service you signed up for (contract).

• To secure the Service, prevent abuse and debug problems (legitimate interests).

• To meet legal obligations.

AI processing

When you request an AI summary or ask the valuation assistant a question, the relevant market data, calculated figures and your question are sent to our AI provider (Anthropic) to generate the response. Your email address is not included. AI outputs may be cached and reused for other users when they concern the same instrument on the same day.

Processors

Vercel (hosting), Supabase (authentication and database), Anthropic (AI explanations), Twelve Data (market data; receives instrument symbols, not your identity), U.S. SEC and U.S. Treasury (public data; receive no personal data). Optional providers listed on the Data sources page receive instrument symbols only.

International transfers

Our processors may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Retention

Account data and content are kept while your account is active and deleted within 30 days of an account deletion request, except where law requires longer retention. Security logs are kept for a limited period.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your data, and to object to processing. You can also complain to your data-protection authority. Contact us to exercise these rights.

Security

Data is encrypted in transit. Database rows are protected by row-level security so each account can only access its own records. Secrets are held server-side only. No system is perfectly secure, so we cannot guarantee absolute security.

Children

The Service is not directed to anyone under 18.

Changes

We will post updates here and change the date above.