Privacy Policy
1. Information We Collect
We collect information you provide directly: your email address and password (or Google OAuth token) when you create an account, and portfolio data (bond positions, quantities, prices, notes) you enter into the Platform. We also collect limited usage data such as session tokens and authentication state. We do not collect payment card data or government-issued identification.
2. How We Use Your Data
Your data is used solely to operate the Platform: to authenticate your session, save and restore your portfolio across devices, and deliver AI-generated analysis on bonds you select. We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your portfolio data to train AI models.
3. Data Sent to Third-Party AI APIs
When you use AI-powered features (bond analysis, NLP search, portfolio commentary), the Platform sends bond identifiers, financial metrics, and your query text to third-party large language model providers — currently Google (Gemini API) and Anthropic (Claude API). These requests are proxied through our server; your account credentials are never transmitted to these providers. Both providers process data under their own privacy policies and may retain inputs for abuse-prevention and safety purposes in accordance with their terms. We recommend reviewing Google's and Anthropic's privacy policies before using AI features if you have concerns about the data you submit.
4. Data Storage (Supabase)
Portfolio save slots and account records are stored in Supabase, a third-party database service hosted on AWS infrastructure. Data is encrypted in transit (TLS) and at rest. Supabase processes data as a data processor on our behalf, under a Data Processing Agreement. For users in the European Economic Area or United Kingdom, Supabase's standard contractual clauses govern international data transfers.
5. localStorage and Cookies
The Platform stores your theme preference, starred bonds (watchlist), and guest portfolio data in your browser's localStorage. No advertising or tracking cookies are set. We use a single first-party session cookie issued by Supabase Auth to maintain your authenticated session. We do not use third-party analytics, advertising networks, or cookie-based tracking.
6. Data Retention
Account data and saved portfolios are retained for as long as your account is active. If you delete your account, your data is removed from our active database within 30 days. Backups may retain residual data for up to 90 days following deletion before being purged. localStorage data exists only in your browser and is removed when you clear your browser storage.
7. Your Rights and Data Deletion
Depending on your jurisdiction, you may have rights to access, correct, port, restrict processing of, or delete your personal data. Users in the EU/EEA have rights under the General Data Protection Regulation (GDPR). Users in Singapore have rights under the Personal Data Protection Act (PDPA). California residents have rights under the California Consumer Privacy Act (CCPA). To exercise any of these rights — including requesting deletion of your account and all associated data — contact us at the address below.
8. Security
We implement reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed credentials, and access controls on our database. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the Platform or by email. Continued use of the Platform following any update constitutes your acceptance of the revised policy. The effective date at the top of this document reflects the date of the most recent revision.
10. Contact
For privacy-related enquiries, data deletion requests, or to exercise your rights, please contact us at contact@liquiditydesk.com.