Privacy Policy

Poto ("PotoFin", "we", "us") is a personal finance dashboard that helps you track net worth, portfolios, dividends, and progress toward financial independence. This policy explains what personal data we collect, why, and what rights you have over it.

[INSERT: legal entity name, registered address, and contact email before publishing.]

Account data. Email address, name, and profile image, managed by our authentication provider, Clerk.

Financial data you provide. Assets, liabilities, transactions, dividends, goals, price alerts, and portfolio snapshots you enter or import — this is the core data the app is built to store on your behalf.

Broker connection data. If you connect a broker (currently Interactive Brokers or SnapTrade) via their official, read-only API, we receive your account positions and trade history. We never receive the ability to place trades or move funds. Where a provider has no public API (VIAC, Finpension), you may optionally provide login credentials so we can run an automated read-only sync on your behalf via a third-party automation service (Notte); these credentials are encrypted at rest and used only for that purpose.

AI assistant data. If you use the portfolio AI chat, your questions and a summary of your portfolio data are sent to our AI providers (Google Gemini, and OpenRouter as a fallback) to generate a response. Conversation history is stored so you can revisit past chats.

Payment data. If you subscribe to a paid plan, billing is handled by Stripe — we do not receive or store your card details.

Technical data. Error and performance diagnostics collected via Sentry when something goes wrong, to help us fix bugs.

To provide the service: display your dashboard, sync broker positions, calculate net worth and FIRE projections, send notifications you've opted into, and process payments for paid plans.

We do not sell, rent, or share your financial data with third parties for advertising or marketing purposes.

We use the following subprocessors to operate the service. Each only receives the data needed to perform its function:

• Clerk — authentication and session management
• Convex — database and backend hosting
• Stripe — subscription billing
• Sentry — error monitoring
• Google (Gemini), OpenRouter, Groq — AI chat and scenario-planning features
• SnapTrade, Interactive Brokers, Pipedream, Notte — broker/account connections you opt into
• Alpha Vantage, Finnhub, Yahoo Finance, CoinGecko — public market price data (receive ticker symbols only, not your personal or account data)

[INSERT: confirm each subprocessor has a signed Data Processing Agreement in place, and list international data transfer safeguards — e.g. Standard Contractual Clauses — for any US-based processor receiving EU user data, such as the AI providers above.]

[INSERT: confirm and state the actual hosting region(s) for your Convex deployment and any subprocessor data residency commitments.]

We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings — this immediately and irreversibly deletes your portfolios, assets, transactions, chat history, and account record.

Depending on your location, you may have the right to:

• Access — download a full copy of your data from Settings → Data Export
• Rectification — correct any data directly within the app at any time
• Erasure — permanently delete your account and all data from Settings
• Portability — export your data in a structured JSON format
• Object / restrict processing — contact us using the details below

All traffic is encrypted in transit (TLS). You can optionally enable an end-to-end encrypted vault, where sensitive financial fields are encrypted in your browser with a passphrase only you know before being sent to our servers. Broker/pension login credentials, where stored, are encrypted at rest.

We use only the essential session cookies required for authentication (set by Clerk). We do not use advertising or third-party tracking cookies.

Poto is not directed at children under 16 and we do not knowingly collect data from them.

We may update this policy from time to time. Material changes will be notified via the app or by email before they take effect.

Questions about this policy or your data: [INSERT CONTACT EMAIL]