Privacy Policy

Introduction#

This Privacy Policy explains what information Livefolio collects, how we use it, and the choices you have. It applies to livefol.io and the Livefolio app, and complements our Terms of Service. If you don't agree with how we handle your information, please don't use the Service.

Information we collect#

What you give us#

• Account info: email, optional name and profile details.
• Strategies you create, including names, descriptions, rules, and allocations.
• Holdings you enter into portfolio tools (such as the rebalance card on strategy pages) so we can compute and improve recommended trades. We store the ticker symbols and share counts you type — never linked to a real brokerage account unless you explicitly connect one.
• Support correspondence (when you email us).

Authentication#

If you sign in with an OAuth provider (e.g., Google) through Supabase, we receive your email address and basic profile information from that provider.

Billing#

If you subscribe to a paid plan, our processor (Autumn, which uses Stripe) handles your payment. We receive your plan, subscription status, and billing identifiers — but we never see your full card number or other sensitive payment details.

Brokerage connections (optional)#

If you connect a broker through SnapTrade, we store a connection token issued by SnapTrade so the connection persists. We do not store your broker username or password. When you view your holdings or place an order, we fetch the data on demand and don't keep a long-term copy of your positions beyond what's needed to show them to you.

Automatic#

We automatically collect basic usage data: IP address, device and browser type, pages visited, referrer, and high-level analytics events through Vercel Analytics. Vercel Analytics is privacy-friendly and does not use third-party advertising cookies.

Cookies#

We use a single essential session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

How we use your information#

We use your information to:

• Provide, maintain, and improve the Service (legal basis: contract).
• Authenticate you and keep your account secure (legal basis: contract; legitimate interest).
• Process payments and manage subscriptions (legal basis: contract).
• Send transactional and important service emails (legal basis: contract; legitimate interest).
• Debug, monitor reliability, and prevent abuse (legal basis: legitimate interest).
• Comply with legal obligations (legal basis: legal obligation).

We don't use your information for advertising. We don't sell your personal data.

How we share it#

We share data only with vendors that help us run the Service:

• Supabase — authentication and database hosting.
• Autumn and Stripe — billing.
• SnapTrade — brokerage connectivity (only if you opt in).
• Vercel — hosting and privacy-friendly analytics.
• Email delivery provider — to send you transactional email.

We may also disclose information when required by law, in response to valid legal process, or to a successor entity in the event of a merger or acquisition.

International data transfers#

Our vendors may store and process data in the United States, the European Union, or other regions. For users in the EU and UK, transfers outside your region rely on Standard Contractual Clauses or equivalent safeguards where applicable.

Data retention#

We keep account data for as long as your account is active. If you delete your account, we'll remove your personal data within 30 days, except for records we're legally required to retain (for example, tax or audit records). Logs and analytics data are typically retained for around 90 days.

Your rights#

Depending on where you live, you may have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Receive a copy in portable form.
• Restrict or object to certain processing.
• Withdraw consent (where consent is the legal basis).

To exercise any of these rights, email support@livefol.io. We'll respond within 30 days. We won't discriminate against you for exercising these rights.

Security#

We use TLS in transit, encryption at rest provided by Supabase, hashed passwords managed by Supabase Auth, and least-privilege access for our team. No system can be made 100% secure, and we can't promise absolute security — but we work hard to protect your data and we'll notify you and any required regulators if a breach affecting your data occurs.

Children#

The Service is not directed to anyone under 18. We don't knowingly collect personal data from children. If you believe a child has signed up, email us and we'll delete the account.

Do Not Track#

Different browsers send "Do Not Track" signals in inconsistent ways. There's no industry consensus on how to honor them, so we don't currently respond to DNT. We don't use ad-tracking cookies regardless.

California privacy notice#

If you live in California, you have rights under the CCPA/CPRA, including:

• The right to know what personal information we collect.
• The right to delete your information.
• The right to correct inaccurate information.
• The right to opt out of "sale" or "sharing" — though Livefolio does not sell or share personal information for cross-context behavioral advertising.
• The right to non-discrimination for exercising these rights.

We collect the following CCPA categories: identifiers, customer records, internet/electronic activity, and (if you connect a broker) financial information. We do not sell this data.

California "Shine the Light" law: We do not share personal information with third parties for their direct marketing purposes.

To exercise California rights, email support@livefol.io.

EU and UK users#

For users in the European Union or United Kingdom, the data controller is Livefolio. We don't currently appoint a Data Protection Officer or EU representative; we'll do so if and when our scale or activities require it. You can lodge a complaint with your local data protection authority — though we'd appreciate the chance to address concerns first by emailing support@livefol.io.

Changes to this policy#

We may update this policy. Material changes will be announced in-app or by email. Continuing to use the Service after a change means you accept the updated policy.

Contact#

Privacy questions or rights requests? Email support@livefol.io.