Privacy Policy

When you sign in with Google, we receive your name, email address, and profile picture from Google's identity service. We use this only to identify your account and personalise the interface — we never see or store your Google password.

Sign-in records. We keep a record of your Google account ID, name, email, picture, and the timestamps of your first and most recent sign-in, for as long as your account is active. This exists purely for our own operational visibility (knowing the product is being used, troubleshooting access issues) — we do not use it for advertising or share it with third parties.

Your portfolio, watchlist, and chat history stay on your device.Holdings you add, stocks you watch, and conversations with the AI assistant are stored in your browser's local storage — they are never transmitted to or stored on our servers. Clearing your browser data or using a different device/browser means this information does not carry over, by design.

What you ask the AI. Questions you send to the AI assistant, and the deterministic market data needed to answer them, are sent to our AI providers (Google Gemini and/or Cloudflare Workers AI) to generate a response. These providers process the request to return an answer; we do not use your questions to train any model, and we do not store a transcript of your conversations on our servers — only your browser does, per the previous point.

• No payment or financial account information — InvestSense doesn't process payments or connect to your broker.
• No government ID, address, or phone number.
• No advertising trackers or third-party analytics pixels.

• Google — for sign-in (OAuth) and, optionally, AI responses (Gemini).
• Cloudflare — hosts the application, our database, and (optionally) AI responses (Workers AI). Cloudflare sees standard web request metadata (like your IP address) as part of normal hosting.
• Yahoo Finance and Finnhub — supply the market price and news data shown in the app. These requests are made from our server, not your browser, so these providers do not receive your personal information.

Your session is authenticated with a signed, HttpOnly cookie that isn't readable by page scripts. Data in transit is encrypted (HTTPS). Sign-in records are stored in an access-controlled database; only account administrators can view the sign-in list, and that view is restricted to an explicit allow-list, not open to all staff by default.

You can sign out at any time, which ends your session immediately. Since your portfolio, watchlist, and chat history live in your browser, clearing your browser's site data for InvestSense removes them completely. To request deletion of your sign-in record from our database, contact us — see the Company page.

If this policy changes materially, we'll update this page and adjust the date below. Continued use of InvestSense after a change means you accept the updated policy.

Last updated: 8 August 2026