Privacy Policy

Faithful Invest is run by Nicolò Gontero, Giaveno (TO), Italy, who is the data controller for the personal data described here. You can reach him at the address in section 8.

• Account: handled by Clerk. We receive your email address and name for authentication.
• Usage: the tickers you check and your portfolio transactions are stored in our Supabase database.
• Visit counts: we count page visits with Vercel Web Analytics. It uses no cookies and stores no personal data; it records the page, the referring site, the country and the device type.
• Daily limit: if you check stocks without signing in, we store your IP address with a count of today's checks, only to limit free checks.
• Imported files: a file you import is read on your device. Only the purchases, sales and fees in it are sent to us and stored with your portfolio; the file itself is never uploaded or kept. To find the right listing, the names and ISIN codes of the securities in it are looked up on Yahoo Finance.
• AI processing: none. Screening results don’t use AI, and no information about you or your portfolio is sent to an AI provider. If this changes, we will update this policy first.
• Emails: if you sign up, your address is kept by our email provider, Resend, only to send the monthly email. Every email has an unsubscribe link.

For users in the EU or UK, we process your data under:

• Contract: to deliver the service you signed up for.
• Consent: for optional emails.
• Legitimate interests: anonymous visit counts to improve the site.

We use only the essential cookies needed to keep you signed in, so there is no cookie banner.

Your portfolio and screening data are stored by Supabase in Frankfurt, Germany. Clerk (sign-in), Vercel (hosting and visit counts) and Resend (emails) are based in the United States. Transfers to them rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as set out in each provider's data processing terms.

• Account, portfolio and screening history: until you delete your account.
• Email address for the monthly email: until you unsubscribe.
• IP address of a visitor who isn't signed in: 7 days.
• Visit counts: kept only as totals, with no personal data.

Under GDPR you have the right to access, correct, delete or export your data, and to object to or restrict how it is used. You can delete your account yourself from the Settings page (your profile picture, then Manage account); this removes your account, portfolio and saved checks from our database. For anything else, email us (section 8). Under CCPA, California residents have the same rights to access and delete.

If you think we have mishandled your data, you can complain to Italy's data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it), or to the data protection authority in the country where you live.

We use Supabase Row Level Security and TLS in transit. No system is perfectly secure, but we apply the standard protections you would expect from any modern web application.

For privacy questions, email faithful.invest.legal@gmail.com.