Privacy Policy

Your Google account basics when you sign in — name, email address, and profile picture. The portfolio data you enter yourself: accounts, buy and sell transactions, and the settings you choose. If you upgrade, we store your billing status from Stripe.

Broker credentials — SimplyPortfolio never connects to your broker or bank, by design. Card details — payments are processed by Stripe, and card numbers never touch our servers.

Only to run the product: computing your portfolio values, cost basis and P&L, and emailing you transactional messages like receipts. We don’t show ads, and we never sell, rent, or share your data with data brokers.

If you create a personal access token and connect an MCP-compatible chat agent, that agent can request the portfolio data and actions exposed by the SimplyPortfolio MCP tools. We store only a hash of the access token, its label, creation time, last-used time, and revocation status. Your agent provider processes whatever portfolio information you ask it to retrieve, subject to that provider’s own privacy policy. You can revoke a token immediately from Settings.

One session cookie keeps you signed in. There are no third-party advertising or cross-site tracking cookies.

We rely on a small set of providers to operate: Google (sign-in), Stripe (payments), Resend (transactional email), and market data providers (price lookups are made by ticker symbol and are not tied to your identity).

Export everything to CSV at any time, on the free plan too. Delete your account from Settings whenever you like — your data is removed. Nothing is held hostage.

If this policy changes, the update appears on this page with a new “last updated” date.