Confirmed Consent Required

Here is the process:

1. When you submit your username and password, that data is encrypted in transit via HTTPS before it ever reaches us.
   
   
2. Your password is stored securely. Once your information reaches our server, the password is hashed specifically to your account, and the plaintext is discarded and never stored (HTTPS is what prevents it from being intercepted along the way).
   
   Important: if a site were to hash passwords in your browser (ours does not) and it sends the hash instead of the password, that hash effectively becomes the password — an attacker who steals it from a database or intercepts it can replay it directly, defeating the point of hashing. We hash on our server, not in your browser, precisely to avoid that problem.
   
   
3. Your Brokerage Account. We cannot access your account. If you choose to link your brokerage account to us, we use a third-party service that connects you to your account. Any data that we pull from your brokerage is read-only and available to you through our service only with your consent to share your brokerage information with our service.
   
   Full transparency: although this third-party provider does have the ability to execute trades on your behalf, our service does not make use of that capability, and there is no mechanism through our services to enable that capability.
   
   Put simply, we do not offer trading and there is no code on our servers that enables it. We only pull the information needed from your brokerage to provide our services, and some of that data must be stored in our database to do so.
   
   
4. How Your Data is Stored. Almost every online service you subscribe to stores your data in a shared database. This means there are rows of data from multiple users stored in the same database tables — that's normal and expected. Your account cannot retrieve another user's data, and it is not possible for someone to access your data by manipulating the URL of a page on our site.
   
   We collect and store the information needed to run the service: your account and contact details, the holdings, purchases, and dividend data you enter or link, and basic technical information such as your IP address, which we use for account security and fraud prevention.
   
   We do not sell your data to third parties, and we do not share it with third parties for their own marketing purposes.
   
   If you'd like your data deleted, you can request that at any time from your account settings.
   
   
5. Payments. If you subscribe to a paid plan, your payment is processed by Stripe, a PCI-compliant payment processor. We never see or store your full card number — Stripe handles that, and only shares limited, non-sensitive billing information back with us (such as the last four digits of your card and your subscription status).
   
   
6. Analytics. Like most websites, we use tools like Google Analytics to understand how people are using our system. Our use of this service helps us provide you with higher-quality services.
   Our only intent here is to give you transparency into the fact that we use these kinds of services, and why (as most websites do).
   
   More information about this is outlined and maintained in our policies section.
   
   
7. Email. We will send you a confirmation email when you sign up or change your email address. You must confirm this in order to use our service. This is an important security measure to ensure (1) someone else is not attempting to act on your behalf, and (2) we can reach you with information critical to your account.
   
   We do not — and will not — abuse that privilege by marketing to you through required account emails, or by providing your information to third parties for marketing purposes. If you opt in to our newsletter separately, you can unsubscribe from it at any time; declining it has no effect on your ability to use the service.
   
   
8. Not Investment Advice. Our service is a tool for tracking and organizing your own portfolio and dividend data. Nothing on this site constitutes personalized investment, financial, tax, or legal advice, and we are not a registered investment advisor. Decisions about your investments are yours alone.
   
   
9. Confirmed Consent. Finally, accessing our service requires confirmed consent. This means you have confirmed your email with us, and you have confirmed your consent to this page from the "Your Consent" section of your account Settings — you can review or withdraw that consent there at any time.
   
   The full extent of our agreement is contained in our policy pages (linked above); this page exists to give you a plain-language summary of how we protect your data (we use these same practices ourselves).