Privacy Policy
1. Information We Collect
We collect information you provide directly: your email address and password (or Google OAuth token) when you create an account, and portfolio data (bond positions, quantities, prices, notes) you enter into the Platform. We also collect limited usage data such as session tokens and authentication state. We do not collect payment card data or government-issued identification.
2. How We Use Your Data
Your data is used solely to operate the Platform: to authenticate your session, save and restore your portfolio across devices, and deliver AI-generated analysis on bonds you select. We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your portfolio data to train AI models.
3. Data Sent to Third-Party AI APIs
When you use AI-powered features (bond analysis, NLP search, portfolio commentary), the Platform sends bond identifiers, financial metrics, and your query text to third-party large language model providers. These requests are proxied through our server; your account credentials are never transmitted to these providers. Third-party AI providers may retain inputs for abuse-prevention and safety purposes in accordance with their own terms. We recommend reviewing the privacy policies of any AI service you interact with if you have concerns about the data you submit.
4. Data Storage
Portfolio save slots and account records are stored in a third-party cloud database service. Data is encrypted in transit (TLS) and at rest. Our storage provider processes data as a data processor on our behalf, under a Data Processing Agreement. For users in the European Economic Area or United Kingdom, standard contractual clauses govern international data transfers. We also use third-party infrastructure providers for error monitoring and service reliability; these providers may incidentally receive limited account information, such as your email address, solely to help us diagnose and resolve technical issues.
5. localStorage and Cookies
The Platform stores your account preferences, saved bonds, portfolio data, and authenticated session in your browser's localStorage. No cookies are set — advertising, tracking, or otherwise. We do not use third-party analytics, advertising networks, or cookie-based tracking.
6. Data Retention
Account data and saved portfolios are retained for as long as your account is active. If you delete your account, your account record and all saved portfolio data are deleted from our active database immediately as part of that request. Residual copies may persist briefly in routine infrastructure backups until those backups cycle out, in accordance with our database provider's standard backup retention schedule. localStorage data exists only in your browser and is removed when you clear your browser storage.
7. Your Rights and Data Deletion
Depending on your jurisdiction, you may have rights to access, correct, port, restrict processing of, or delete your personal data. Users in the EU/EEA have rights under the General Data Protection Regulation (GDPR). Users in Singapore have rights under the Personal Data Protection Act (PDPA). California residents have rights under the California Consumer Privacy Act (CCPA). To exercise any of these rights — including requesting deletion of your account and all associated data — contact us at the address below.
8. Security
We implement reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed credentials, and access controls on our database. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the Platform or by email. Continued use of the Platform following any update constitutes your acceptance of the revised policy. The effective date at the top of this document reflects the date of the most recent revision.
10. Contact
For privacy-related enquiries, data deletion requests, or to exercise your rights, please contact us at contact@tryopenbond.com.