Privacy Policy

Aurvyl is a portfolio risk and analysis tool. It reads investment holdings from a brokerage account you connect and presents analysis of them. It does not provide financial advice, does not hold or move money, and cannot place trades on a live brokerage account.

Account information. When you create an account we receive your email address, and your name and profile image if your sign-in provider supplies them. Sign-in is handled by Clerk. If you use Sign in with Apple you may choose to hide your email address, and Aurvyl works normally if you do.

Brokerage credentials. If you connect a Trading 212 account, you supply an API key that you generate in Trading 212’s own settings. We store it encrypted and use it only to read your account from Trading 212 on your behalf. You can disconnect at any time, and you can revoke the key from inside Trading 212 independently of us.

Portfolio data. Holdings, positions, orders, transactions, dividends and account summaries read from your connected brokerage account, together with analysis we derive from them, such as risk metrics, projections and portfolio snapshots over time.

Content you create. Goals, decision notes, alert settings and display preferences. Decision notes and several other free-text fields are encrypted at rest.

Device information. If you enable notifications we store a push notification token for your device. We keep technical logs needed to operate and secure the service.

We do not collect payment card details. We do not use advertising identifiers and we do not track you across other apps or websites.

To operate the service: authenticating you, reading your brokerage account, computing the analysis you asked for, sending notifications you enabled, and keeping the service secure and working.

We do not sell your personal information, and we do not share it for advertising.

Some features generate written summaries and answer questions about your portfolio. These are optional and are turned off until you explicitly agree to them.

When you use them, information about your portfolio is sent to Vercel AI Gateway, which routes it to Anthropic, to generate a response. We do not send your brokerage API key, your password, or your payment details.

You can grant or withdraw this permission at any time in Settings. Withdrawing it stops further data being sent and turns the features off. It cannot retrieve data already processed.

Generated output can be wrong or incomplete. It is informational and is not financial advice.

We use a small number of providers to run the service. They process data on our behalf, under contract, for the purposes described here:

• Clerk, authentication and account management.
• Trading 212, the brokerage you connect. We read from it using the key you supply. Aurvyl is independent and is not affiliated with, endorsed by, or partnered with Trading 212.
• MongoDB Atlas, database storage.
• Modal, application hosting and background processing.
• Vercel, web hosting, and the AI Gateway described above.
• Anthropic, the AI models behind the optional features described above.
• Apple, delivery of push notifications to your device.

We may disclose information if we are legally required to, or where it is necessary to protect the service, our users or our rights.

Your brokerage API key and a number of other sensitive fields are encrypted at rest. Traffic between the app and our servers is encrypted in transit. No system is perfectly secure, and we cannot guarantee absolute security.

You can reduce your own exposure by generating a read-only Trading 212 key where you do not need more, and by restricting the key to specific IP addresses in Trading 212’s settings.

We keep your data while your account exists. You can delete your account from inside the app, which removes your account, your stored brokerage credential, and the portfolio data and content associated with it. Backups and logs may retain some information for a limited period afterwards.

Depending on where you live you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent you have given. To exercise any of these, contact us at the address below.

If you are in the UK or the EEA and believe we have not handled your data properly, you may complain to your local supervisory authority.

Aurvyl is not intended for children, and we do not knowingly collect information from anyone under 18.

If we change this policy materially we will update the version above and, where the change affects how your data is shared, ask for your agreement again.

Questions, requests or complaints: hello@aurvyl.com