Data Usage Policy

When you connect a broker account, UseMoney accesses your portfolio data through your broker's official API. This includes:

• Holdings - current stock and ETF positions, average prices, quantities
• Positions - open F&O and intraday positions
• Trade history - buy/sell transactions for P&L calculation and FIFO pairing
• Mutual fund holdings - NAV, units, folio details (where supported by the broker API)
• Account profile - broker user ID, name, and email for account identification

We also collect standard usage data: pages visited, features used, device type, and IP address for analytics and security.

• Broker credentials are encrypted at rest using AES-256-GCM with per-user encryption keys. We never store your broker password - only the API access token issued by your broker's OAuth flow.
• Portfolio data (holdings, trades, positions) is stored in MongoDB Atlas with encryption at rest and in transit (TLS 1.2+).
• Market data cache (quotes, historical prices) is stored in Redis with automatic expiration and is not personally identifiable.
• AI chat conversations are stored to provide conversation history. They are not used to train AI models and can be deleted at any time.

Your data is used exclusively to provide the UseMoney platform features:

• Portfolio dashboard - aggregating holdings across multiple brokers into a single view
• P&L analytics - FIFO trade pairing, realized/unrealized gains, tax analysis
• AI-powered insights - portfolio analysis, research, and roast features use your holdings data as context for personalized recommendations
• Risk analysis - concentration metrics, VaR calculations, and drawdown analysis
• Paper trading - simulated positions are stored separately and never affect real broker data

• We never sell your data to third parties - not brokers, not advertisers, not data aggregators
• We never place trades on your behalf - UseMoney is read-only access to your broker account
• We never use your data to train AI models - your conversations and portfolio data are not included in any training dataset
• We never share identifiable data with other users - your portfolio is visible only to you

UseMoney integrates with the following services to operate:

• Clerk - authentication and user management
• Google Cloud Platform - infrastructure, Pub/Sub messaging, Cloud Run
• MongoDB Atlas - primary database
• Vercel - web application hosting
• Google Gemini - AI features (portfolio analysis, research, chat)
• PostHog - privacy-friendly product analytics
• Broker APIs (Zerodha, Upstox, Angel One, Groww, Dhan, Fyers, Interactive Brokers) - read-only portfolio data access

See our Subprocessors page for the full list.

We share data only with the third-party services listed above, and only to the extent necessary to provide the platform. Specifically:

• Broker APIs receive your access token to fetch your portfolio data - no other data is sent to brokers
• Google Gemini receives portfolio context (anonymized symbol + quantity data) during AI chat sessions - never your name, email, or broker credentials
• PostHog receives anonymized usage events - no portfolio data, no PII

• Broker connections - you can disconnect a broker at any time from the Brokers page. Disconnecting removes the encrypted credentials immediately.
• Portfolio data - retained for as long as your account is active. When you delete your account, all associated data is permanently deleted within 30 days.
• Market data cache - automatically expires (quotes: 5 minutes, historical bars: 1 hour).
• AI chat history - you can delete individual conversations or all chat history from the settings page.

We may update this Data Usage Policy from time to time. When we make significant changes, we'll notify you via email or an in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

Questions about how we handle your data? Contact us at privacy@usemoney.ai