Skip to main content
← Back to home

Privacy Policy

Last updated: August 7, 2026

1. Information We Collect

Information you provide. When you create an account we collect your email address, display name, and username. You may optionally add a profile picture and a preferred display currency. As you use the app, we store the portfolio data you enter — your holdings (tickers, share counts, average costs, purchase dates), brokerage accounts (names, types, institutions), options positions, realized sale history, and daily portfolio value snapshots.

Information collected automatically. For security, fraud prevention, and debugging, our servers automatically log technical data with each request: your IP address, your browser/device user-agent string, the endpoint accessed, response status, and timestamps. This is kept in a security audit log (see Data Retention below).

Screenshots you upload. If you use the AI scan feature, the brokerage screenshot you upload is processed to extract holdings and then discarded — we do not store the image after extraction.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the portfolio tracking service
  • Authenticate your identity and secure your account
  • Fetch live stock prices and company data for your holdings
  • Process brokerage screenshots when you use the AI scan feature
  • Detect, prevent, and investigate abuse, fraud, and security incidents

We do not sell your personal information, and we do not use it for advertising or share it with advertisers.

3. Third-Party Services (Sub-Processors)

We rely on third-party providers to operate Prowis. Each processes only the data needed for its function, and the complete, current list — what each one does, what it receives, and where it is located — is maintained at /sub-processors.

To give a sense of the scope: Supabase (Canada) holds your account credentials and all portfolio data; Vercel hosts the application and processes web requests including IP addresses; and Anthropic receives brokerage screenshots when you use the AI scan feature, which are not retained afterward. Several providers process limited technical data in the United States.

Some of these are services our servers call. Others are resources your browser loads directly — an embedded chart, a company logo, a profile image — which means those providers see your IP address and browser without Prowis sending anything. Both kinds are listed.

4. Data Retention

Your account and portfolio data is retained for as long as your account is active. If you delete your account, all associated data — holdings, accounts, options, sale history, and snapshots — is permanently removed.

Security audit logs, including IP addresses, are automatically deleted after 90 days. This applies whether or not your account is still open: if you delete your account, its security log entries are not removed immediately, but age out on the same 90-day schedule.

5. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security policies on our database, and secure authentication via Supabase Auth. API keys are stored server-side and never exposed to the client.

6. Your Rights

Depending on where you live, you have the right to:

  • Access and export your portfolio data at any time (Profile → Export)
  • Update or correct your personal information
  • Delete your account and all associated data (Profile → Delete account)
  • Withdraw consent to optional processing

We will not discriminate against you for exercising any of these rights. If you have a concern we cannot resolve, you may lodge a complaint with the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or your local data-protection authority.

7. Cookies

We use essential cookies only — for authentication session management. We do not use tracking cookies or third-party analytics cookies.

8. Where Your Data Is Stored

Your account and portfolio data is stored in Canada. Certain sub-processors listed above may process limited technical data (such as error reports or request metadata) in the United States.

9. Children's Privacy

Prowis is not intended for children. As set out in our Terms of Service, you must be the age of majority in your jurisdiction (at least 18 or 19 depending on your province or state) to create an account.

We do not knowingly collect personal information from anyone under that age. If we become aware that we have collected personal information from someone below it, we will delete that account and its associated data. If you believe a minor has provided us with personal information, contact us at support@prowis.ca and we will act on it.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.

11. Contact

If you have questions about this privacy policy or wish to exercise your rights, contact us at support@prowis.ca.

Privacy Policy | Prowis