Privacy policy

Wealth Dashboard is an invite-only beta run by Despa Mihai Liviu PFA (Romania), the controller of your personal data. Questions or requests: despamihai66@gmail.com.

What we store

• Your email address, and sign-in records (time, IP address, browser) kept by our authentication provider.
• The portfolio data you enter or import: assets, holdings, deposits, recurring plans, contributions, and the daily value history the app computes from them.
• Your settings, such as the deposit interest tax rate.

We don't ask for bank or broker credentials, and we don't use analytics, advertising or tracking. The only cookie is the one that keeps you signed in; it's strictly necessary, so no consent banner is needed.

Why, and on what basis

• To provide the service you signed up for: showing and updating your portfolio (GDPR art. 6(1)(b), contract).
• To keep the service secure and prevent abuse, e.g. rate limits and sign-in logs (art. 6(1)(f), legitimate interest).

We never sell your data or use it for anything else, and we don't look at your portfolio except to fix a problem you report.

Who processes it

• Supabase: database, sign-in and sign-in emails. Data is stored in Frankfurt, Germany (EU).
• Vercel: hosts the web app; server functions run in Frankfurt. Vercel Inc. is a US company; any transfer outside the EU is covered by the EU Standard Contractual Clauses / EU–US Data Privacy Framework.

Market prices and exchange rates come from public sources (BNR, Yahoo Finance, CoinGecko). Those requests contain only ticker symbols and currencies, never anything about you or your holdings.

The mobile app ("on this phone" mode)

Your portfolio is stored only on your phone and never sent to us. To download exchange rates and prices, the app opens an anonymous session with Supabase that contains no personal data; the phone may also ask Yahoo Finance, CoinGecko and BNR directly for the prices of symbols you hold. If you connect TradeVille, your login is kept in the phone's secure storage and sent only to TradeVille. Backups you export are encrypted with your passphrase and go wherever you choose to save them.

How long

Your data stays until you delete your account (Settings → Delete account). Deletion is immediate and permanent: we don't keep separate backups. Our providers may keep technical logs for a short period under their own policies.

Your rights

You can access, correct, export (Settings → Download JSON backup) and delete your data at any time, and you can object to or ask us to restrict processing by writing to despamihai66@gmail.com. We reply within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).

Changes

If this policy changes in a way that matters, we'll tell you by email before it takes effect.