Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains what data Finovela collects, how we use it, and the choices you have. We respect your privacy, we never sell your personal data, and we never take custody of your funds. Turkish users should also read our KVKK Aydınlatma Metni.

1. Who We Are

Finovela operates this platform and is the data controller for the personal data described here. You can reach us at privacy@finovela.com.

2. Data We Collect

Account data: name, email, and authentication details, handled by our identity provider (Clerk).
Profile data: the risk profile, goals, and preferences you provide during onboarding.
Usage data: portfolios, watchlists, alerts, chats, automations, and settings you create in the app.
Connection metadata: which exchanges/brokers you connect and the scope of access you grant. API keys are stored encrypted and used only to perform the actions you configure.
Technical data: device, browser, IP address, and log data needed for security and to operate the service.
Payment data: processed by our payment provider; we do not store full card numbers.

3. How We Use Your Data

to provide, maintain, and improve the platform and its features;
to authenticate you and keep your account and connections secure;
to power AI features (your prompts and relevant context are sent to our AI provider to generate responses);
to process subscriptions, credits, and payments;
to communicate service, security, and (with consent) marketing messages;
to comply with legal obligations and prevent fraud or abuse.

4. Legal Bases (GDPR/KVKK)

Where applicable, we process data to perform our contract with you, based on your consent (e.g. marketing), to comply with legal obligations, and for our legitimate interests in operating and securing the service. You may withdraw consent at any time.

5. Service Providers We Share With

We share data only with providers that help us run the service, under contract, including:

authentication (Clerk);
hosting and database infrastructure;
AI providers (e.g. Anthropic) to generate responses;
market-data and news providers;
payment processors;
the exchanges/brokers you choose to connect.

We do not sell your personal data to anyone.

6. API Keys & Connected Accounts

Credentials for connected accounts are encrypted at rest and used solely to execute the actions you configure. We recommend granting trade-only access with withdrawals disabled. You can revoke a connection at any time, which removes our stored access for that account.

7. Data Retention

We keep your data while your account is active and as needed to provide the service. When you delete your account, we delete or anonymize your personal data, except where we must retain certain records to meet legal, accounting, or security obligations.

8. International Transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your data, and to object to processing or withdraw consent. You can manage your profile in-app, delete your account from settings, or contact privacy@finovela.com to exercise any right.

10. Security

We use industry-standard measures including encryption, access controls, and rate limiting. No system is perfectly secure; please use a strong password and enable multi-factor authentication.

11. Children

Finovela is not intended for anyone under 18, and we do not knowingly collect data from children.

12. Changes & Contact

We may update this policy and will notify you of material changes. Questions? Contact privacy@finovela.com. See also our Cookie Policy.