Privacy Policy

We collect only what we need to run the service:

• Account information — your name, email address, and authentication identifiers, handled through our authentication provider (Clerk) when you sign up or sign in.
• Profile & preferences — your country/region (used to set your base reporting currency) and your language preference.
• Brokerage & account data — when you connect a brokerage, we use SnapTrade and/or Plaid to obtain read-only access to your accounts, holdings, positions and balances. We never receive your brokerage login credentials, and we cannot place trades or move money.
• Portfolio data you enter — tickers, units and accounts you add manually.
• Billing information — if you subscribe, payments are processed by Stripe. We store a customer identifier and your subscription status; we do not store your full card number.
• Technical & usage data — limited log and device data needed for security, debugging and to keep the service reliable.

• Provide the core service: aggregate your accounts, run the ETF X-Ray look-through, and compute your Sensefolio score and exposure.
• Create and secure your account, and authenticate you.
• Process subscriptions, trials and billing.
• Maintain, troubleshoot and improve the service, and protect against fraud and abuse.
• Communicate with you about your account, security, and important changes.
• Comply with legal and regulatory obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

We collect, use and disclose your personal information with your consent. You provide consent when you create an account, connect a brokerage, or enter portfolio data. You can withdraw consent at any time by disconnecting a brokerage, deleting data, or closing your account, subject to legal and contractual limits.

We share personal information only with service providers who process it on our behalf, under contract, and only as needed to operate SenseFolio:

• Clerk — authentication and account management.
• Neon — managed database (our system of record).
• Railway — backend/API hosting.
• Vercel — web application hosting.
• SnapTrade and Plaid — read-only brokerage connectivity.
• Stripe — subscription payments.
• Market-data providers — market and fundamentals data used to price holdings; ESG is derived from public SEC filings to compute the Sensefolio score.

We may also disclose information where required by law, to enforce our Terms, or to protect the rights, safety and security of our users or the public. If SenseFolio is involved in a merger, acquisition or asset sale, we will notify you before your information becomes subject to a different privacy policy.

We aim to store your core personal data in Canada where feasible. Some of our service providers (such as hosting, authentication and payments) may process or store data in the United States or other countries. Where information is processed outside Canada, it may be accessible to courts, law enforcement and authorities in those jurisdictions.

• Brokerage connection secrets are encrypted at rest using AES-256 before storage.
• Data is transmitted over encrypted connections (TLS).
• Access to production data is restricted on a need-to-know basis.
• Brokerage access is read-only — SenseFolio cannot trade or move funds.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

We keep your personal information for as long as your account is active or as needed to provide the service, and afterwards only as required to meet legal, accounting or security obligations. When you close your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law.

Subject to applicable law, you can:

• Access the personal information we hold about you and request a copy.
• Correct inaccurate or incomplete information.
• Disconnect a brokerage at any time, which stops further data access.
• Delete manually-entered portfolios, or close your account and request deletion of your data.
• Withdraw consent for optional processing.

To exercise these rights, contact us at the address below. We may need to verify your identity before responding.

We use a small number of essential cookies — for example, to keep you signed in and to remember your language preference (the sl_locale cookie). We do not use third-party advertising cookies.

SenseFolio is intended for adults of the age of majority in their province, state or territory. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it.

Connecting a brokerage means you also interact with SnapTrade, Plaid and your broker, each of which has its own privacy policy. We are not responsible for the privacy practices of third parties; please review their policies.

We may update this policy as the service evolves or the law changes. We will revise the “Last updated” date above and, for material changes, provide additional notice. Your continued use of SenseFolio after changes take effect constitutes acceptance.

For privacy questions or to exercise your rights, contact our privacy contact at privacy@senseleaf.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or the Commission d’accès à l’information du Québec.