Privacy Policy

This policy explains what data PrinceJohn (“we”, “us”) collects, why we collect it, and the choices you have. The short version: we collect the minimum needed to run a portfolio-intelligence service, brokerage access is read-only, we never sell your data, and you can delete your account — and the data that goes with it — at any time.

• Account data. Name, email address, and avatar from the sign-in provider you choose (Google, Microsoft, or email magic link).
• Brokerage data via Plaid. When you connect a brokerage, we receive read-only data: accounts, positions, balances, and transactions. We never see or store your brokerage username or password — those go only to Plaid.
• Product activity. How you use the app (pages viewed, features used) and choices you make on recommendations (accept, dismiss, snooze), plus messages you send to the portfolio chat.
• Technical data. Logs, device/browser information, and error reports needed to keep the Service secure and working.

• To sync and display your portfolio, and to generate analysis, recommendations, alerts, and chat answers about it.
• To deliver notifications you enable, on the web and via the Telegram bot if you link it.
• To operate, secure, debug, and improve the Service.
• To communicate with you about the Service (e.g. magic-link sign-in emails).

We do not sell your personal data, and we do not use it for third-party advertising.

Generating analysis and answering portfolio questions requires sending relevant data — such as positions, performance figures, market context, and your chat messages — to Anthropic’s API for processing by its AI models under Anthropic’s commercial API terms. This processing is what produces the Service’s recommendations and chat responses; the AI has read-only context and no ability to act on your accounts.

We share data only with the service providers needed to run PrinceJohn:

• Plaid — connects to your brokerage and supplies read-only account data.
• Anthropic — AI processing that generates analysis, recommendations, and chat answers.
• PostHog — product analytics, so we can understand how the app is used.
• Sentry — error monitoring and crash reporting.
• Resend — transactional email, such as magic-link sign-in messages.

Each processor receives only what it needs for its function, under its own contractual and privacy obligations. We may also disclose data if required by law.

We keep your data while your account is active. When you delete your account (Settings → Account → Delete account), we delete the personal data associated with it, including your synced brokerage data and Plaid connection. Limited records may persist for a short period in encrypted backups and logs before they age out, or where retention is required by law.

• Data is encrypted in transit and at rest.
• Brokerage access tokens are stored server-side and scoped read-only — the Service has no ability to transact.
• Access to production systems is restricted and logged.

No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise deletion directly in Settings, and any of these rights by contacting us at the address below.

The Service is not directed to anyone under 18, and we do not knowingly collect data from them.

We may update this policy from time to time. If a change is material, we will notify you before it takes effect. The “Last updated” date above always reflects the current version.

Privacy questions or requests: hello@princejohn.app.