Introduction
Invesumo ("we", "our", "us") runs invesumo.com: investment backtests, stock and ETF analysis, a ledger for tracking what you own, and market data. This policy explains what personal information we collect when you use it, why, where it is kept and the choices you have. You can use most of Invesumo without an account; we collect more only when you sign in, join the Pro waiting list or send us a message.
Information We Collect
What we hold depends on how you use Invesumo:
Your account
When you sign in with Google or with an email address and password: your name, email address, profile photo (from Google), how you signed in, your plan (free or Pro), any Pro code you redeemed, and when you signed up and last signed in. Passwords are handled by our authentication provider; we never see or store them.
What you save while signed in
Your settings (language, region, currency, theme), your investor profile answers (age range, amount, time horizon, risk tolerance, goal, income stability), your last calculation and the last stock you viewed, your saved scenarios and portfolios, your watchlist, and your ledgers - the holdings, debts and transactions you enter. These are kept on our servers so they follow you between devices. They are not saved in your browser: while you are signed in they are held only in the open page.
Payments, if you subscribe to Pro
Pro is sold through Link, a payment service of Stripe, which is the seller (merchant of record) of your purchase. At checkout you give your payment details, billing name and billing address to Link; it uses them as a separate controller, under its own privacy policy, to take the payment, work out and pay the tax, issue your receipts and invoices, and prevent fraud. We never see or store your card number. When you open checkout we give Stripe your name, email address and an internal account number, so the purchase reaches your account. From Stripe we keep what we need to run your subscription: your plan, billing period and subscription status, Stripe's customer and subscription identifiers, the price, currency and dates of your subscription, and your billing country, which decides whether Pro can be sold to you.
The Pro waiting list
Your email address, name, language, an optional discount code, your IP address, your browser type and the page that sent you to us.
Feedback and support messages
Your message, and your name and email address if you give them; also your IP address, your browser type, and the approximate location (country and city) that your IP address points to.
Usage data, only with your consent
If you accept analytics, Google Analytics records anonymous usage: the pages you visit, without anything after the "?" in their address, and the features you use. It never receives your name, email address or account ID, your investor profile answers, or the amounts and other figures you enter. Its cookie holds only a random number and is deleted when you close your browser, so visits are not linked to each other; Google signals and ad personalization are off, and IP addresses are anonymized.
Notifications, if you turn them on
For each browser or phone you turn notifications on in: the push address and keys your browser gives us to reach it, a device name taken from the browser type (such as 'Chrome · Windows'), and when it was added and last used. Also your notification settings - which kinds you want, how often to remind you to update each ledger, whether to hide details, and your time zone and language so a reminder arrives on the right day in your language - and the notifications we have sent you, which you see in the bell at the top of the page.
Approximate location
Your country is estimated from your browser's time zone, on your device, so we can show your region's markets, language and prices. Nothing is sent anywhere to work it out, and the answer is kept on your device only.
Storage on your device
While you are signed in, nothing about you is saved in your browser: only your theme and language, a marker that a sign-in is open, your analytics choice, cached market data and, if you turn notifications on, a random identifier for this device. Without an account, your settings, investor profile answers, recent calculations, saved scenarios and portfolios, and the demo ledger are kept only on your device, and are removed from it when someone signs in or out on it.
Staying signed in
"Remember me" is on when you sign in: our authentication provider keeps a sign-in token in your browser so you stay signed in until you sign out. If you untick it, your sign-in ends when you close your browser and no token is kept.
How We Use Your Information
We use it to:
- Run your account and keep your settings, scenarios, ledgers, portfolios and watchlist in sync across your devices
- Show markets, currency and language for your region
- Use your investor profile to pick the recommendations and scenarios that fit you
- Send the emails you ask for or need: account verification, password reset, a welcome when you join the waiting list, an invitation when your Pro access is ready, a welcome when Pro starts, a reminder before your free Pro or a trial ends, and replies to your messages. Receipts and invoices for Pro come from Link
- Run your Pro subscription: start, renew or end your Pro as Stripe reports payments and cancellations, and keep the records the law requires
- Manage the Pro waiting list, trials and Pro codes
- Answer your feedback and support requests
- Send the notifications you turn on: a reminder the day before and on the day of an event for a stock in your ledgers or on your watchlist, and a reminder to update the values your ledger cannot price itself. They are worked out on our server from your saved ledgers and watchlist
- Prevent abuse, such as limiting repeated sign-ups and messages from the same IP address
- Understand how the site is used and improve it, when you allow analytics
Where Your Data Is Kept
Account data and everything you save while signed in are stored on Invesumo's servers with our cloud hosting provider. The website itself is served from a web hosting provider. Only our server can write to your account record - your browser cannot. While you are signed in, your data is held only in the open page and is not saved in your browser, so closing the page or signing out leaves nothing of it on the device; the copy on our servers stays and returns when you sign in again. We use HTTPS and access controls, but no method of transmission or storage is 100% secure.
Service Providers We Use
We do not sell your personal information. We share only what each service needs to work:
- Cloud hosting and authentication provider: runs our servers, signs you in and stores your account data
- Stripe and Link (payments): Link sells Pro as merchant of record and Stripe runs the payment platform; they receive your payment details, name, email address and billing address, and an internal account number. Link is a separate controller under its own privacy policy
- Google Analytics: anonymous usage data, only if you accept analytics
- IP location service: our server looks up the approximate location (country and city) of the IP address a feedback message is sent from
- Market data providers: our server sends them ticker symbols only, never anything about you
- Browser push services: deliver the notifications you turn on. Your browser's maker runs the one it uses (such as Google, Apple, Microsoft or Mozilla); it receives the notification's text and the page it opens. With 'Hide details' on, that text names nothing from your ledgers
- AI model provider: writes Samurai Analysis reports from market data only (see below)
- Our own mail server (invesumo.com): sends account, waiting list and reply emails
AI-Written Reports
Samurai Analysis reports are written by an AI model from market data about the company - prices, financial statements, analyst estimates and technical indicators. Your name, email address, investor profile and ledgers are never sent to the model. The recommendation shown for your profile is calculated on our server, and a report is stored without recording who asked for it.
How Long We Keep It
Account data, settings, scenarios, ledgers, portfolios and your watchlist are kept for as long as your account exists. A ledger, scenario or portfolio you delete is deleted from our servers too. Payment and invoice records are kept for as long as tax and accounting laws require, even after an account is deleted. Waiting list entries and feedback messages are kept until we no longer need them or you ask us to delete them. When you delete your account, your waiting list entry is deleted, and your feedback messages and any Pro codes you used are kept without your name, email or IP address. Notifications we send stay in your list for 90 days and are then deleted; Clear all removes them from the list at once. A device is kept until you remove it, turn notifications off on it, or its browser stops accepting them. Analytics data is kept according to Google Analytics' retention settings.
Your Rights and Choices
You can:
- Access: ask for a copy of the personal data we hold about you
- Export: download a ledger as a spreadsheet from the ledger, and your settings and saved scenarios from Profile & Settings
- Correct: change your settings and investor profile at any time in Profile & Settings
- Delete: delete individual ledgers and scenarios yourself, or delete your account and everything stored with it from Settings, under Data management
- Object or withdraw consent: decline analytics, or withdraw your consent at any time in Settings under Privacy ("Analytics consent") or with "Manage Cookie Settings" below. Analytics stops at once and its cookie is deleted
- Notifications: turn each kind on or off, hide details on the lock screen, and remove any device, at any time in Settings under Notifications. You can also block them in your browser's site settings
- To make a request, use the Support form at the bottom of every page
Links to Other Sites
Invesumo links to other sites, such as our social media pages and data sources. We are not responsible for their privacy practices; please read their policies.
Children's Privacy
Invesumo is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.
Changes to This Policy
We will update this policy when what we collect or how we use it changes, and post the new version here with a new "Last updated" date. Continuing to use Invesumo after a change means you accept the updated policy.
Contact Us
For questions about this policy or your data, or to make a request, use the Support form at the bottom of every page and leave an email address we can reply to.