Introduction
Invesumo ("we", "our", "us") runs invesumo.com: investment backtests, stock and ETF analysis, a ledger for tracking what you own, and market data. This policy explains what personal information we collect when you use it, why, where it is kept and the choices you have. You can use most of Invesumo without an account; we collect more only when you sign in, join the Pro waiting list or send us a message.
Information We Collect
What we hold depends on how you use Invesumo:
Your account
When you sign in with Google or with an email address and password: your name, email address, profile photo (from Google), how you signed in, your plan (free or Pro), any Pro code you redeemed, and when you signed up and last signed in. Passwords are handled by our authentication provider; we never see or store them.
What you save while signed in
Your settings (language, region, currency, theme), your investor profile answers (age range, amount, time horizon, risk tolerance, goal, income stability), your last calculation and the last stock you viewed, your saved scenarios and portfolios, your watchlist, and your ledgers - the holdings, debts and transactions you enter. These are kept on our servers so they follow you between devices. They are not saved in your browser: while you are signed in they are held only in the open page.
Payments, if you subscribe to Pro
Payments are handled by our payment provider. Your card details go directly to it; we never see or store your full card number. We keep what we need to run your subscription and meet tax rules: your plan, billing period and subscription status, the payment provider's customer and subscription identifiers, the amount, currency and date of each payment, and the billing name, email address and country used for invoices.
The Pro waiting list
Your email address, name, language, an optional discount code, your IP address, your browser type and the page that sent you to us.
Feedback and support messages
Your message, and your name and email address if you give them; also your IP address, your browser type, and the approximate location (country and city) that your IP address points to.
Usage data, only with your consent
If you accept analytics, Google Analytics records anonymous usage: the pages you visit, without anything after the "?" in their address, and the features you use. It never receives your name, email address or account ID, your investor profile answers, or the amounts and other figures you enter. Its cookie holds only a random number and is deleted when you close your browser, so visits are not linked to each other; Google signals and ad personalization are off, and IP addresses are anonymized.
Notifications, if you turn them on
For each browser or phone you turn notifications on in: the push address and keys your browser gives us to reach it, a device name taken from the browser type (such as 'Chrome · Windows'), and when it was added and last used. Also your notification settings - which kinds you want, how often to remind you to update each ledger, whether to hide details, and your time zone and language so a reminder arrives on the right day in your language - and the notifications we have sent you, which you see in the bell at the top of the page.
Approximate location
Your country is estimated from your browser's time zone, on your device, so we can show your region's markets, language and prices. Nothing is sent anywhere to work it out, and the answer is kept on your device only.
Storage on your device
While you are signed in, nothing about you is saved in your browser: only your theme and language, a marker that a sign-in is open, your analytics choice, cached market data and, if you turn notifications on, a random identifier for this device. Without an account, your settings, investor profile answers, recent calculations, saved scenarios and portfolios, and the demo ledger are kept only on your device, and are removed from it when someone signs in or out on it.
Staying signed in
"Remember me" is on when you sign in: our authentication provider keeps a sign-in token in your browser so you stay signed in until you sign out. If you untick it, your sign-in ends when you close your browser and no token is kept.
How We Use Your Information
We use it to:
- Run your account and keep your settings, scenarios, ledgers, portfolios and watchlist in sync across your devices
- Show markets, currency and language for your region
- Use your investor profile to pick the recommendations and scenarios that fit you
- Send the emails you ask for or need: account verification, password reset, a welcome when you join the waiting list, an invitation when your Pro access is ready, payment receipts and subscription notices, and replies to your messages
- Process Pro payments, renew or cancel subscriptions, send receipts and keep the accounting records the law requires
- Manage the Pro waiting list, trials and Pro codes
- Answer your feedback and support requests
- Send the notifications you turn on: a reminder the day before an event on your ledger's calendar, and a reminder to update the values your ledger cannot price itself. They are worked out on our server from your saved ledgers
- Prevent abuse, such as limiting repeated sign-ups and messages from the same IP address
- Understand how the site is used and improve it, when you allow analytics
Where Your Data Is Kept
Account data and everything you save while signed in are stored on Invesumo's servers with our cloud hosting provider. The website itself is served from a web hosting provider. Only our server can write to your account record - your browser cannot. While you are signed in, your data is held only in the open page and is not saved in your browser, so closing the page or signing out leaves nothing of it on the device; the copy on our servers stays and returns when you sign in again. We use HTTPS and access controls, but no method of transmission or storage is 100% secure.
Service Providers We Use
We do not sell your personal information. We share only what each service needs to work:
- Cloud hosting and authentication provider: runs our servers, signs you in and stores your account data
- Payment provider: processes Pro payments; receives your card details, billing name, email address and country
- Google Analytics: anonymous usage data, only if you accept analytics
- IP location service: our server looks up the approximate location (country and city) of the IP address a feedback message is sent from
- Market data providers: our server sends them ticker symbols only, never anything about you
- Browser push services: deliver the notifications you turn on. Your browser's maker runs the one it uses (such as Google, Apple, Microsoft or Mozilla); it receives the notification's text and the page it opens. With 'Hide details' on, that text names nothing from your ledgers
- AI model provider: writes Samurai Analysis reports from market data only (see below)
- Our own mail server (invesumo.com): sends account, waiting list and reply emails
AI-Written Reports
Samurai Analysis reports are written by an AI model from market data about the company - prices, financial statements, analyst estimates and technical indicators. Your name, email address, investor profile and ledgers are never sent to the model. The recommendation shown for your profile is calculated on our server, and a report is stored without recording who asked for it.
How Long We Keep It
Account data, settings, scenarios, ledgers, portfolios and your watchlist are kept for as long as your account exists. A ledger, scenario or portfolio you delete is deleted from our servers too. Payment and invoice records are kept for as long as tax and accounting laws require, even after an account is deleted. Waiting list entries and feedback messages are kept until we no longer need them or you ask us to delete them. When you delete your account, your waiting list entry is deleted, and your feedback messages and any Pro codes you used are kept without your name, email or IP address. Notifications we send stay in your list for 90 days and are then deleted; Clear all removes them from the list at once. A device is kept until you remove it, turn notifications off on it, or its browser stops accepting them. Analytics data is kept according to Google Analytics' retention settings.
Your Rights and Choices
You can:
- Access: ask for a copy of the personal data we hold about you
- Export: download a ledger as a spreadsheet from the ledger, and your settings and saved scenarios from Profile & Settings
- Correct: change your settings and investor profile at any time in Profile & Settings
- Delete: delete individual ledgers and scenarios yourself, or delete your account and everything stored with it from Settings, under Data management
- Object or withdraw consent: decline analytics, or withdraw your consent at any time in Settings under Privacy ("Analytics consent") or with "Manage Cookie Settings" below. Analytics stops at once and its cookie is deleted
- Notifications: turn each kind on or off, hide details on the lock screen, and remove any device, at any time in Settings under Notifications. You can also block them in your browser's site settings
- To make a request, use the Support form at the bottom of every page
Links to Other Sites
Invesumo links to other sites, such as our social media pages and data sources. We are not responsible for their privacy practices; please read their policies.
Children's Privacy
Invesumo is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.
Changes to This Policy
We will update this policy when what we collect or how we use it changes, and post the new version here with a new "Last updated" date. Continuing to use Invesumo after a change means you accept the updated policy.
Contact Us
For questions about this policy or your data, or to make a request, use the Support form at the bottom of every page and leave an email address we can reply to.