Legal

Privacy Policy

Last updated: 1 June 2026 · Terms of Use

Your privacy matters to us. This Policy explains what data we collect, why we collect it, and how you can exercise your rights. We do not sell your personal data.

Section 1

What we collect

Depending on how you use FolioLens, we may collect:

Account details — your name, email address, login credentials, and user ID.
Portfolio and account data — connected broker accounts, holdings, transactions, dividends, balances, cash positions, and related metadata.
Information you provide directly — uploaded CSV files, support messages, feedback, and in-app settings.
Technical and usage data — IP address, browser type, device type, pages viewed, actions taken in the app, timestamps, and diagnostic logs.
Cookie and similar technology data — where applicable, as described in Section 10.

Section 2

How we use your data

We use personal data to:

Provide, operate, maintain, and improve FolioLens.
Authenticate users and secure accounts.
Import, normalise, and display portfolio data.
Connect to brokerages and third-party providers at your direction.
Respond to support requests and communicate service updates.
Monitor performance, prevent abuse, debug errors, and protect the service.
Comply with legal obligations and enforce our Terms of Use.

Section 3

Legal bases

If you are in the EU or UK, we process your personal data on the following legal bases: where necessary to perform our contract with you (providing the FolioLens service); to comply with legal obligations; to pursue our legitimate interests in operating and securing FolioLens; or where you have given consent, such as for optional analytics cookies, advertising / marketing cookies (Meta Pixel), AI-assisted CSV import, or marketing communications where required by law. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of any processing carried out before withdrawal.

Section 4

Third-party providers

We share data with service providers that help us operate FolioLens, including hosting and infrastructure providers, authentication and database services, brokerage connectivity providers such as SnapTrade, and an AI provider (Anthropic) used only for the optional, consent-based CSV import feature described below. We may also share data where required by law, or to protect rights, safety, or the security of the service. We do not sell your personal data, and we do not share personal data for cross-context behavioural advertising.

AI-assisted CSV import. If you upload a CSV file that we cannot recognise automatically, we offer optional AI-assisted format detection. This runs only after you explicitly consent on the import screen — it is never used without your permission. When you consent, a small sample of rows from that file is sent to our AI provider (Anthropic) for the sole purpose of identifying the file’s format and mapping its columns; the remainder of the processing happens within FolioLens. This data is not used to train AI models. You can decline at any time and instead connect your broker via SnapTrade or add your investments manually.

Section 5

Broker connections

If you connect a brokerage account via SnapTrade or another integration, we receive account data from the third-party connectivity partner and/or the broker itself, based on the permissions you grant. We use that data only to provide portfolio tracking, analytics, sync, and related features as requested by you.

Section 6

Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the service, maintain records, resolve disputes, enforce our Terms, and comply with legal obligations. When data is no longer needed, we delete it or anonymise it where reasonably possible. You may request deletion of your account and associated data at any time by contacting us at info@foliolens.app.

Section 7

International transfers

Your information may be processed in countries other than your own, including the United States and other jurisdictions where our service providers operate. Where required by law, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses or equivalent legal mechanisms.

Section 8

Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These include encrypted data transmission (TLS), row-level security in our database, and JWT-based authentication. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at info@foliolens.app.

Section 9

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; object to or restrict certain processing; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority or data protection regulator.

If you are in California or another US state with applicable privacy rights, you may also have rights to know, delete, and correct personal information, and to receive information about how your data is used and disclosed, subject to applicable exceptions.

To exercise any of these rights, contact us at info@foliolens.app. We aim to respond within 30 days.

Section 10

Cookies and analytics

We use cookies and similar technologies on our website and app. The categories below describe what we use, their purpose, and whether they require your consent.

Essential cookies — Strictly necessary for the service to function. These include session authentication tokens and security state. They cannot be disabled and do not require your consent under applicable law.
Analytics cookies — Google Analytics (GA4) — We use Google Analytics to understand how visitors use FolioLens: which pages are viewed, how long sessions last, and which features are used. We use Google Consent Mode v2, which ensures no analytics data is collected before you accept analytics cookies in our cookie banner. If you decline, Google Analytics remains inactive. For more information see Google’s Privacy Policy.
Marketing / advertising cookies — Meta Pixel (Facebook Pixel) — We use the Meta Pixel, a tracking technology operated by Meta Platforms, Inc. The Meta Pixel allows us to measure the effectiveness of advertising campaigns on Facebook and Instagram, build advertising audiences, and attribute sign-ups or purchases to ad impressions. When active, the Meta Pixel places a cookie in your browser and may transmit data such as page URLs visited, browser type, and device information to Meta. The Meta Pixel is suppressed by default and only activates after you explicitly accept marketing cookies in our cookie banner. If you decline, no data is sent to Meta from your browser. You can also manage Meta’s use of your data via Facebook Ad Preferences or the Your Online Choices opt-out platform. For more information see Meta’s Privacy Policy.

When you first visit FolioLens, a cookie banner appears at the bottom of the page letting you accept all cookies, decline non-essential cookies, or manage your preferences individually (analytics and marketing can each be toggled on or off). Your choice is stored in your browser and applied on future visits. You can change your preferences at any time by clearing your browser’s local storage or by contacting us at info@foliolens.app.

In addition to cookies, we operate a server-side Meta Conversions API (CAPI) integration. When a paid subscription is completed, we send a Purchase event directly from our server to Meta solely for the purpose of measuring the return on our advertising spend. This event contains a hashed email address and payment value; it does not contain browsing history or any sensitive financial data. The server-side CAPI is processed on the basis of our legitimate interests in measuring advertising effectiveness, as it is triggered by a confirmed payment event (not by browser-level tracking). You may object to this processing by contacting us at info@foliolens.app.

Section 11

Children

FolioLens is not intended for children under 18, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at info@foliolens.app and we will delete it promptly.

Section 12

Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and revise the “Last updated” date at the top. Your continued use of FolioLens after the updated Policy takes effect constitutes acceptance of the revised terms.

Section 13

Contact

If you have questions about this Policy or want to exercise your privacy rights, contact us at info@foliolens.app. We aim to respond within 5 business days.

If required in your jurisdiction, you may also direct privacy enquiries to our data protection contact at the same address, and you have the right to lodge a complaint with your local data protection authority.