Privacy Policy

This Privacy Policy explains what [COMPANY NAME] (“Origami”, “we”, “us”) collects when you use the Origami portfolio tracker at tradeorigami.com, how we use it, and the choices you have. The short version: we collect what's needed to run a portfolio tracker — your account details and the financial data you connect or import — we never sell it, and we don't use it for advertising.

1. Information we collect

• Account information. Email address, display name, and a hashed password — or, if you sign in with Google, the name and email Google shares with us.
• Financial data you bring. Holdings, balances, transactions, and income from brokerage accounts you link through Plaid, files you upload (CSV import), or entries you type in. Brokerage access is read-only; we never see or store your brokerage username or password — those go directly to Plaid.
• Billing data. Payments are handled by Stripe. We store your Stripe customer and subscription identifiers and your plan status — never your card number.
• Ask Origami conversations. Messages you send to our AI assistant and its responses are stored with your account. Our staff may review conversations to debug problems, improve answer quality, and prevent abuse.
• Usage and device data. Standard server logs (IP address, browser type, pages requested) and session records, used for security and troubleshooting.
• Cookies. We use only the cookies needed to keep you signed in. No advertising or cross-site tracking cookies.

2. How we use information

• Provide the Service: sync, store, and display your portfolio data.
• Process subscriptions and send transactional email (verification, receipts, billing notices, security alerts).
• Answer support requests.
• Secure the Service: session management, abuse and fraud prevention, rate limiting.
• Improve the product, using aggregate or de-identified usage patterns.

We do not sell or rent personal data, share it with data brokers, or use it for third-party advertising.

3. AI processing

When you use Ask Origami, your question and the relevant slices of your portfolio data are sent to Anthropic (our AI model provider) to generate the response. We use Anthropic's commercial API, which does not train models on this data by default.

4. Service providers

We share data only with the processors that run the Service:

• Plaid — connects your brokerage accounts and retrieves read-only account data. Plaid's own privacy policy governs its handling of your data.
• Stripe — payment processing and subscription management.
• Resend — delivers our transactional email.
• Anthropic — generates Ask Origami responses (section 3).
• Google — optional sign-in with your Google account.
• Hosting and infrastructure providers — run our servers, database, and backups.

Market-data lookups (quotes, security details) are made with ticker symbols and security identifiers only — they are not tied to your identity by the data vendors.

Beyond these providers, we disclose personal data only if required by law or to protect the rights, safety, or property of Origami or its users, and — with notice where possible — as part of a merger or acquisition.

5. Data retention and deletion

We keep your data while your account is active. If your subscription lapses, your data is retained in read-only mode so you can export it or resubscribe. When you delete your account, your data is deleted immediately and permanently from the live database, and ages out of encrypted backups within about 30 days. Some billing records are retained where tax and accounting law requires it.

6. Your rights

• Access and export — view your data in the app and export it at any time.
• Correction — edit your account and portfolio data directly in the app.
• Deletion — delete your account from your security settings, or ask us at support@tradeorigami.com.
• Disconnect — unlink a brokerage connection at any time, which stops further syncing.

Depending on where you live (for example the EEA, UK, or California) you may have additional statutory rights; contact us and we will honor the ones that apply. We respond to verified requests within the time the law requires, and we do not discriminate against you for exercising them.

7. Security

Data is encrypted in transit (TLS) and at rest. Brokerage access is read-only by design. Access to production systems is restricted and logged. No system is perfectly secure — if a breach affects your personal data, we will notify you as the law requires.

8. Children

The Service is for adults managing investments and is not directed at children. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we will delete it.

9. International users

The Service is operated from the United States, and your data is stored and processed there. By using the Service you consent to that processing.

10. Changes to this policy

We may update this policy as the Service evolves. For material changes we will notify you by email or in the app before they take effect. The date at the top reflects the latest revision.

11. Contact

Privacy questions or requests: support@tradeorigami.com. See also our Terms of Service and Disclosures.