Privacy built around you.

1. Information we collect

Account information

When you sign in, an authentication provider may give us basic account information such as your email address, name, provider identifier, and profile image. We use this information to secure your account and keep your private dashboard connected to you.

Portfolio and planning information

You may provide an anonymous alias, age or age range, retirement timing, portfolio value or range, spending goal, outside income, withdrawal need, risk tolerance, estate goal, holdings, allocations, account categories, and related planning inputs.

Community content and usage data

We collect endorsements, structured reasons, comments, votes on proposed changes, and portfolio versions you submit. Like most online services, our service providers may also process technical information such as browser type, device information, IP address, timestamps, and security or diagnostic logs.

Second-opinion requests

If you request a human second opinion, we collect the adviser or adviser type selected, review priorities, relationship and contact preferences, optional notes, the Plan Brief categories you authorize, a point-in-time copy of those categories, and a record of your consent and request status.

2. How we use information

• Provide authentication, private dashboards, portfolio calculations, peer matching, and community reviews.
• Generate rule-based Portfolio Analysis Indicators, Peer Sentiment Scores, directional planning-input comparisons, modeled performance, and educational hypotheticals.
• Use AI to organize community feedback, explain patterns, surface tradeoffs, and answer questions about information available in the service.
• Protect accounts, prevent abuse, troubleshoot problems, and improve the service.
• Communicate important service, security, or policy updates.
• Prepare a user-controlled Plan Brief, record consent, and coordinate an adviser introduction that you request.

3. What is public

If you explicitly opt in, a minimized community card may show your anonymous alias, five-year age band, broad retirement horizon, portfolio range, risk label, aggregate scores, and review count. The public listing does not include your email, sign-in identity, exact age, exact retirement date, exact balance, portfolio title, summary, account types, quantities, or holding values.

Even without your name, a distinctive combination of financial details could be recognizable to someone who already knows you. Avoid including names, account numbers, addresses, employer details, or other identifying information in aliases, portfolio names, or comments.

4. Adviser sharing and sponsorship

We do not share your Plan Brief with a participating adviser merely because you browse, filter, or select a profile. Information may be shared only through the introduction workflow you initiate and only for the categories identified in that workflow. You may be asked to confirm the introduction before transmission.

Participating advisers may pay PortfolioYou advertising or platform fees. Sponsorship does not give an adviser access to private user information. We do not sell private retirement-plan information or allow an adviser to purchase access to users who have not requested contact.

5. Service providers and AI

We use service providers to operate hosting, authentication, databases, security, payments, and optional AI-assisted features. These providers may process information on our behalf under their own contractual and privacy obligations. When live AI is configured, PortfolioYou sends the saved deterministic evidence needed for the requested explanation; client-supplied portfolio snapshots are not treated as authoritative. Do not add names, contact details, account numbers, or other secrets to questions.

We do not sell personal information. We may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards.

6. Retention, security, and your choices

Guest quick-start drafts stay in that browser for no more than 30 days and are removed after the plan saves. Account data is retained while the account is active and as needed for legal, recovery, dispute, and security obligations. From Account & Privacy, you can download a machine-readable export and permanently delete PortfolioYou app data. Active paid subscriptions must be cancelled first; identity-provider deletion depends on the provider and configured secure deletion capability.

We use reasonable administrative and technical safeguards, but no online system can guarantee absolute security. Keep your sign-in account secure and notify us if you believe your PortfolioYou account has been compromised.

7. Children, international use, and updates

PortfolioYou is not intended for children under 18. The service is operated from the United States, and information may be processed in the United States or other locations where our providers operate.

We may update this policy as the service changes. We will revise the effective date and provide additional notice when appropriate. Use the authenticated Support form for account, billing, security, or privacy requests.