Security & Privacy
Your financial information deserves careful protection.
Connecting your investments is a decision that deserves clear answers. Here is how SavvyStocks handles account access, brokerage information, and the services that help power the app.
Protecting your account
SavvyStocks offers passkeys and email-link or code sign-in, with optional two-factor verification. Encrypted HTTPS connections protect data in transit. Account data is stored in a hosting-platform database encrypted at rest. Authenticated sessions and sign-in rate limits help protect account access.
Brokerage sign-in stays with the connection provider
When you connect a supported account, you sign in through Plaid or SnapTrade. SavvyStocks does not ask for or store your brokerage username, password, or security answers. We retain provider access tokens or connection secrets to refresh the investment data you authorize.
We use investment data for tracking and analysis—not to place trades or move money. Available accounts, data, and connection methods vary by institution.
Clear boundaries on data use
We do not sell your personal or portfolio information for advertising. Providing the features you choose requires some information to be processed by service providers. For example:
- Plaid and SnapTrade support brokerage connections.
- Market-data providers receive requested ticker symbols.
- OpenAI processes relevant messages and portfolio context for enabled personalized AI features.
- SendGrid delivers email; Twilio delivers opted-in SMS.
- Stripe handles web payments; Apple handles iOS purchases, with RevenueCat managing subscription entitlements.
The Privacy Policy explains these uses and optional advertising measurement. “We do not sell your information” does not mean no information ever reaches another service.
AI with an informed choice
Personalized AI features require your consent. Relevant messages, conversation history, and portfolio context may be sent to OpenAI to generate responses. OpenAI API data is not used to train its models by default. Abuse-monitoring logs may be retained for up to 30 days, or longer in certain circumstances.
You can disable personal AI features in Account > Preferences. General market research may still use AI without your account or portfolio details. Do not enter passwords, Social Security numbers, or other sensitive identifiers in chat.
Controls you can use
- Manage connected brokerages in Account > Data Sources.
- Manage personal AI preferences and notification choices in the app.
- Delete individual conversations or supported account records.
- Delete your account in Account > Security > Delete my account.
Disconnecting stops local syncing and removes linked holdings; imported transaction history may remain. Review authorization separately with your brokerage or connection provider.
Account deletion removes active application records. Backups, service-provider records, and records retained for legal or operational reasons can follow separate retention schedules. Cancel paid subscriptions separately before deleting your account.
Questions about security or privacy?
Contact support@savvystocks.ai. Please do not email passwords, access tokens, full account numbers, or other sensitive credentials.
No online service can guarantee zero risk. We describe specific safeguards and their limits so you can make an informed choice.