Privacy Policy
Version 2026-09-15
1. What we collect
Account information: your email address and a sign-in identity managed by our authentication provider (Clerk), which may include a name and profile picture if you sign in with Google, Apple or another provider. Portfolio information you enter: tickers, share counts, cost basis, bullion holdings, and the assumptions you set. Usage information: pages visited, time spent on them and which features are used (never your holdings, and never anything you type, with one exception: when a company search finds no company, we keep the text you searched for, so we know which companies to add), plus which requests failed with a server error, device and browser type, IP address and approximate location from server logs and error monitoring. Feedback you send us with the Feedback button: what you write, the category you pick, the page you were on and the time, kept so we can answer and fix what you report (never your holdings). Billing information after beta: handled entirely by our payment processor (Stripe); we never see or store full card numbers.
2. Why we use it
To provide the Service: your portfolio, your assumptions and your scores exist only so we can show them back to you. To keep the Service secure and to detect abuse, including bulk extraction. To improve the Service by understanding, in aggregate, which features are used. To bill you after beta. To contact you about your account, security or material changes. We do not sell your personal information and we do not use it for third-party advertising.
3. Who can see your portfolio
Your holdings are stored only so we can show you your portfolio. That means the companies and bullion you add, your share counts, what you paid and any sales you record. No one at CoreMultiplier looks at them: our admin tools do not display any user's holdings, and our usage analytics never record them. They are never shared, sold or used for anything else. Remove a holding and it is deleted. The one exception is an anonymous count of how many portfolios include each company, which we use to decide which companies to keep refreshing; it never says whose portfolio.
4. Who we share it with
Service providers who process data on our behalf under contract: authentication (Clerk), payments (Stripe), website hosting (Vercel), background processing (Railway), database hosting (Neon), error monitoring (Sentry, which may receive your account identifier with a crash report) and, when we send account emails, an email delivery provider. AI model providers (Anthropic) receive company filing text to extract data; they do not receive your personal or portfolio information. We share information when the law requires it or to protect the rights and safety of users and the Service.
5. Cookies
We use cookies and similar technologies that are necessary to keep you signed in and to keep the Service secure. We do not use advertising cookies. You can block cookies in your browser, but the Service will not work without the necessary ones.
6. Retention
Account and portfolio information is kept while your account is active. If you delete your account it is retained for 30 days, then permanently removed, except records we must keep for legal, tax or security reasons. Server logs are kept for a limited period for security and debugging.
7. Your rights
You may access and correct your information in Settings, export your portfolio, and delete your account. Depending on where you live you may have further rights, such as the right to object to or restrict processing, to data portability, or to lodge a complaint with a supervisory authority. Contact us at support@coremultiplier.com to exercise any of them.
8. Security
We use industry-standard measures: encrypted connections, hashed credentials managed by our authentication provider, access controls and logging. No system is perfectly secure; tell us immediately if you believe your account has been compromised.
9. Children
The Service is not directed to anyone under 18 and we do not knowingly collect information from them.
10. Changes and contact
We may update this policy; material changes will be announced in the Service and the version date updated. Questions: support@coremultiplier.com.