Privacy Policy
Version 2026-09-15
1. What we collect
Account information: your email address and a sign-in identity managed by our authentication provider (Clerk), which may include a name and profile picture if you sign in with Google, Apple or another provider. Portfolio information you enter: tickers, share counts, cost basis, bullion holdings, and the assumptions you set. Usage information: pages visited, actions taken, device and browser type, IP address and approximate location, collected through server logs and error monitoring. Billing information after beta: handled entirely by our payment processor (Stripe); we never see or store full card numbers.
2. Why we use it
To provide the Service - your portfolio, your assumptions and your scores exist only so we can show them back to you. To keep the Service secure and to detect abuse, including bulk extraction. To improve the Service by understanding, in aggregate, which features are used. To bill you after beta. To contact you about your account, security or material changes. We do not sell your personal information and we do not use it for third-party advertising.
3. Who can see your portfolio
Your holdings, cost basis and assumptions are private to your account. Administrators of the Service can access account data to provide support, investigate abuse or operate the Service, and every such access is logged. We may use holdings in aggregate - for example, how many users hold a company - to decide which companies to keep refreshing; no individual holding is disclosed.
4. Who we share it with
Service providers who process data on our behalf under contract: authentication (Clerk), payments (Stripe), hosting and database providers, error monitoring and email delivery. AI model providers receive company filing text to extract data; they do not receive your personal or portfolio information. We share information when the law requires it or to protect the rights and safety of users and the Service.
5. Cookies
We use cookies and similar technologies that are necessary to keep you signed in and to keep the Service secure. We do not use advertising cookies. You can block cookies in your browser, but the Service will not work without the necessary ones.
6. Retention
Account and portfolio information is kept while your account is active. If you delete your account it is retained for 30 days, then permanently removed, except records we must keep for legal, tax or security reasons. Server logs are kept for a limited period for security and debugging.
7. Your rights
You may access and correct your information in Settings, export your portfolio, and delete your account. Depending on where you live you may have further rights - to object to or restrict processing, to data portability, or to lodge a complaint with a supervisory authority. Contact us at support@coremultiplier.com to exercise any of them.
8. Security
We use industry-standard measures: encrypted connections, hashed credentials managed by our authentication provider, access controls and logging. No system is perfectly secure; tell us immediately if you believe your account has been compromised.
9. Children
The Service is not directed to anyone under 18 and we do not knowingly collect information from them.
10. Changes and contact
We may update this policy; material changes will be announced in the Service and the version date updated. Questions: support@coremultiplier.com.