Privacy policy

Vantage shows the investment accounts you connect, prices them, and answers questions about them. We collect what that needs and nothing for advertising. We do not sell your data or share it for anyone else's marketing. You can remove a connection or delete your account at any time, and the data goes with it.

• Your account. Your name and email address from the Apple, Google or X account you sign in with, and, if you sign in with X or choose to verify one, your X username and the address of your X profile picture. We show the picture as your avatar to you and to the people who can see your profile; it loads from X's image servers, which see that viewer's IP address as they do for any image on the web, and we read it again from your linked account each morning so a changed picture follows.
• Accounts you connect. With your permission: your institutions and accounts, balances, holdings, cost basis (including when each lot was bought, where your institution says) and transactions. Brokerage accounts connect through SnapTrade; bank accounts, and brokerages SnapTrade does not reach, through Plaid. Vantage only reads them: it cannot trade or move money. You sign in to your institution on its own page or inside the provider's window; we never see or store your institution username or password.
• What you tell us. Your profile answers, watchlist and notes, the companies you track, the questions you ask and the answers you get, and up to 50 short memories the assistant saves, which you can see and delete on your Profile. The reactions and comments you leave on shared trades.
• Use of paid features. Counts of model usage, so daily limits hold and Settings can show what you used. When you first connect a brokerage, the time you agreed to SnapTrade's terms.
• Companies we show you. Under “Related to your holdings” on Discover we record which companies were shown to you, and which of them you opened, added to a list or hid, together with why each was shown. This is how “Not interested” keeps a company off your list, and how we judge whether the section is any use. It is kept for as long as your account is open.
• How you use Vantage. Which pages you open and which features you use (for example, that you connected an account and at which institution, asked a question or opened a review), with your browser and device type, tied to an internal id rather than your name or email. In the iOS app, the same: which kinds of screen you open (a company page, never which company), when you open the app, and its version, sent through our servers. These events never carry dollar amounts, holdings, tickers you filter by, account names, the people you follow, or the text of your questions.
• Cookies. A sign-in session cookie from Clerk, cookies that remember your theme and settings, and a first-party cookie and local storage entry that let product analytics recognize your browser between visits. No advertising cookies. The iOS app keeps its sign-in in the device keychain instead.
• Push notifications (iOS app). When you turn notifications on in the app, we keep the device token Apple issues for it, so we can send you notifications. A notification says who did what by handle (for example, that someone you follow has new trades, or commented on one of yours) and never carries a dollar figure, a holding or a trade. The one exception is Big moves, which you can switch off: when someone you follow, who lets you see their day change, moves past the threshold you chose, it says by how much in percent (for example, “@casey is up 5.2% today”), never in dollars. Weekly standings, which you can also switch off, says after Friday's close where your own week finished among the people you follow when it finished in the top half (for example, “You finished 2nd of 6 this week”), and otherwise only that the standings are in; never anyone else's place or figure. The Evening brief and the Morning brief, each off until you turn it on, say in one line what the next market day (or the weekend) turns on, researched once for everyone by a model with web search (Anthropic); nothing in them is about you. Each kind can be turned off for push, and for email, in Settings. The token is kept until you turn notifications off, sign out, Apple tells us the device is gone, or you delete your account.
• Home Screen widget (iOS app). When you sign in to the app, it asks us for a token that it keeps in your phone's keychain, so its widget can fetch your portfolio's day and how the people you follow are doing while the app is closed. We store only a hash of the token. It stops working when you sign out, when the app replaces it, after 60 days unused, or when you delete your account. What the widget shows stays on your phone.
• App version and crashes (iOS app). The app tells us its version number with each request. We keep the version you last used, and when, with your account, so we know when an old version is no longer in use. When Apple's diagnostics report that the app crashed, hung or overused your phone's processor or storage, the app sends us how many times, with its version number and nothing else: no crash logs and nothing about you or your portfolio. We keep these as daily totals per version, not linked to your account.

• To show your holdings, balances, activity, performance and tax estimates, priced with current market data.
• To answer your questions and write the daily and weekly reviews of your portfolio.
• To send the email notifications you have left on (each can be turned off from any email or in Settings).
• To show your portfolio to the people you have chosen to share it with, only as you set it up (see Sharing).
• To keep the service working and secure: to diagnose failed syncs and to stop abuse.
• To understand which parts of Vantage are used and where people get stuck, so we can improve it.

These providers process personal data for us, only to run Vantage:

• SnapTrade connects your brokerage, through the broker's own sign-in, and sends us your investment accounts, positions, transactions, your filled orders during the day and its estimate of each account's past value. Its handling is covered by its End User Terms and Conditions, which you agree to before connecting.
• Plaid connects bank accounts, and brokerages SnapTrade does not reach, and sends us that data. Plaid's handling is covered by the Plaid End User Privacy Policy.
• Clerk (sign-in, with Apple, Google or X) holds your sign-in identity.
• Vercel hosts the app and Neon hosts the database, both in the United States.
• Anthropic runs the model behind chat, reviews and suggested questions, and so receives your portfolio and your questions when you use them. Its commercial terms do not permit training models on this data.
• TypeSafe checks the wording of generated reviews and suggested questions, classifies transaction descriptions (for example, a cash sweep against a deposit), reads what you type in answer to a profile question to find the option you meant, and sorts news headlines by whether they are about a company.
• Resend sends notification email to your address.
• Apple (Apple Push Notification service) delivers the iOS app’s notifications to your device, and so receives its device token and each notification’s text.
• PostHog (in the United States) stores the product analytics events described above. It receives no portfolio data, no email address and no name; once you delete your account, nothing links its events back to you.
• Sentry (in the United States) receives error reports from the site and the iOS app: what failed, the page or route, the app’s version and a provider’s error code. Dollar figures, tickers, account names, cookies, secrets and who you are are removed before a report leaves.

Market data providers (Alpaca, Yahoo, the SEC, Wikipedia, Parallel) are asked about ticker symbols only and receive nothing about you. Parallel checks the web once a day for news about each company someone tracks: it is told the company's name and ticker, never who tracks it. We may disclose data when the law requires it.

Nobody sees your portfolio unless you both agree to share. You choose which accounts, how delayed, and whether dollar amounts show; in percent mode no dollar value, quantity, account name or institution reaches the other person, and every percent is rounded (weights to a tenth of a point and returns to a hundredth by default, coarser if you choose) so that it is harder to work back into an amount. Either of you can end a share at any time.

Reactions and comments on a shared trade are seen, with your handle, by the trade's owner and by everyone else the owner shares that trade with. What you write in a comment is shown as you wrote it, so leave out anything you would not tell them all.

You can send a trade you can see as a picture with a link, into Messages or anywhere else. Anyone the link reaches can see that picture: your handle or the trader's, the stock or contract, the day and the move since, in percent only unless the trade is your own and you choose to show dollar amounts. It is a copy of the trade as it stood when you shared it and never updates. You can revoke a link you made; for someone else's trade it also stops opening when they stop sharing with you. A message already sent keeps its picture, because the sender's phone fetched it and sent it inside the message. Only people the trade's owner shares with can open the trade itself.

Each week, after Friday's close, you and the people who share with you are ranked by how the week went, each as they share it with you: your friends rank you by the figure your shared accounts give, and only if you let them see your day and week, at the level and rounding you chose for them. If you share nothing, you have a place on your own standings and on no one else's. You can send your own place and week's percent as a picture with a link, which shows nothing about anyone else and can be revoked like a shared trade.

All traffic is encrypted with TLS 1.2 or better. The database is encrypted at rest, and the credentials that let us read your accounts (Plaid access tokens and your SnapTrade secret) are additionally encrypted by the application with AES-256-GCM before they are stored. Every read is limited to the signed-in person's own data, and access to production systems is limited to the people who run Vantage and protected by multi-factor authentication.

• Your data is kept while your account is open, so your history and performance can reach back to when you joined.
• Detailed holdings from each data refresh are kept for 30 days; after that, one snapshot per day is kept for your history.
• Raw notifications from SnapTrade, Plaid and Parallel, kept to diagnose syncs and tracking, are deleted after 90 days.
• News found about tracked companies is public market data, shown to anyone who opens the company's page, and is deleted after 365 days. Which companies you track is yours and goes with your account.
• The live log of a chat answer being written, kept so the app can pick an answer up where it left off, is deleted 2 days after the answer is finished; the answer itself stays with its conversation.
• Removing a connection deletes its accounts, holdings and transactions at once and tells SnapTrade or Plaid to stop accessing that institution.
• Deleting your account (Settings, Account) removes every connection at SnapTrade and Plaid and deletes everything we hold about you at once. Copies in our database provider's backups expire within 30 days.
• You can also delete individual conversations and memories, your shared history, and your comments, whenever you like. The owner of a trade can delete any comment on it.
• Testing copies. To test changes against real portfolios, the people who run Vantage may copy the database into a separate, restricted test database. Before anyone uses a copy, your email, name, X account, account numbers and connection credentials are removed, and your conversations, memories, profile answers, comments and notifications are never copied. Your Vantage handle is kept, so the people testing can tell whose portfolio a copy shows. Nothing in a copy can reach your brokerage, your inbox or your phone. Each copy is deleted when the testing it was made for is done, and never kept more than 7 days.

You can see everything Vantage holds about your portfolio in the app, and correct your profile or delete any part of it there. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data; write to justjoshingllc@gmail.com and we will answer within 30 days. Vantage is not meant for anyone under 18.

If this policy changes in a way that matters, we will update the date above and tell you in the app or by email before it takes effect. Questions, requests and security reports go to justjoshingllc@gmail.com. How you use Vantage is covered by our terms of service.