Privacy Policy

Information from Google Sign-In

When you sign in with Google, we receive your name and email address from Google. We do not receive your Google password or any other Google account information.

Portfolio data you provide

When you upload your Mero Share CSV files (WACC Report and Share Values), we store the holdings data contained in those files — including stock symbols, quantities, average buy prices, and cost basis. This data is associated with your account and is used solely to display your portfolio information.

Usage data

We may collect basic, anonymised usage information such as pages visited and features used. This is used only to improve the product and is never linked to individual users.

To provide the service

Your name and email are used to identify your account. Your portfolio data is used exclusively to display your holdings, calculate P&L, and generate charts within the app.

To communicate with you

We may use your email address to send important service-related notifications such as changes to this policy or significant product updates. We do not send marketing emails without your explicit consent.

We do not sell your data

We will never sell, rent, or share your personal information or portfolio data with third parties for advertising or marketing purposes.

Where your data is stored

Your data is stored in a PostgreSQL database hosted on Supabase, which uses industry-standard encryption at rest and in transit. Our application is hosted on Vercel.

Security measures

We use HTTPS for all data transmission. Authentication is handled entirely by Supabase and Google OAuth — we never store or handle passwords. Access to your portfolio data is restricted to your account only.

Data retention

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Google OAuth

We use Google Sign-In for authentication. When you sign in, Google's privacy policy applies to the information you share with Google. We only receive your name and email.

Supabase

We use Supabase for database hosting and authentication infrastructure. Supabase is SOC 2 compliant and processes data in accordance with their privacy policy.

Vercel

Our application is hosted on Vercel. Vercel may process request logs for operational purposes in accordance with their privacy policy.

Access and deletion

You can delete your portfolio and all associated holdings at any time from within the app. To permanently delete your account and all data, contact us at the email below.

Data portability

Your portfolio data is derived from your own Mero Share CSV exports. You always have access to your original data from Mero Share.

Opt-out

You may stop using HamroPortfolio at any time. If you wish to have your data removed, contact us and we will delete your account within 30 days.

HamroPortfolio is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the top of this page. For significant changes, we will notify you via email. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: privacy@hamroportfolio.com