Privacy Policy

1. Overview

InsightPulse ("the App") is a portfolio risk analysis tool currently in beta, operated by Sphu Labs ("we", "us"). Sphu Labs is the data controller for personal data processed through the App. This privacy policy describes what data we collect, how we use it, and your rights.

2. Data We Collect

• Account information — email address and hashed password when you register.
• Portfolio data — ticker symbols and weights you enter. Stored locally in your browser and on the server when you are logged in.
• Chat messages — messages you send to the AI assistant are processed by Anthropic's API (Claude) and stored server-side to maintain conversation context.
• Usage data — pages visited, features used, analysis count, and session duration. No third-party analytics trackers are used.
• AI memory — the AI assistant may extract and store facts from your conversations (e.g., investment preferences) to personalize future responses. You can view and delete these facts on your Profile page.

3. Cookies

• Authentication cookie (ip_refresh) — httpOnly cookie containing your session refresh token. Expires after 7 days of inactivity.
• Visitor cookie (ip_visitor) — anonymous UUID used to maintain session continuity before login. Expires after 1 year.

We do not use advertising cookies or third-party tracking cookies.

4. Third-Party Services

• Anthropic (Claude) — chat messages and AI analyst queries are sent to Anthropic's API for processing. See Anthropic's Privacy Policy.
• Market data providers — stock prices and financial data are sourced from Polygon.io and Yahoo Finance. Your queries are sent to these services to retrieve data.
• Hosting — the backend is hosted on Railway and the frontend on Vercel. Standard server logs (IP address, request timestamps) are maintained by these providers.

5. Data Retention & Deletion

Your data is retained as long as your account exists. You can delete individual AI memory facts from your Profile page. You can permanently delete your account and all associated data (conversations, memory, profile, and user record) from your Profile page or by contacting support.

6. Your Rights

You have the right to access, correct, and delete your personal data. To exercise these rights or ask questions about this policy, contact the project maintainer via the Feedback page in the app.

7. Changes to This Policy

We may update this policy as the app evolves. Material changes will be communicated via the beta disclaimer banner.