Privacy Policy

Last updated: 19 May 2026

YuRavest ("we", "us") respects your privacy. This policy describes what information we collect, how we use it, and the rights you have over it. By using YuRavest you agree to the terms below.

What we collect

• Account information: your email address, name, and the encrypted password hash you set at registration.
• Broker connections: API keys you supply for Trading 212 (encrypted at rest with AES-256) and CSV files you upload from AJ Bell.
• Portfolio data: holdings, trades, dividends, interest, and other transaction information retrieved from brokers you connect.
• Diagnostic information: server logs (IP address, user agent, request paths) for security and debugging purposes only.
• Support requests: messages you submit via the in-app support form.

How we use it

• To provide the YuRavest service — i.e. compute your health score, classify your sectors, present your dashboard.
• To send transactional emails (account verification, password reset, welcome, support replies).
• To detect and prevent abuse of the service.

We do not sell your data to third parties. We do not use your portfolio data to target advertising.

Third parties we share data with

YuRavest relies on a small number of third-party services to function. They each receive only the minimum data required:

• Trading 212 — we make API calls on your behalf using the API key you provide.
• EODHD — receives ticker symbols when we look up sector / industry classification. No personal data is shared.
• Finnhub and Yahoo Finance — same as above, ticker-only lookups.
• Resend — sends transactional emails on our behalf; receives your email address and the email content.
• Microsoft Azure (or our hosting provider at the time) — stores the YuRavest database and runs the service.

Data retention

We keep your account and portfolio data for as long as your account exists. If you delete your account from the Settings page, all linked data (broker connections, portfolios, trades, dividends, targets, health scores) is permanently removed from our database. Server logs are retained for up to 90 days for security purposes.

Your rights

You can at any time:

• Access the data we hold about you through the in-app dashboard.
• Export your data via the Settings → Data tab.
• Delete your account from Settings → Data → Delete account.
• Contact us using the in-app Support form for any data-protection request, including the right to be forgotten under UK GDPR.

Cookies

YuRavest uses your browser's local storage to keep you signed in (an access token and a refresh token). The marketing site (yuravest.com) asks for opt-in before loading Google Analytics. We do not use tracking cookies inside the app itself.

Changes to this policy

If we materially change this policy we will notify you by email and update the "Last updated" date above.

Contact

Questions about privacy? Send them via the in-app Support page.