Legal draft
Privacy
This policy must receive legal and security approval before production launch.
Data we store
Rebalio stores account identity references, exchange connection metadata, current balance and open-order snapshots, allocation versions, trade activity, and manually confirmed performance history.
Exchange keys
Exchange credentials are stored in an AES-256-GCM encrypted vault. Server-side operations retrieve them to synchronize accounts and submit or cancel orders that the user authorizes. Saved credentials are not returned to the browser.
Use, access, and deletion
Financial data is used to display portfolios, calculate performance, and perform explicitly approved exchange operations. Access is restricted to the owning user. Disconnecting an exchange queues its stored credential for deletion; portfolio and activity history remain available.
Security
You can enable authenticator-based two-factor authentication to help protect your account. Application data is stored in Ireland. Operational errors are sanitized to avoid exposing exchange secrets.