Privacy Policy

What we collect

• Account data. Email, name, and Google OAuth ID from your sign-in.
• Usage data. Which pages you visit, which AI queries you run, credits consumed, features accessed. We use this to compute your plan usage and to fix product bugs.
• Content you create. Watchlists, portfolios, saved strategies, chat history — all stored so you can return to it.
• Brokerage data (if you connect an account). On eligible plans, you can link a brokerage account through a third-party account-connection provider (such as Plaid or SnapTrade). If you choose to connect, we receive from that provider: your positions, cash balance, account type (taxable vs. tax-advantaged), and transaction history for the accounts you link. We store this to keep your portfolio in sync and to run the analyses you ask for. The link is read-only — we cannot place, modify, or cancel trades on your behalf.
• Payment data. Handled entirely by Stripe. We never see or store your card number.

What we don't collect

• Your brokerage username, password, or 2FA codes. Sign-in to your brokerage happens on the connection provider's own screen; those credentials never reach Erina's servers and we never see or store them. We hold only an encrypted authorization token that lets us read your positions and transactions until you disconnect.
• Any ability to trade. The brokerage connection is read-only.
• Anything from your browser other than what's needed to render the app.

How we use it

• To operate the Service — render pages, run AI calls, track usage against your plan.
• To improve the product — anonymized aggregate metrics on which features are used.
• To communicate with you — service emails only (billing, security). We do not send marketing emails without opt-in.

Third parties

These are the third parties we share personal data with in order to operate the Service:

• Stripe — payment processing.
• Google — OAuth sign-in.
• Account-connection providers (third-party integrators such as Plaid or SnapTrade) — brokerage connectivity, used only if you choose to connect an account. The provider handles the sign-in with your brokerage and returns your positions, cash balance and transaction history to Erina. The provider, not Erina, handles your brokerage credentials, under its own privacy policy; the provider is identified on the connection screen before you sign in. You can disconnect any linked account at any time from the Account page, which ends our access.
• Anthropic, OpenAI, and other large-language-model providers — LLM inference for research reports, chat answers, and trade recommendations. Your queries are sent to these providers' APIs. Prompts carry the positions, context and question needed to answer; they do not carry your name, email, or account identifiers.
• Google Analytics — usage analytics.

Market data providers we fetch from (prices, options, filings, fundamentals, corporate actions) receive no personal data — we send no user identifiers, no browsing history, nothing tied to you.

Data retention

Your account data, watchlists, portfolios, and chat history are retained while your account is active. Delete your account from the Account page to remove them; some backups may persist for up to 90 days.

Your rights

You can request an export of your data or deletion of your account at any time by emailing support@erina.ai. If you are in the EU, UK, or California, additional rights apply under GDPR / CCPA — we honor them regardless of jurisdiction.

Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production infrastructure is role-restricted. Report security issues to security@erina.ai.

Changes

We may update this policy; material changes will be notified via the Service or by email.

Contact

Questions: support@erina.ai.