Privacy
Privacy notice (draft)
Who we are
Ownsight is an information tool for UK investors. [Controller name and contact to be confirmed.]
What we process and why
The holdings you enter (names, tickers or ISINs, and amounts) to calculate your portfolio analysis. Our lawful basis is your consent, which you give before adding holdings and can withdraw at any time.
What we store
By default, nothing: holdings stay in your browser session. If you choose to save them, we keep them with your account until you change or delete them. Holdings saved earlier with a restore code are deleted automatically after 30 days. Feedback is stored anonymously. If you join the waitlist, we keep your email separately, only to tell you about the launch.
Accounts
Saving a portfolio, My portfolio, model baskets and Ownsight AI need a free account. We store your username, a hashed (scrambled, one-way) form of your password, when you joined and last signed in, and a count of recent wrong passwords to protect the account. If you choose to stay signed in, we keep a random sign-in token in a cookie on your device for 30 days and only a hash of it on our side. You can delete your account at any time from Your account. If you sign in with Google, Microsoft or email, sign-in is handled by Auth0 (our sign-in provider) and we also store your email address and which service you used, so the same email always opens the same account.
Risk questionnaire
Your answers to the risk-profile questions stay in this browser session only. They are never stored or sent anywhere, and are cleared when you close the page or press Clear my answers.
Theme choice
If you pick light or dark mode, the choice is saved in your browser's storage on your own device. We never receive it.
Reports and what-ifs
The PDF report is made on the spot in your session and downloaded to your device; we don't keep a copy. Values you type in the what-if calculator are never stored.
Support messages
If you contact us, we keep your message, the topic and (only if you give it) your email to reply. They're deleted after 12 months, or sooner if you ask on the Delete my data page.
Price data
To show prices, we request them from Alpha Vantage and, on the Markets page, Yahoo Finance, using ticker symbols only. Currency news comes from Marketaux; the request contains only our access key and a fixed list of currency pairs. Nothing about you or your amounts is sent. News headlines link to other websites, which have their own privacy policies.
Markets assistant
If you ask the assistant on the Markets page a question, your question, the share's name and its public price, news and analyst data are sent to an AI provider (Google Gemini, or Anthropic if configured), which writes the answer. Your holdings and anything else about you are not sent. The conversation stays in your browser session and is cleared when you close the page or press Clear chat.
Currency choice
Your display currency is kept in this browser session and in the page link (for example ?ccy=INR). We don't store it.
What we never do
We never ask for broker or bank logins, never place trades or hold money, never sell or share your data, and use no tracking, analytics or advertising tools.
Your rights
You can delete your data at any time from the "Delete my data" page. You also have the right to access and correct your data and to complain to the Information Commissioner's Office (ico.org.uk).