PRIVACY

Your data, clearly explained.

Last updated June 2026. Prism is a Canadian product built for Canadian investors. We believe you deserve to know exactly what happens with your data — not a wall of legal text, just a straight answer.

THE SHORT VERSION

Anonymous useNothing stored. Upload your holdings, see your analysis, close the tab. Zero data retained.

Signed-in useYou choose to create an account. Only what you explicitly save is stored — your email, your portfolio snapshots. You own it and can delete it.

AnalyticsWe track anonymous usage events (how many portfolios were uploaded, which method was used, approximate locale) to understand how the product is being used. No personal information in these events unless you're signed in.

No ads. Ever.Prism does not serve ads and does not sell individual user data to any third party.

What we collect

ANONYMOUS USERS

If you use Prism without creating an account, we collect nothing tied to you personally. Your holdings are processed in memory to generate the analysis and are never written to a database. When you close the tab, they're gone.

We do log anonymous analytics events: that a portfolio was uploaded, which upload method was used (CSV, paste, or screenshot), your browser locale (e.g. en-CA), and whether ETFs were present. These events contain no ticker data, no values, and no identifiers beyond a session-level timestamp.

What-If analysis queries look up tickers in Prism's equity database. These lookups are not stored or associated with your session.

SIGNED-IN USERS

Creating an account is fully optional. If you sign up, we store:

Your email address — used for authentication only. We don't send marketing email.
Portfolio snapshots you explicitly save — the holdings list and analysis output at the time you clicked Save. Stored in Supabase under your user ID. Visible only to you.
Analytics events — same as anonymous users, plus your user ID attached so we can understand return usage and retention.
What-If queries — ticker lookups are not stored or associated with your account.

We do not collect brokerage credentials, SIN numbers, banking information, or any financial account access. Prism is a read-only analysis tool.

How we use your data

Portfolio snapshots are used exclusively to power your personal timeline — showing how your exposure and concentration have changed over time. They are not shared, not analyzed in aggregate with personal identifiers, and not used to train any model.

Analytics events are used to understand product usage: how many analyses are run, which upload methods are most common, what regions Prism is used in. This helps us decide what to build next.

Aggregate data and future benchmarking

One of Prism's long-term goals is peer benchmarking — showing you how your concentration score, ETF overlap, or sector exposure compares to other Canadian DIY investors. This would be powered by anonymized, aggregated patterns across the Prism user base.

If and when this feature is built, it will use data that has been stripped of all personal identifiers before aggregation. No individual portfolio will ever be shared or surfaced. We will update this policy with full details before that feature goes live.

Prism does not and will not sell individual portfolio data to any third party — including financial institutions, data vendors, or advertisers.

Where your data lives

Prism uses Supabase for database and authentication infrastructure. Data is stored on servers in North America. Supabase is SOC 2 Type 2 certified.

AI narratives are generated using the Anthropic API. A derived summary of your portfolio structure — sector weights, concentration score, overlap flags, and thematic breakdown — is sent to generate the insight. Raw holdings tickers and dollar values are not included in the prompt. Anthropic processes this data as a downstream service provider and is governed by their own privacy policy.

Prism is hosted on Vercel. Page view analytics are collected by Vercel Analytics, which is privacy-friendly and does not use cookies.

Your rights

You can delete your account and all associated data at any time by emailing prismportfolioanalytics@gmail.com. We will process deletion requests within 30 days.

You can request a copy of your stored data (portfolio snapshots, account information) by emailing the same address.

Prism is designed for Canadian users and we are committed to operating in a manner consistent with PIPEDA (Personal Information Protection and Electronic Documents Act). As the product matures, we will implement a formal PIPEDA compliance framework.

Beta software

Prism is currently in beta. Coverage, classification accuracy, and AI narrative quality are improving continuously. Analysis outputs are for informational purposes only and do not constitute financial advice. Always verify important decisions with a qualified financial professional.

Questions

If you have any questions about this policy or how your data is handled, email us at prismportfolioanalytics@gmail.com. We respond to every message.