This Privacy Policy describes how PortfolioLab LLC ("PortfolioLab," "we," "us," or "our") collects, uses, and protects information when you use the PortfolioLab Risk Analyzer (the "Service"). The Service is intended for use within the United States; we do not knowingly collect information from, or direct the Service to, children under 18.

Information we collect

• Contact information you provide: your name, email address, and mobile phone number.
• Portfolio information you provide: brokerage statements, holdings files, or manually entered positions, and the risk reports generated from them.
• Advisor account information, if you are an advisor: your name, email, firm branding you upload, and billing information handled by our payment processor, Stripe (we do not receive or store your card number).
• Advertising and analytics information, unless you opt out: browsing activity on this site (such as pages viewed and that you completed an analysis) collected via the Meta/Facebook Pixel, Google Ads, Google Analytics, and the Pinterest tag, used to measure our ad campaigns and show you relevant ads elsewhere on the web. See "How we share information" below.
• Visit information collected automatically when you open our home page: your IP address, the date and time, your browser's user-agent string, the page that referred you, and any campaign tags in the web address you arrived on. We use this to understand which advertising brings visitors to the site and to protect the Service against abuse. These records are kept for 90 days and then deleted automatically. They are visible only to PortfolioLab, are never shared with advertising platforms or with the advisors who use the Service, and are not used to build a profile about you.

In CCPA terms, this falls under the categories "identifiers" (name, email, phone, IP address), "financial information" (portfolio holdings and, for advisors, subscription billing status), and "internet or other electronic network activity information" (home-page visit records always; advertising/analytics cookies and pixels unless you opt out). We do not collect Social Security numbers, government ID numbers, or account/routing numbers.

How we use your information

• To generate your portfolio risk report and make it available to you and to the licensed advisor associated with your visit.
• To send a one-time text message verification code confirming your mobile number.
• To have the advisor associated with your visit follow up with you about your results, as described at the point of collection.
• For advisors, to operate their portal account and process subscription billing.
• To measure which advertising brings visitors to the site, and to keep the Service secure and available.

SMS / text messaging privacy

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, excluding the messaging service providers we use solely to deliver our messages to you.
• Message frequency varies; typically you will receive 1–2 messages per verification request.
• Message and data rates may apply.
• You can opt out at any time by replying STOP, or get assistance by replying HELP. See our Terms of Service for full messaging terms.

How we share information

We do not sell your personal information for money. We share it with:

• The licensed advisor associated with your visit, so they can review your report and follow up with you — see our Terms of Service for how advisors using the Service are supervised.
• Service providers who operate the Service on our behalf (website hosting, text-message delivery, email delivery, and, for advisors, payment processing by Stripe), solely to provide those services.
• Advertising partners — Meta/Facebook, Google and Pinterest — who receive browsing activity on this site via their pixel/tag so we can measure ad performance and show you relevant ads elsewhere on the web. State privacy laws (California's among them) treat this as "sharing" for cross-context behavioral advertising. You can opt out at any time on our Do Not Sell or Share My Personal Information page, and we automatically honor the Global Privacy Control browser signal as an opt-out with no further action needed from you.
• Where required to comply with law, legal process, or to protect the rights, property, or safety of PortfolioLab, our users, or others.

Data storage and security

Uploaded statements, generated reports and contact records are encrypted at rest using AES-256-GCM, an authenticated encryption standard, and are also held on access-controlled, encrypted infrastructure. Advisor access to reports is restricted by individual access tokens. Encryption protects your data if storage media or backups are ever exposed; it does not, and cannot, restrict people we authorize to operate the Service. Data is stored and processed in the United States. We retain your information for as long as needed to provide the Service, to maintain the advisor relationship associated with your report, and for our business and legal records; you may request deletion at any time using the contact below, and we will delete or de-identify your information except where we are required to retain it (for example, financial records we must keep for regulatory or tax purposes).

Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us using the details below and we will delete it.

Your privacy rights

Depending on where you live, you may have the right to: know what personal information we hold about you and how it is used; request a copy of it; correct inaccurate information; delete it; opt out of the sale or sharing of your personal information; and not be discriminated against for exercising these rights. We do not sell personal information for money.

To exercise any of these rights, email us at the address below, or use our Do Not Sell or Share My Personal Information page to opt out of advertising sharing directly. We honor the Global Privacy Control browser signal as a valid opt-out automatically. We may need to verify your identity before completing a request, and we will respond within the time required by applicable law (generally within 45 days). You may also designate an authorized agent to submit a request on your behalf.

Your choices

• Opt out of the sale or sharing of your personal information for advertising at any time on our Do Not Sell or Share My Personal Information page, or by sending your browser's Global Privacy Control signal, which we honor automatically.
• Opt out of text messages at any time by replying STOP.
• Request access to, correction of, or deletion of, your information by emailing us at the address below.

Contact us

PortfolioLab LLC · Tampa, FL
Email: advisor@portfoliolabco.com

We may update this policy from time to time; the effective date above reflects the latest revision. Material changes will be posted on this page.