Privacy Policy

Polarix is a portfolio tracker. To do its job it holds a record of what you have bought and sold, which is information about your finances, so this page sets out exactly what is stored, why, and who else can see it. It is written to be read rather than to cover us.

Who is responsible for your data

[Legal entity name and registered address] is the data controller for the purposes of UK GDPR. You can reach us at info@polarixinvesting.com.

What we store

Your account

• Your name and email address.
• A hash of your password, never the password itself. It is hashed with bcrypt, and it cannot be reversed to recover what you typed.
• Your chosen base currency, and whether you have finished setting up.
• If you sign in with Google, the account identifier Google returns, and your profile picture if it provides one.

Your investments

• Every transaction you import or enter: date, instrument, quantity, price, fees and currency. This is the most sensitive thing here.
• The portfolios you group them into, and any watchlists you build.
• A record of each import, so a file you have already uploaded is not counted twice.

Anything you post

Posts, comments and likes on the Social tab, and who you are connected to. Treat these as public to other signed-in users of Polarix. Nothing about your portfolio is published there unless you write it yourself.

Why we are allowed to hold it

• To provide the service you asked for. We cannot calculate a return without the transactions it is calculated from. Lawful basis: performance of a contract.
• To keep the account secure and to answer you when you write in. Lawful basis: legitimate interests.

Who else sees it

Your transactions are never sent anywhere. To price them we ask public market-data sources about the instruments themselves, which involves sending a ticker symbol and nothing else. Those requests are made by our server, so your browser never contacts these companies and they never receive your IP address:

• Yahoo Finance for prices, company data and news headlines.
• SEC EDGAR for the published financial statements of US-listed companies.
• Financial Modeling Prep for company logo images.
• CNBC for news headlines.

One narrow exception, and only if you import a file from a broker the app has never seen before: the column headings of that file and up to three sample rows are sent to Anthropic’s API so it can suggest which column is which. A heading is not personal data; a transaction history is, and the rest of the file never leaves our server. If you would rather it did not happen at all, map the columns yourself using the form on the import screen.

We do not sell your data, we do not share it for advertising, and there are no third-party trackers on this site.

Cookies

One, and it is strictly necessary: a session cookie that keeps you signed in. There is no analytics, no advertising and no tracking cookie, which is why you are not being asked to accept anything.

How long we keep it

For as long as you have an account. Delete a portfolio and its transactions go with it. Ask us to close your account and we will erase your data within 30 days, other than anything we are required to keep by law.

Your rights

Under UK GDPR you can ask us to:

• give you a copy of what we hold, or export it in a portable form;
• correct anything that is wrong;
• delete your account and everything in it;
• restrict or object to what we do with it.

Email info@polarixinvesting.com and we will act within one month. If you think we have got it wrong you can complain to the Information Commissioner’s Office.

Security, stated plainly

Passwords are hashed, the connection is encrypted, and if you ever connect a broker the credential is encrypted before it is stored, with the key held separately from the database. No system is perfect; if something goes wrong that affects you, we will tell you.

Children

Polarix is not for under-18s and we do not knowingly hold their data.

Changes

If this page changes in a way that matters, we will say so before it takes effect rather than quietly editing the date at the top.

See also our Terms of Service.