Privacy Policy
Last updated: October 2026
Information We Collect
When you create an account, we collect your name and email address, and — if you sign in with Google — the profile picture Google provides. When you use our services, we collect chat history, stock analysis requests, favorites, portfolio data, and community posts and comments. Images you upload are stored with the item they belong to and are deleted with it: a profile picture you choose yourself, a photo you send to the AI in a conversation, and a photo you attach to a community post. If you record a voice message for the AI, the audio is sent to OpenAI to transcribe it to text and the recording itself is not stored; a voice message you send in a direct conversation IS stored, with that conversation, and is deleted with it. If you connect a supported broker account (Interactive Brokers or Colmex Pro), we store your connection credentials securely. We also collect device information and a push token for notifications. How you found us: when you create an account, we record the referring website (domain only) and the first page your browser landed on, including any campaign tags in its address, so we can understand which channels bring users to Plutrex. This is captured once in your browser, kept locally for up to 90 days before signup, never shared, and deleted with your account.
How We Use Your Data
We use your data to provide and improve our services: delivering AI stock analysis, managing your portfolio, executing trades through connected brokers, sending notifications, and personalizing your experience. We use aggregated, anonymized data to improve our AI models and platform performance. We never sell your personal data to third parties.
AI & Data Processing
When you interact with our AI analyst, your queries are processed through OpenAI's API to generate analysis. We do not use your conversations to train external AI models. Your chat history is stored to provide conversation continuity and improve your experience.
Data Storage & Security
Your data is stored on secure servers with encryption at rest and in transit. We use industry-standard security measures including SSL/TLS encryption, secure authentication tokens, and regular security audits. Database access is restricted and monitored.
Third-Party Services
We integrate with the following third-party services: Google (authentication), OpenAI (AI analysis and voice transcription), Interactive Brokers and Colmex Pro (broker trading execution), Firebase (push notifications), our payment processors Google Play Billing (Android in-app purchases) and Cardcom (web payments), and financial data providers (market data). Each service has its own privacy policy governing their data handling.
Cookies & Local Storage
We use browser local storage to maintain your session, preferences, and authentication state. We do not use third-party tracking cookies. Our service worker caches static assets for offline performance. We also keep a small local record of how your browser first reached Plutrex (referring site and first page) for up to 90 days, used only if you create an account.
Your Rights
You have the right to access, correct, or delete your personal data. You can delete your account directly from the Settings page in the app, which permanently removes all your data. You can also contact us at info@plutrex.com. We will respond to all requests within 30 days.
Age Restriction
Plutrex is intended for users aged 18 and older only. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age. If we become aware that personal information from a user under 18 has been collected, we will delete such information immediately and may terminate the associated account. This platform involves financial markets and is not directed to children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).
Data Retention
We retain your personal data as long as necessary to provide our services. Chat history is retained for up to 2 years or until account deletion. Portfolio and trading data is retained for the duration of your account. Account information is retained until you request deletion. When you delete your account, your personal data is removed immediately and irreversibly; encrypted backups that still hold it expire within 14 days. Anonymized, aggregated analytics data may be retained indefinitely.
Contact
For privacy-related inquiries, contact us at info@plutrex.com.