Privacy Policy

This Privacy Policy describes what data Plutrex collects, how it is used, who processes it, and your rights over it. By using Plutrex — the website and the mobile app — you agree to this policy.

Information you provide: your name, email address, and (when you verify it) your phone number; your password is stored only as a salted hash. If you sign in with Google, we receive your basic Google profile (name, email, profile picture) and a Google account identifier.

Profile photo: you may upload your own profile picture. If you do, we store the image on our own servers, not on a third party's, and it replaces the Google picture wherever your profile appears. Every upload is re-encoded before it is stored, which removes camera metadata such as GPS location, and we keep only that re-encoded copy — never the original file. Your profile photo is visible to other users beside your name in community posts, published strategies and messages, and can be reported by them like any other content. You can replace or remove it at any time from your profile, and it is deleted with your account.

Information from your use of the app: your AI chat history and the questions you ask, stock screener queries, watchlists, portfolio data you track, in-app actions, and your subscription/purchase status. We assign an internal account identifier to your account.

How you found us: when you create an account, we record the referring website (domain only) and the first page your browser landed on, including any campaign tags in its address, so we can understand which channels bring users to Plutrex. This is captured once in your browser, kept for up to 90 days before signup, never shared, and deleted with your account.

Voice messages: if you record a voice message, the audio is sent to our transcription provider (OpenAI) to convert it to text. The audio recording is not stored — only the resulting text transcript is kept as part of your chat.

Brokerage connection (Pro): if you choose to connect your own supported brokerage account (currently Interactive Brokers or Colmex Pro) for live trading, we collect and store your brokerage login credentials in encrypted form, along with your brokerage and portfolio data, solely to route the orders you place to that broker and display your holdings. Plutrex is not a broker, does not hold your funds, and does not execute trades itself — your broker does, at your direction.

Push notifications: if you enable notifications, we store a device push token (Firebase Cloud Messaging) to deliver them.

Service providers who process data on our behalf: OpenAI (AI analysis and voice transcription), Google Firebase (push notifications), and our payment processors — Google Play Billing for in-app purchases on Android and Cardcom for web payments. Market data comes from Financial Modeling Prep and contains no personal data. We do not sell personal data to advertisers or data brokers, and the app contains no ads.

Security: all data is encrypted in transit (HTTPS/TLS), and sensitive credentials are encrypted at rest. We do not collect government IDs, precise location, contacts, or health data.

Your choices and deletion: you can permanently delete your account and all associated data at any time from Settings → Delete Account (in the app or on the website at /delete-account), or by emailing support@plutrex.com. Deletion is immediate and irreversible; certain payment records may be retained where required by law.

For questions about this policy, contact support@plutrex.com or visit /contact.