Privacy Policy

1. Who we are

罗旭彬 ("we", "us") is the data controller for personal data processed through FolioFlow. You can reach us at support@erenverse.com.

2. What we collect

• Account data: your email address and an authentication identifier (passwords are stored hashed by our auth provider, never by us in plain text).
• Portfolio data: the holdings, quantities, cost bases, tags and notes you enter, and your app preferences (language, currency, theme).
• Usage data: basic technical and performance measurements (for example page load timings) used to keep the Service healthy.
• Billing data: when you subscribe, our payment provider Creem processes your payment details. We receive only limited subscription metadata (plan, status, period end) and a customer identifier — we never see your full card number.

3. How we use your data

• To provide the Service and show your portfolio.
• To authenticate you and keep your account secure.
• To manage subscriptions and grant paid features.
• To respond to support requests.
• To monitor reliability and prevent abuse.

4. Legal bases

Where the GDPR applies, we process your data on the basis of contract (providing the Service), legitimate interests (security, reliability, abuse prevention), legal obligation (tax and accounting records) and, where required, consent (for example optional analytics). You may withdraw consent at any time.

5. Cookies and local storage

We use a session cookie for authentication and browser local storage for preferences and cached portfolio data. We do not use advertising cookies. You can clear this data from your browser at any time; clearing the session cookie signs you out.

6. Sharing and sub-processors

We share data only as needed to run the Service, with providers bound by data-processing agreements:

• Supabase — authentication and session management.
• Cloudflare — hosting, edge compute, database and caching.
• Resend — transactional email (password reset, notifications).
• Creem — payment processing and Merchant of Record for subscriptions.
• Market-data providers — receive only asset symbols, never your identity.

7. International transfers

Our providers may process data in countries other than yours. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Retention

We keep your account and portfolio data while your account is active. When you close your account we delete or anonymise your personal data, except where we must keep records (for example tax and accounting data related to payments) for the period required by law.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to lodge a complaint with your local authority. You can close your account and delete your data from Settings → About → Close account, or contact us at support@erenverse.com.

10. Security

We use encryption in transit, hashed passwords, signed sessions and least-privilege access. No system is perfectly secure; please use a strong, unique password.

11. Children

The Service is not intended for children under 16, and we do not knowingly collect their personal data.

12. Changes to this policy

We may update this policy. Material changes will be announced in the Service or by email before they take effect.

13. Contact

For any privacy question or request, contact support@erenverse.com.