Privacy Policy

Version 2026-09-07 · effective 7 September 2026

Operator details are being finalised; this page will name the operating entity, its state, and a mailing address.

What we collect

Account details — your email address and login credentials, handled by our authentication provider (Clerk). Billing details — handled entirely by Stripe; Backvest receives only your subscription status, never your card number. Your content — the portfolios, searches, and settings you create in the app, stored so they're there when you come back. Basic server logs — normal web-server records of requests, kept for debugging and security for approximately eight weeks under the current log-rotation policy.

What we use it for

To run the service: authenticate you, save and show your portfolios, run backtests you request, bill the correct amount, and send transactional email (such as the weekly digest, if you receive it). We do not use your portfolio data to build profiles about you or to inform anyone else's results.

What we don't do

We do not sell your personal data, and we do not share it with advertisers. There are currently no third-party advertising or analytics trackers embedded in the app.

Who else processes your data

A small number of providers, each only for their specific function: Clerk (authentication), Stripe (payments), Resend (transactional email), and Cloudflare (network routing to the service). Each has its own privacy policy governing what it does with the data it handles.

Where your data lives

Application data is stored in a database operated directly by Backvest rather than on a large cloud platform. It is protected by access controls and reachable only through the application, but you should know it is a small, self-operated setup rather than a hyperscale provider.

How long we keep it

Account and portfolio data is kept while your account exists. If you ask us to delete your account, we remove your personal data and portfolios from the live service, except where a record must be retained for legal or accounting reasons (for example, records of payments). Deleted records may remain in rotating backups for up to 14 days before those backups expire. Backups are used only for disaster recovery; if a restore temporarily reintroduces deleted records, the deletion will be reapplied.

Your choices

You can view and edit your portfolios and profile in the app at any time, and cancel your subscription from Manage billing in Settings. To request a copy of your data or ask for your account and data to be deleted, email [email protected] and we will action it.

Cookies

Backvest uses cookies that are necessary for the service to work — principally the session cookie that keeps you signed in, and a preference cookie remembering your light/dark theme. There are no advertising or cross-site tracking cookies.

Changes and contact

If this policy changes materially, the “last updated” date below will change. Questions about privacy or your data: [email protected].