Privacy Policy

Information we collect

• Account information — email address and password (or, if you sign in with Google, your name, email, and profile photo from your Google account).
• Profile — display name and an optional avatar photo you upload.
• Financial data you enter — manual assets (institution, category, balance), stock holdings, and net worth snapshots used to build your dashboard and history charts.
• Exchange API keys — if you connect a crypto exchange (e.g. Indodax) to sync balances automatically, your API key and secret are encrypted before being stored and are only ever decrypted server-side to fetch your balance.
• AI advisor conversations — messages you send to the AI advisor, along with a summary of your portfolio, so it can give you relevant answers.

We don't collect bank credentials, card numbers, or government ID.

How we use it

Solely to run the app: showing your dashboard and history, syncing exchange balances you connect, and powering the AI advisor. We don't sell your data or use it for advertising.

Who we share it with

We rely on a small set of infrastructure providers to run Asetly:

• Supabase — hosts our database, authentication, and file storage (avatars).
• Vercel — hosts the web app and API.
• OpenAI — processes your messages and portfolio summary to generate AI advisor replies.
• Google— used only if you choose “Sign in with Google”.
• Indodax(or another exchange you connect) — receives API calls made with your own key to read your balance; we don't share your Asetly account data with them.

Security

• All traffic is encrypted in transit (HTTPS).
• Exchange API keys are encrypted at rest and never returned to the client in plain text.
• On mobile, your session is stored on-device using AES-256-GCM authenticated encryption.
• Database access is restricted by row-level security — your data is only ever readable by you.

Your choices

You can edit or delete your manual assets, stocks, and exchange connections at any time in the app. You can also delete your account and all associated data yourself, instantly, from Profile in the app or on the web — no waiting required. If you'd rather email us instead, we'll process the request within 30 days.

Children's privacy

Asetly isn't directed at children under 13, and we don't knowingly collect their data.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you in the app.

Contact

Questions or a data deletion request? Email hello.asetly@gmail.com.