Privacy

Account. When you sign in with Google, we receive your Google email address and user ID through Supabase Auth. We do not request access to your Google contacts, Drive, calendar, or any other Google data.

Portfolio data. Anything you type into Pardis: asset names, classes, quantities, prices, target allocations, goals, and net-worth snapshots over time.

Operational data. Standard server logs (route, timestamp, status code) used to keep the service running. We do not log the contents of your portfolio.

Your portfolio data is stored in a Supabase Postgres database with row-level security. The database is configured so that each user can only read and write their own rows. The application layer also checks ownership on every request.

The Pardis web app is hosted on Vercel. Vercel sees the same data in transit as any HTTPS host would; it does not store your portfolio.

Google. Used for sign-in via Supabase Auth. Google receives only the standard OAuth handshake.

CoinGecko. Used to fetch live crypto prices. We send only the asset ticker or CoinGecko ID — never your account, holdings, or quantities.

Finnhub. Used to fetch live stock prices and search. We send only the equity symbol — never your account, holdings, or quantities.

We don't sell your data. We don't use it to train models. We don't share it with advertisers, brokers, or any third party for purposes other than running Pardis. We don't serve ads.

Your portfolio data is kept for as long as your account exists. If you would like your account and all associated data deleted, email us at pardis.walled.garden@gmail.com and we will remove it.

Pardis helps you visualise your own portfolio and understand allocation drift relative to the targets you set. It is not financial advice. Investment decisions are yours alone.