Privacy policy

Lucrum is read-only

Lucrum reads your accounts. It can't place trades, move money or change anything at your broker, exchange or wallet.

We never ask for your broker or exchange password. You sign in at the provider or give us a read-only key, and we refuse a key that can trade or withdraw when the provider shows us what it can do.

What we store

Your sign-in

Clerk keeps your email address, name and sign-in methods. Our database keeps a random ID linked to your Clerk account, your reporting currency and your plan.

Access to your sources

The tokens or read-only keys a provider gives us, encrypted before we store them. For Interactive Brokers, the Flex token and query ID you enter, encrypted the same way.

Holdings and activity

Positions, quantities, costs, transactions and balances, and the daily values and history we work out from them. Account numbers only as their last few digits, when the provider shows them.

What you add

Assets and debts you enter yourself, the details of a home you add, portfolios, radars and share cards.

Chat

Your questions and Lucrum's answers. Email addresses, wallet addresses, ID numbers and account-like numbers are masked before a question is stored or sent.

Screenshots you import

We read the image once and keep the rows we take from it, not the image.

Raw provider responses

A copy of what a provider sent, such as an Interactive Brokers statement, encrypted on the app server's disk. That disk is cleared whenever the server restarts or a new version ships.

The waitlist

If you join it: your email address, the link that brought you and a one-way hash of your IP address.

Why we store it

To show your holdings and their value, keep your history, run your radars and alerts, and answer your questions in chat. Daily values and alerts run while the app is closed, so the data has to be stored.

We don't sell your data, show ads or use analytics trackers.

Cookies

Clerk sets the cookies that keep you signed in. Lucrum sets three of its own: whether amounts are hidden and which portfolios you picked, kept a year, and the link that brought you here, kept 30 days.

There are no advertising or analytics cookies.

Where it's stored

Our database and app servers run on Railway in Singapore. Cloudflare carries traffic to lucrumfinance.ai and never stores the pages that show your data.

Clerk stores sign-in data in the United States. Sentry receives error reports in the United States.

Who else handles it

Each of these gets only what its job needs.

Clerk

Your email address, name and sign-in methods, to sign you in.

SnapTrade

The link to the brokerage accounts you connect through it. We give SnapTrade a random ID, not your name or email address.

moomoo, Tiger Brokers, Interactive Brokers, Coinbase and other exchanges

The read access you grant at each of them.

Zerion and mempool.space

The public wallet addresses you add, to read their balances.

Market data and news providers

Ticker symbols and company names, never who holds them.

data.gov.sg

The town, flat type and street of a home you add, to find comparable prices.

Anthropic

Your chat questions and the figures behind each answer, with amounts, quantities and account names replaced by placeholders, and the screenshots you import. Anthropic doesn't train its models on this data.

Sentry

Error reports with the error type and the page or route. No request data, IP addresses or values.

Better Stack

Checks that the site is up and that daily jobs ran. It gets no data about you.

Railway and Cloudflare

Hosting and the network, as above.

How long we keep it

While your account is open, we keep what's listed above.

Disconnect a source and we delete its stored access and raw responses, and its positions leave your totals. The history already read from it stays until you delete your account.

Delete your account and we delete everything linked to you in our database at once, along with your Clerk sign-in and your SnapTrade user.

Database backups are kept 6 days, so deleted data leaves the backups within 6 days. A record that the deletion happened stays, without your name or email address.

Waitlist entries stay until we invite you or you ask us to remove yours.

Delete or get your data

Settings has Delete account, which removes everything above. To stop reading one source, open it in Accounts and choose Disconnect.

For a copy of your data, a correction or any other question, email support@lucrumfinance.ai.

Security

Every connection to Lucrum uses HTTPS. Provider tokens and keys are encrypted with a key that exists only in our hosting environment.

Children

Lucrum is for people 18 and over. We don't knowingly hold data about anyone younger.

Changes to this policy

When this policy changes, the date at the top changes. If a change affects what we store or who handles it, we tell you in the app before it applies.