1. Who we are
PinkGuava is a portfolio-tracking service that brings your brokerage accounts from several countries into one dashboard. It is operated from Ontario, Canada. In this policy, "PinkGuava", "we" and "us" mean the operator of the PinkGuava website (pinkguava.co) and app (app.pinkguava.co).
We are responsible for the personal information described here. Our contact for privacy questions and requests is hello@pinkguava.co.
2. What we collect
| What | Details | Where it comes from |
|---|---|---|
| Account details | Email address and a password you set. Your password is handled by our login provider and is never visible to us in plain text. | You |
| Access request | Email, and the name and note you choose to add when you ask for access. | You |
| Broker and account data | The accounts you connect, and the holdings, quantities, cost, prices, balances and currencies we can read from them. | Your broker, through SnapTrade, after you give consent |
| Data you add yourself | Manual positions, CSV or pasted holdings, notes, watchlist items, sector overrides, and anything you import from a statement. | You |
| Imported files and screenshots | Images or text you upload so we can read holdings from them. Indian consolidated account statements (CAS) are opened with your PAN, which is used only to unlock the file while it is read. | You |
| Guava AI | Your questions, the answers, and any feedback you give on an answer. | You and the AI model |
| Settings and plan | Reporting currency, theme, notification choices, time zone, plan type, and daily usage counts used to apply plan limits. | You and the app |
| Support reports | The message you write in Help & support, an optional screenshot, and basic context such as the page and device type. | You and the app |
| Website visits | Page views and general device and country information from privacy-friendly analytics on pinkguava.co. No advertising or tracking cookies. See Cookies. | Your browser |
| Journal followers | If you joined the follow-along list on the founder's journal: name, email, country, experience level, the reason you gave, and your consent. | You |
We do not collect your broker login or password, your government ID (other than the PAN described above, which we do not keep), or payment card details. We do not use your contacts, location or microphone.
3. How we use it
- To run the service: sign you in, sync and show your portfolio, convert currencies, calculate returns, and keep your data accurate.
- To send what you ask for: daily briefings, end-of-day digests, weekly outlooks and price alerts, only when you turn them on.
- To answer your questions: Guava AI uses your portfolio details so its answers are about your holdings.
- To keep things safe and fair: prevent abuse, apply daily limits, investigate problems and fix bugs.
- To support you: reply to access requests and support reports.
- To meet legal duties: for example, keeping records of a security incident.
We do not sell your personal information. We do not share it for advertising. We do not build advertising profiles.
4. Who we share it with
We use a small set of service providers to run PinkGuava. They may handle your information only to provide their service to us. The full list, with what each one does and the data it receives, is on our vendors page. In short:
- A database and login provider stores your account and portfolio data.
- SnapTrade connects to your broker, with your consent, and holds the broker link.
- An AI provider reads your questions and, for imports, your screenshots or text.
- An email provider delivers the emails you ask for.
- A hosting and network provider serves the website and app.
- Market-data providers receive stock symbols only, never your name, email or holdings amounts.
We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or reorganisation of the business, in which case this policy would continue to protect your data or you would be told of any change.
5. Guava AI and your data
When you ask Guava AI a question, we send the AI provider your question, recent messages from your chat, and a summary of your portfolio. The summary can include holdings, values, sector and country breakdowns and recent headlines about your stocks. On plans that include live search, the AI provider may also run web searches using words from your question.
When you import a screenshot or pasted text, the image or text is sent to the AI provider so it can read the holdings. You review the result before anything is saved.
How the AI provider treats this information is set by its own terms for business customers, linked on our vendors page. Read more about what Guava AI is and is not on the AI and not-advice page. You can delete your chat history in the app.
6. Where data is processed
PinkGuava is run from Canada, but our providers operate data centres and support teams in Canada, the United States and other countries. Your information may be stored or processed outside the country where you live, and may be accessible to courts and authorities in those countries under their laws. We choose providers with security commitments and we keep the list of them public.
7. How long we keep it
- While your account is open: we keep your portfolio data, history and settings so the app works.
- When you delete your account: in the app, your data is removed from live systems and your broker link at SnapTrade is removed straight away. If you ask by email instead, we aim to do this within 30 days.
- Backups: copies in backups roll off on a schedule. We aim for no more than 35 days. Deleted data is not restored except to recover from a failure.
- Access requests that were not approved: kept for a short time so we can answer follow-ups, then removed on request.
- Records we must keep: for example a log of a security incident, kept without more personal data than needed.
8. Your rights and choices
Whatever law applies to you, we will do the following on request:
- Access: tell you what we hold about you and give you a copy.
- Correct: fix information that is wrong.
- Export: give you your portfolio data in a common file format. In the app, use "Download my data" in Help & support.
- Delete: delete your account and data, as described above. In the app, use "Delete my account" in Help & support.
- Withdraw consent: disconnect a broker, turn off any email, or stop using a feature at any time. In the app, use Connected accounts and Notifications.
- Complain: to us first, and to your regulator if you are not satisfied.
You can export or delete your data yourself in the app, under Help & support. For any other request, or if that does not work, email hello@pinkguava.co with the subject "Privacy request" from the email address on your account. We may ask you to confirm it is you. We aim to reply within 30 days. There is no charge for ordinary requests.
Disconnecting a broker stops syncing and removes the link at SnapTrade. It does not change anything in your broker account.
9. Notes for your region
Canada. We handle personal information under Canada's federal private-sector privacy law (PIPEDA). If a breach of our systems creates a real risk of significant harm to you, we will tell you and report it as the law requires. You may complain to the Office of the Privacy Commissioner of Canada.
Quebec. If you live in Quebec, you may ask us to stop using technology to profile you, to review decisions made only by automated means, and to hear how your information is used. Our contact above also serves as the person responsible for privacy.
India. Under India's Digital Personal Data Protection Act, you may give, manage and withdraw consent, ask for access, correction and erasure, and name someone to act for you. Write to us at the address above.
Singapore. Under the Personal Data Protection Act, you may ask to see and correct your personal data and withdraw consent. Write to us at the address above.
European Economic Area and United Kingdom. We rely on your consent and on our need to provide the service you asked for. You also have the right to object, to restrict processing, and to complain to your data protection authority.
California and other US states. You may ask what we collect, and to delete or correct it. We do not sell or share personal information for advertising. We will not treat you differently for making a request.
10. Age
PinkGuava is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you think a child has given us information, tell us and we will delete it.
11. Changes to this policy
We may update this policy as the product changes. We will change the date at the top. For material changes, we will email you or show a notice in the app before they take effect.
12. Contact
Questions, requests or complaints: hello@pinkguava.co. We read every message.