Privacy Policy
Last updated October 2026 (private beta).
Draft. Needs legal review before any deployment beyond the invite-only beta.
1. Private beta and access
FAMADOR is an invite-only private beta. Accounts are created only with a valid invitation issued by the product owner. Invitation codes are stored as cryptographic hashes — the code itself is never retained. By default there is no open self-registration.
2. What we collect
When you create an account, we store your username, email (unverified), optional display name, and a salted hash of your password. We never store plaintext passwords. While you use the product we also store, per account: investor-profile questionnaires (including age, income, goals, risk answers, budget and currency), your portfolios, positions and cash balances, model proposals you create or accept, your watchlist, recent security views, and an audit trail of account events. All of it is private to your account and never shown to other users.
3. How we use it
Your data is used to operate the Service and protect its security. We use your profile inputs to compute a risk score and build a portfolio allocation. We do not sell your data to third parties.
4. Sign-in records
Account creation, sign-in events (successful and failed), and terms acceptance are logged with a timestamp and IP address. Session tokens are never logged, and neither are passwords or invitation codes. These records are visible to the account holder via the Audit panel.
5. External providers
If you sign in with Google, the provider receives your client IP and the standard OAuth signals. FAMADOR receives only what the provider asserts plus ordinary request metadata. The provider never shares your password with us.
6. Market data
Market prices, exchange rates, and news headlines come from third-party providers (Yahoo Finance, open.er-api.com) and may be live, delayed, cached or a committed snapshot. Each figure carries a provenance label. These providers may receive standard request metadata when the Service fetches data on your behalf. FAMADOR does not execute trades and never moves money.
7. Data retention
Account data and audit events are retained for the lifetime of the account, and are deleted with it. No longer retention period has been set. A formal retention policy requires legal review before wider deployment.
8. Your rights — export and deletion
You can export your own data at any time (GET /api/account/export while signed in), and you can permanently delete your account and all of its data with your current password and an explicit confirmation (DELETE /api/account). Deletion removes your profile, portfolios, positions, proposals, watchlist, recent views and audit trail in one transaction; it cannot be undone.
9. Not financial advice
The Service is for educational purposes. It is not personalized financial advice. You make all investment decisions yourself. Investing involves risk, including possible loss of all capital invested.
10. Support and security reports
For support during the beta, contact the person who invited you (the product owner). To report a security issue, email the owner with “FAMADOR security” in the subject line; please do not include live passwords or tokens.
For educational purposes. Not personalized financial advice. Investing involves risk, including possible loss of capital.