Privacy Policy
Investment Summary is a private, non-commercial tool operated by one individual for their own household. It emails each person a daily summary of their investment account values. It is not offered to the public, it is not advertised, and there is no sign-up: an account exists only because the operator created it for a named family member.
What is collected
When you connect an institution through Plaid Link, this service receives from Plaid your investment holdings and investment transactions for the accounts you selected, together with the institution's name and a durable access token. The service stores daily account and institution values and observed balance changes. New snapshots also retain individual security names and tickers, quantities, prices, valuation dates, currencies, values, and internal Plaid account and security identifiers. Transaction dates, descriptions, types and amounts are retained alongside measured holding changes to explain price movements and cash activity. Earlier snapshots are not reconstructed.
Separately, the operator records the email address, send time and time zone for each recipient, plus closing-check attempts, readiness times and delivery outcomes.
What is never collected
- Your bank or brokerage credentials. You enter those inside Plaid Link; this service never sees them.
- Your name, address, date of birth, government identifiers, or account numbers. These are not requested from Plaid and are not stored.
There is no advertising, no profiling, and no analytics or tracking of any kind. Nothing is sold or shared for marketing, ever. Outgoing email contains no tracking pixels and no rewritten links, so opening or reading it is not recorded.
Cookies
One cookie is used, and only to keep you signed in. It holds a random identifier — no personal information — and exists solely so the site can recognise your browser between page loads. It is marked HttpOnly (unreadable by scripts), Secure (sent only over HTTPS) and SameSite=Lax (not sent from other sites).
It is strictly necessary for signing in, is not used for any other purpose, and is not shared with anyone. Signing out deletes it and revokes the session on the server at the same time.
Who else receives data
| Recipient | What they receive | Why |
|---|---|---|
| Plaid | your connection to your institution | to retrieve holdings and investment transactions |
| Anthropic | institution names, balances and balance history, comparison and valuation dates, selected holding movements (security names, tickers, quantities, prices and contributions), and transaction descriptions, dates, classifications and amounts | to explain holding movements and cash activity in the email |
| Anthropic web search and its search providers | public security names, tickers, valuation intervals, and the percentage the price moved over them | to research dated, cited news for the holdings that moved your figure most |
| Resend | your email address and the message, including holding and cash commentary and news citations when available | to deliver the email |
| Sentry | error text, institution names, internal identifiers, and — when a failure happens in your browser rather than on the server — the page address and your browser version. No balances, and no session replay | to detect failures |
| Railway | hosts the application and database | infrastructure |
Commentary requests do not include stored Plaid access tokens or internal Plaid account and security identifiers. The separate news research request contains only public security names, tickers, valuation intervals and the public percentage price move over each interval — facts anyone holding the ticker and the dates can work out — without portfolio balances, quantities, transaction descriptions, institution names or your identity.
How long data is kept
- Daily value snapshots, including their holding and transaction evidence, and email records, including commentary and news citations: 24 months, after which they are deleted automatically by the daily job.
- Your Plaid access token: until you unlink the institution or ask for deletion, at which point it is revoked with Plaid and removed.
- Your email address and preferences: until you ask to be removed.
- Sign-in links: 10 minutes, and they stop working the moment they are used. Sign-in sessions: 90 days from your last visit, or immediately when you sign out. Both are stored only as a one-way hash, so the database does not hold a value anyone could sign in with.
How data is protected
All network traffic uses TLS. The Plaid access token is encrypted at rest with AES-256-GCM under a key held only as a platform environment variable. The database is not reachable from the public internet, and the operator's hosting and source accounts both require multi-factor authentication.
Your choices
- Exclude an account from your email without unlinking it.
- Stop receiving email at any time.
- Delete everything. The access token is revoked with Plaid and every row relating to you — accounts, snapshots, send history and your user record — is deleted. This is done within 30 days of your request, normally the same day.
- Ask what is held about you and receive a copy.
You can also revoke this service's access directly at my.plaid.com or with your institution.
Contact
Requests and questions: jasonaleibowitz@gmail.com