Privacy Policy

We collect information you provide directly when creating an account, including your name, email address, and portfolio data you choose to input. We also automatically collect usage data such as IP address, browser type, device information, and interaction patterns within the platform. Financial data you enter — including ticker symbols, share quantities, and portfolio allocations — is processed locally in your browser and stored in your browser's localStorage. We do not transmit your portfolio holdings to our servers unless you explicitly opt into cloud sync features.

We use your information to provide, maintain, and improve Soavalon's risk analytics services. Specifically, we use your data to: • Deliver portfolio risk calculations including VaR, Expected Shortfall, and stress testing • Fetch market data from third-party financial APIs on your behalf • Personalize your dashboard experience and remember your model configuration preferences • Send transactional emails related to your account (e.g., password resets, security alerts) • Analyze aggregate usage patterns to improve our platform's performance and features We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your portfolio data is primarily stored in your browser's localStorage and is not transmitted to our servers during standard usage. When you use cloud features, data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. We implement industry-standard security measures including: • End-to-end encryption for all data transmissions • Regular security audits and penetration testing • Access controls and authentication via secure session tokens • Automated monitoring for unauthorized access attempts While we strive to protect your data, no method of electronic storage is 100% secure. We encourage you to use strong passwords and enable two-factor authentication when available.

Soavalon integrates with third-party services to provide market data and analytics. These include: • Yahoo Finance API — for real-time and historical stock prices, used to compute returns, volatility, and correlations • Authentication providers — for secure sign-in (Google, GitHub OAuth) • Analytics services — for anonymous usage metrics to improve our platform These third-party services have their own privacy policies. We recommend reviewing them. We only share the minimum data necessary for these services to function (e.g., ticker symbols for price lookups). We never share your portfolio allocation or personal financial strategy with any third party.

You have the right to access, correct, or delete your personal data at any time. You may also: • Export your portfolio data in standard formats (CSV, JSON) • Request a complete copy of all data we hold about you • Opt out of non-essential communications • Delete your account and all associated data permanently • Withdraw consent for data processing where applicable For users in the European Economic Area (EEA), you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

Soavalon uses essential cookies to maintain your session and remember your preferences (e.g., dark mode, model configuration settings). We use localStorage extensively for client-side portfolio data persistence. We do not use third-party advertising cookies. Optional analytics cookies help us understand usage patterns and are only activated with your consent. You can manage cookie preferences at any time through your browser settings or our cookie consent banner.

We retain your account information for as long as your account is active. Browser-stored data (localStorage) persists until you clear your browser data or explicitly delete it through the application. Server-side data, if applicable, is retained for up to 12 months after account deletion for legal and compliance purposes, after which it is permanently purged.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: • Email: omgcraft0@gmail.com • Address: Soavalon Risk Analytics, 233 S Wacker Dr, Suite 400, Chicago, IL 60606 We will respond to all data-related requests within 30 days.