Privacy policy

Last updated: 28 July 2026

This policy explains what data Stoqfolio collects, why it collects it, and what you can do about it. It is written to be read, not to be signed blind.

Who handles your data

The data controller is Poncia Manuel — P. IVA IT 18375851005, registered at Via Pietro Campana, 8 - 00044 Frascati (RM) - REA RM-1780706. For anything concerning your data, write to hello@stoqfolio.com.

What we collect

Data you give us

Email address — used to sign in. Sign-in works with a six-digit code sent by email: there is no password to look after.
Portfolio data — holdings, quantities, prices, transactions, fees, accounts and anything else you enter or import from a broker file. This is the most sensitive data we handle, and it is never sold or shared.
Social profile — if you turn on the Follow room: public name, handle, bio, profile picture.
Content you publish — whispers, replies, reactions, mentions.
Preferences — theme, language, base currency, alerts you set up.

Data collected automatically

Minimal technical data needed to run the service and keep it secure.
We use no advertising trackers, we do not profile you for marketing, we do not sell data, and we show no ads.

Why we process it

To provide the service (legal basis: performance of a contract) — computing your portfolio value, returns, dividends and tax estimate.
To keep the service secure (legitimate interest) — preventing unauthorised access and abuse.
For notifications (consent) — only if you turn them on, and you can withdraw consent any time from your device settings.
For moderation (legitimate interest and legal obligation) — handling reports about user-generated content.

Who we share it with

We do not sell your data. We rely on providers who process it on our behalf, as data processors:

Supabase — database and authentication.
Vercel — application hosting.
Amazon Web Services — the service that refreshes prices and alerts.
Market data providers — to fetch quotes and history we transmit the symbols you follow or search for, never your identity nor the quantities you hold.
An artificial intelligence provider — if you use the Morning Brief, the summary is generated by a language model, which receives the data needed to write it.

Some of these providers may process data outside the European Union: Vercel, Amazon Web Services and the AI provider are companies based in the United States. Where that happens, the transfer relies on the standard contractual clauses approved by the European Commission. An up-to-date list of providers is available on request at hello@stoqfolio.com.

How long we keep it

For as long as your account is active. When you delete it, the associated data is erased; only records we are legally required to keep, or that are needed to handle an open report, remain — and only for as long as strictly necessary.

Your rights

At any time you can ask to access your data, to correct it, to erase it, to restrict its processing, to take it elsewhere, and to object to processing based on legitimate interest. Write to hello@stoqfolio.com: we answer within one month.

You can also export all your transactions to a spreadsheet straight from the app, and delete your account from Settings › Danger zone, without asking anyone's permission.

If you believe your data is being mishandled, you can complain to the Italian data protection authority (garanteprivacy.it) or to the supervisory authority in your country.

Minimum age

Stoqfolio is not intended for anyone under 14, and we do not knowingly collect their data.

Changes

If this policy changes materially, we tell you inside the app before the change takes effect.