Privacy policy

Updated September 12, 2026. Unified Portfolio is operated by Sarthak Agrawal. Contact: sarthakagrawal927@gmail.com.

Information and purpose

Google sign-in requests basic profile, email and identity information to authenticate you. We retain your verified Google identifier and email in an encrypted session. We do not request Gmail, Drive or contacts access, and do not retain Google access tokens.

When you connect a supported broker, we store its authorization encrypted server-side and retain normalized investment observations to display your portfolio and history. Connection and sync records help diagnose failures.

Storage and sharing

Cloudflare Workers and D1 host and process this information. Google and connected brokers process authentication under their own policies. Other users cannot access your workspace. We do not sell your data or use it for advertising.

An AI client receives read-only portfolio information only after you authorize its MCP access. That client's own privacy policy applies to information it receives. You can revoke MCP access in Settings.

Retention and control

Sessions expire after 12 hours. Signing out invalidates your session. Disconnecting a broker removes its local credentials; historical observations remain. Contact the email above to request deletion of retained account and portfolio data. We may need to verify your identity before handling that request.

Essential secure cookies maintain authentication. No advertising analytics are enabled. Policy changes will be published here with an updated date.