Privacy Policy

• Your account: your name and email address. Accounts are run by Microsoft Entra External ID, which stores your password. When you sign up or sign in with a password on this site, our server passes it on to External ID; we don't store or log it.
• If you sign in with Google: your name, email address and Google account ID, which Google shares with your permission. We don't get your Google password or any other Google data.
• Your profile: your display name, time zone, base currency, and your Trading Profile (risk tolerance, investment horizon, experience and goals). Also your single-position limit.
• Your positions and watchlists: for each portfolio, its base currency and cash, and for each position its ticker symbol, asset type, quantity, and average cost if you add one. Your watchlists hold the symbols you follow.
• Your chats: your messages and the assistant's replies, the cards shown in them (research cards, comparison cards, and positions it asks you to confirm), the web sources a reply used, and daily summaries the assistant writes of each day's chats so it can recall earlier conversations.
• Technical logs: the pages and API calls requested, how long they took, and errors, so we can keep the service working.

• To run your account, answer your messages, and show you research, your signals, your calendar and your exposure based on what you hold.
• To keep Volamind secure and fix problems.
• We don't sell your information, we don't show ads, and we don't use your information for advertising.

Volamind's replies are written by an AI model that runs on Microsoft's Azure OpenAI service. When you send a message, we send Azure OpenAI your message and the chat's recent messages, along with the context the assistant needs to answer you: your display name, time zone, base currency, Trading Profile and single-position limit, positions (with cash) and watchlists with the latest research on each, and the daily summaries of earlier chats. It also sees the titles of other chats you used today, and when it needs to, it can search and read messages and cards from all your other chats. We don't send your email address. The same service writes chat titles, daily summaries and the text on research cards.

Images you attach in chat, such as a screenshot of your brokerage holdings, are sent to Microsoft Azure OpenAI only to read your holdings for that reply and are not stored by Volamind; your chat keeps only a note that an image was attached.

We ask Azure OpenAI not to keep the conversation once it has replied. Under Microsoft's terms, what we send and what the model writes back are not made available to OpenAI or other customers, and are not used to train or improve AI models without our permission. Microsoft runs automated checks for misuse; if those checks flag a pattern of abuse, Microsoft may store a sample of requests and replies and have authorized staff review it. Read Microsoft's data, privacy and security terms for Azure OpenAI.

When a question needs recent news or dates that the research doesn't cover, the assistant may search the web with Microsoft's hosted web search, which uses Grounding with Bing Search. The only thing sent to Bing is the search query the assistant writes, with our service key for billing. Your name, email address and account aren't sent, but a query can include what you asked about, such as a company name. These searches are covered by the Grounding with Bing terms and the Microsoft Privacy Statement rather than Microsoft's Azure data protection terms, and may be processed outside the United States.

Research reports are made by our research service, TradingAgents. It receives only a ticker symbol and asset type, never anything about you. Each report is shared by every investor who holds or asks about that instrument, and it doesn't know who asked or what anyone holds.

Market-data and research-data providers receive ticker symbols, dates, general topics, or the text you type into the instrument search when you add a position. They supply prices, quotes, company details, filings, earnings and dividend dates, and economic data. They never receive your name, email address, account or holdings.

• Microsoft, which hosts Volamind on Azure and stores its database and logs, runs sign-in (Entra External ID), runs the assistant's AI model (Azure OpenAI) and web search (Bing), and sends our emails (Azure Communication Services).
• Azure Communication Services sends the one-time codes we email you, for example to confirm your email address or reset your password. It receives your email address and the code.
• Google, only if you choose to sign in with Google.
• Market-data and research-data providers, which receive no personal information.
• Nobody else, unless the law requires it.

Volamind runs on Microsoft Azure in the West US 3 region, in the United States: the website, the API, the database, the research service and the logs. Sign-in accounts and emails are kept in the United States.

The Azure OpenAI resource is in the United States (East US 2) and uses a global deployment, so Microsoft may process a request in any region where the model runs. Anything Microsoft stores for it, such as data kept for abuse monitoring, stays in the United States. Web searches go to Bing, as described above.

• Encrypted sign-in cookies that keep you signed in: until you close your browser or, when you stay signed in, for up to 30 days after you last used Volamind. A short-lived cookie holds a sign-in while it's in progress, and another remembers sessions you signed out of so they can't be reused. They're needed for signing in and aren't used for tracking.
• In your browser's storage: your light or dark theme choice, and whether you've opened the Calendar tab.
• No advertising or third-party tracking cookies.

We keep your information while you have an account, and after you close it.

Closing your account in Settings turns off your sign-in, so that email can't be used to sign in or sign up again.

Database backups keep copies for 7 days, and technical logs are deleted after 30 days.

Deleting a single chat erases its messages and the daily summaries of the days it covered.

• You can see and change your profile, Trading Profile, positions and watchlists in the app, delete chats, and close your account.
• To make a privacy request, send us a request through the contact form. We answer as the law requires.
• You can remove Volamind's access to your Google account at any time in your Google Account settings.

Volamind's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to sign you in and set up your account.

Volamind is not for anyone under 18, and we don't knowingly collect information from them. If you believe someone under 18 has an account, send us a request through the contact form and we'll delete it.

When this policy changes, we'll update it here and change the date at the top. If a change is material, we'll also tell you by email or in the app.

Questions about your information or this policy? Use the contact form, or email privacy@volamind.com. You can also complain to the data protection authority where you live.