Portfolio Manager — Privacy Policy

Effective date: 1 November 2026

Portfolio Manager is a private investment portfolio dashboard operated by Nir Sidi. Contact: seaontrip@gmail.com.

Information used by the application

The dashboard stores portfolio information supplied by its operator, account settings, notification preferences and delivery records. Access to the private dashboard requires authentication. Operational security records may include sign-in and request information.

Google account access

Connecting Gmail is optional. With your consent, Portfolio Manager requests openid and email to verify the identity and email address of the connected sender, and https://www.googleapis.com/auth/gmail.send to send the portfolio notifications and test messages you request. It does not request permission to read your inbox, list existing messages, access contacts or delete your mail.

The application stores the sender address, Google OAuth client settings and a refresh token so that scheduled notifications can be sent while the dashboard is closed. The client secret and refresh token are encrypted in the application database. Short-lived access tokens are held in server memory. Google receives the recipient, subject and body of each outgoing message; messages may contain portfolio-related alerts selected by the operator. Google processes and stores sent mail according to your Google account settings.

Use and sharing

Google account information is used to identify the authorized sender and deliver the requested messages. It is not sold, used for advertising, used to train generalized AI models or sent to portfolio AI analysis features. The application uses Railway hosting and database infrastructure to run the service and store application data. Authorized operation and troubleshooting may require access to application records; information may also be disclosed when required by law.

Portfolio Manager’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention, revocation and deletion

Gmail connection details are retained while the connection is configured. You can revoke Portfolio Manager’s access at any time in Google Account connections. Revoking access prevents future authorized sending but does not erase mail already sent or automatically remove the application’s stored records. To request removal of stored connection details or other application data, contact seaontrip@gmail.com. Delivery records and saved preferences remain until removed by the operator; copies in backups may remain until those backups are replaced.

Security and changes

The service uses HTTPS, authenticated access for the dashboard and encrypted storage for Gmail credentials. No storage or transmission method provides an absolute security guarantee. Updates to this policy will be published on this page with an updated effective date.