Privacy Policy

Invix uses the data you enter, upload or connect to analyze your portfolio. This policy explains what we collect, how we use it, who receives it, how long we keep it and how you can manage it.

The short version

• We use your data to run Invix for you. We do not sell it, share it for advertising, or use your portfolio data to train AI models.
• Brokerage access is read-only. We never receive your broker password, and Invix cannot place trades or move money.
• Ask Invix and document reading use AI providers. Before your first question or document read, we explain what we send and ask for permission. AI apps you connect receive the results you authorize under their own privacy policies. See AI features for details, including spreadsheet mapping.
• You can export your data, delete brokerage data or uploaded files, revoke AI apps and delete your account at any time.
• Invix uses cookies for sign-in and to remember a website analytics choice you make. There are no advertising scripts or cookies that identify visitors for analytics. We measure how Invix is used from our own servers, with PostHog, under a random account ID, and count visits to our public pages by approximate country. Visitor codes change daily.

Who we are

Invix ("we", "us") provides the Invix service. Invix is offered to residents of the United States who are 18 or older. Write to privacy@invix-ai.com with any question about this policy or your data.

What we collect

Your account

We keep your email address, your display name if you provide one and a hash of any password you set. If you use Google to sign in, we also keep your Google account ID. For each session, we record when you signed in, when you last used the session and how your browser identifies itself. We record which versions of the Terms and Privacy Policy you accepted, when and how.

Portfolios you enter or upload

Holdings, transactions, dates, dividends and splits you enter, and the files you upload: spreadsheets, PDF statements and screenshots. Uploaded files are kept encrypted, exactly as you uploaded them, until you remove them, so any account numbers printed in them are kept too. In the accounts Invix builds from a statement, full account numbers are replaced by keyed hashes, used to recognise the same account across uploads, and only their last four characters are shown.

Brokerage accounts you connect

When you connect a brokerage account, we receive read-only data such as account names and masked numbers, positions, cash balances, broker-reported values and transaction history. Transactions can include trades, dividends, deposits, withdrawals, transfers and fees, with the broker's descriptions. The beta connects directly to Interactive Brokers using a read-only Flex reporting token you create. Where SnapTrade connections are offered, SnapTrade provides the account data you authorize. Refreshes generally run daily.

Billing

If you subscribe to Pro, Stripe processes your payment. Stripe receives your email address and the payment details you enter on its pages; Invix never sees your card number. We keep your Stripe customer and subscription identifiers, your plan and its status.

AI features

Your conversations with the in-app assistant (Ask Invix) and the results of the Invix tools it used; the AI apps you connect to Invix and when you granted access. See AI features.

Usage and security records

A record of each request to Invix's tools: which tool, when, how long it took, whether it succeeded, the size of the answer and any error code, without the figures in it. Daily call counts for plan limits. Named product events such as "account created", which never contain text you typed. Security audit records of actions on your account, with identifiers and states but no financial contents.

Our servers also send these usage records and error reports to PostHog, which we use to understand how Invix is used and to find problems. They are sent under a random account ID, with your plan and when you signed up, and never include your email address, IP address, portfolio figures or text you typed. Nothing is loaded in your browser for this.

Visits to our public pages

For signed-out visits to our home, product, pricing, sign-in, sign-up, legal and support pages, our server can estimate the country of your internet connection from its IP address using a database on our server. A VPN may make this the country of the VPN connection. We do not request your device location or send PostHog your IP address, city or coordinates.

If we identify your connection as being in the United States, we count public page visits by default. For other connections, including when we cannot determine the country, analytics stay off unless you choose Allow analytics below. You can browse without making a choice or come back here to turn analytics on or off at any time. We skip signed-in visits and browsers that send Global Privacy Control or Do Not Track.

When a visit is counted, the page reports its path, campaign tags (such as utm_source) and referring site to Invix. We send PostHog these details, the approximate country when available, the browser and device type, and a daily visitor code. Our server makes the code from your IP address and browser with a random key that is kept only in memory and replaced every day. If you create an account that day while measurement is allowed, we can include the landing page, referring site and campaign tags on the signup event. Your approximate country stays on the public pageview.

Technical information

Your IP address reaches our servers with every request. Invix uses it in memory to limit request rates, look up country locally for public website analytics choices and make the daily visitor code described above. Invix does not store the IP address. Our hosting provider may log it for security and operations under its own terms.

How we use it

• To provide Invix: value your portfolios, calculate returns, exposure, risk, income and fund costs, refresh connected accounts, check your alerts and answer your questions.
• To run your account and subscription: sign-in, verification and password-reset email, billing and plan limits.
• To keep Invix secure and working: preventing abuse, investigating errors, and measuring reliability and usage in aggregate.
• To respond when you contact us, and to tell you about changes to the service or these terms.

We do not sell your personal information, share it for cross-context behavioral advertising, or use your portfolio data, files or conversations to train AI models.

AI features

Ask Invix, the in-app assistant

Before your first question, Invix names the providers and asks for your permission. We send your question, the conversation so far and the portfolio figures needed to answer it through OpenRouter to DeepInfra, which runs the DeepSeek V4.1 Flash model on a U.S. endpoint. The routing service may process the request outside the United States. If the providers change, we ask for your permission again.

For Ask Invix and AI-assisted imports, we require a model endpoint with zero retention of prompts and responses and prohibit use of that content for training. OpenRouter keeps request metadata such as token counts and response times. Under its child-safety policy, it may also retain content flagged as possible child sexual abuse material for review, reporting and legally required preservation. See OpenRouter's data handling policy.

Invix stores your conversations, encrypted, so you can read them. They are deleted 24 hours after the last message, or, if you turn on chat history, after 90 days without activity. A conversation you choose to share with us for diagnosis is kept for 30 days.

Reading statements and screenshots

After you give separate permission, Invix sends the text of a PDF statement or screenshot through OpenRouter to the same model and host under the rules above. That text can include balances, holdings, names and other details printed on the page. Invix replaces account numbers it recognizes before sending the text. For screenshots, Invix reads the text on its own server and sends only that text. You can withdraw permission at any time and continue using spreadsheets.

When Invix cannot recognize a spreadsheet layout, it may automatically ask the same model to identify columns. It sends redacted headings and descriptions such as “date” or “number” in place of cell values. For an unfamiliar transaction type, it sends recognized terms such as “dividend” and masks the other words. Spreadsheet mapping works separately from the permission for PDF statements and screenshots.

AI apps you connect

You can connect AI apps such as Claude or ChatGPT by signing in to Invix and approving read-only access. The app receives the results of the tools it calls, such as a portfolio summary or exposure calculation. It never receives your Invix password. Its provider's terms and privacy policy govern what happens to results it receives. Use Account → AI apps to revoke future access, even if you already uninstalled the app. Revoking access does not recall results the app already received.

Who receives your data

The table lists the providers that help run Invix and the apps you can authorize to receive your data. Invix's servers are in the United States. A provider may process data elsewhere.

Market-data providers receive ticker symbols and fund identifiers, not information about you. We may also disclose information if the law requires it, to protect the rights and safety of our users or Invix, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

How long we keep it

Your controls

Open Account → Data & privacy to use these controls.

• Export your data. Download your holdings as a CSV file or get a fuller copy, including portfolio entries, connected-account data and conversations, as JSON. Download links last up to 24 hours.
• Delete brokerage data. Disconnect your accounts and delete the imported accounts and history.
• Delete your account. Cancel any subscription, revoke AI apps and brokerage connections, and erase your account data, including your usage records in PostHog.

To remove a portfolio upload, open Update holdings → Uploads & entries in that portfolio. To remove a statement imported into a connected account, open Connected accounts, expand the uploaded files for that connection and choose Remove file. The confirmation explains how removal affects your holdings or history.

You can also disconnect an individual brokerage connection and choose whether to keep its data, revoke access under Account → AI apps, change chat history in Ask Invix, or withdraw permission for PDF statements and screenshots under Account → Data & privacy.

When account deletion succeeds, you lose access immediately. If SnapTrade still needs to confirm deletion, Invix keeps limited account and connection records for retries. An hourly cleanup removes them after confirmation or once 30 days have passed. Deleting an Invix account does not delete copies already held independently by a connected AI app or payment provider.

Your rights as a U.S. resident

Depending on the state you live in, you may have the right to know what personal information we hold about you and to get a copy, to correct it, to delete it, and to opt out of its sale, its sharing for targeted advertising, or profiling. Invix does not sell personal information, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. You won't be treated differently for using these rights.

Most requests can be made directly in Invix (see Your controls). For anything else, write to privacy@invix-ai.com from the email address on your account. We may need to confirm your identity before acting, and an authorised agent will need your signed permission. If we decline a request, you can appeal by replying to our answer.

Cookies and browser storage

Invix uses these sign-in cookies. invix_session keeps you signed in (30 days, or until you sign out), and invix_google_sign_in and invix_google_link carry a Google sign-in for up to ten minutes. Your browser's local storage remembers your theme and view preferences; these stay on your device and are not sent to us. If you choose Allow analytics or Decline, a first-party preference cookie (invix_site_analytics) remembers only that choice for 180 days. It has the same value for everyone making the same choice and contains no visitor ID. Invix loads no advertising, social-media or third-party analytics scripts. You can change your choice in the public page footer or turn on Global Privacy Control or Do Not Track. Product analytics are sent from our servers, as described in What we collect.

Security

Invix uses HTTPS. We encrypt uploaded files, conversations and brokerage tokens at rest and store passwords as hashes. You can access your data through a signed-in session, an AI app you authorize or a developer token you create. If we learn of a breach affecting your information, we will notify you as the law requires. You can report a security issue to us.

Children

Invix is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has created an account, write to privacy@invix-ai.com and we will delete it.

Changes to this policy

The date at the top shows when this policy last changed. If we make a material change, such as using your data for a new purpose or adding a provider that receives it, we will tell you in Invix or by email before it takes effect and ask you to accept the new version.

Contact

Privacy questions and requests: privacy@invix-ai.com. Everything else: contact@invix-ai.com.