Privacy policy

Controller: Matis Bocaccio EI, nom commercial Pecunnia AI, RCS Paris 132 014 788, 47 rue Vivienne, 75002 Paris, SIRET 132 014 788 00013

Personal data contact: contact@pecunnia.com

No data protection officer (DPO) has been appointed: for any question about your data, write to contact@pecunnia.com.

• Account: e-mail address, first name and surname if you provide them, password (stored only in irreversibly encrypted form), chosen language and theme, sign-up date, status of the e-mail verification; in the case of sign-in through a third-party service, the identifier and e-mail address transmitted by that service;
• Country of residence, which you provide when signing up (or at your first sign-in), and the language reported by your browser at that time;
• Subscription and payment: plan, dates, status, Stripe customer identifiers, credit history (allocations, consumption, purchases). No card number is known to Pecunnia;
• Content you enter: portfolio positions, favourites, investment theses, notes, notification and recap settings;
• Free trial: for each trial granted or refused, an irreversible fingerprint (hash) of your e-mail address and of the card fingerprint provided by Stripe (technical identifier of the card, never its number), with the date of the trial;
• Early activation of the subscription (“Activate now”): the proof of your request for immediate access — date and time, accepted text and its version, IP address, plan and amount;
• Assistant: your questions, the assistant's answers (with their sources, charts and credits debited) and the context needed to answer them (history of the conversation and, when your question relates to them, your positions, favourites or notes). Your conversations are stored on Pecunnia's servers, linked to your account, so that you can find them on all your devices; the server also stores technical measurements of each call (tokens, cost, model, date) and the feedback you give on an answer;
• Technical data: IP address and browser (security, rate limiting against abuse), error logs;
• Messages sent through the contact form or to support: name, e-mail, content.

• Creating and managing your account, providing the Service, managing the subscription and credits: performance of the contract (art. 6(1)(b) GDPR);
• Generating answers, explanations and recaps by AI: performance of the contract;
• Keeping the history of your conversations with the assistant, so that you can find and continue them on all your devices: performance of the contract; they are used for nothing else — no administration screen can read them, and only the answers you rate with a thumb, together with their question, are reviewed to improve the assistant;
• Sending service e-mails (verification, forgotten password, confirmation, renewal reminder, termination, warning before an inactive account is deleted): performance of the contract and legal obligations; the weekly recap by e-mail is a mailing you can deactivate in your account area;
• Tailoring the languages and content offered, based on your country of residence: legitimate interest (art. 6(1)(f)); no other use and no automated decision about your account;
• Security, prevention of fraud and abuse, cost control: legitimate interest (art. 6(1)(f));
• Applying the “one free trial per person” rule: legitimate interest (preventing abusive repetition of the free trial); these data are used for this check only;
• Keeping the proof of your request for immediate access, which determines the refund in the event of withdrawal: legal obligation (art. 6(1)(c)) and legitimate interest (proof in case of dispute);
• Invoicing, accounting, disputes: legal obligation (art. 6(1)(c));
• Internal audience measurement of the public pages, only if you accept it in the cookie banner: consent (art. 6(1)(a));
• Display of the TradingView price chart (third-party content): only if you accept it in the cookie banner: consent (art. 6(1)(a)).

Data are only shared with the providers needed for the Service, each for its own task:

• Hosting of the application and database: OVH SAS (France), virtual private server located in London (United Kingdom);
• Database backups: Backblaze, Inc. (United States), storage located in the European Union (Amsterdam, Netherlands); copies are encrypted (AES-256) before they are sent;
• Payment: Stripe Payments Europe, Limited (Ireland), and Stripe, Inc. (United States) for part of the processing — e-mail address, customer identifier, payment method (entered with Stripe), invoices;
• Artificial intelligence: Anthropic PBC (United States) for the assistant, news explanations, recaps and the search for recent information on the web — the text of your questions and the context needed to answer; for a web search, only the query to search, without your identity;
• Sending e-mails: Brevo (Sendinblue SAS, France), and the OVH SAS (France) mail service as a fallback — e-mail address, first name, content of the message;
• Sign-in through a third-party service, if you choose it: Google (Google Ireland Limited) or Meta (Meta Platforms Ireland Limited), which send us your e-mail address and identifier;
• Price chart of the terminal, only with your agreement: TradingView, Inc. (United States), which receives your IP address and your browser's technical data;
• Automatic translation of the footer, if offered: Google Translate (Google LLC, United States; third-party script loaded only at your request);
• Authorities, upon legal request.

Anthropic does not train its models on data received through its API (its commercial terms exclude it by default). Anthropic receives neither your password nor your payment methods.

• United Kingdom (hosting): adequacy decision of the European Commission;
• United States — Stripe, Inc., Google LLC, Backblaze, Inc.: EU–U.S. Data Privacy Framework, to which these companies adhere;
• United States — Anthropic PBC: standard contractual clauses of the European Commission (Anthropic's data processing addendum);
• United States — TradingView, Inc.: third-party content loaded with your agreement, under TradingView's responsibility (see its privacy policy).

• Account, portfolio, notes, theses: until the account is deleted; an account that has been inactive (no sign-in) for 3 years is deleted, after a warning e-mail sent one month before;
• Conversations with the assistant: 12 months after the last message of the conversation, then automatic deletion; at most 200 conversations per account (beyond that, the oldest are deleted); you can delete one conversation, or all of them, at any time from the chat; all are deleted with your account and are included in the export of your data;
• Measurements of AI calls (credits consumed, technical cost): for the lifetime of the account, then 1 year;
• Invoicing (invoices, payments, journal of purchased credits): 10 years (accounting obligations), including after the account is deleted;
• Technical logs and IP addresses: 12 months;
• Messages sent through the contact form or to support: 3 years;
• Free trial data (hashed fingerprints of the e-mail address and of the card): 3 years after the trial, including after the account is deleted, to prevent a new trial; automatically deleted afterwards;
• Proof of the request for immediate access (early activation): 5 years, including after the account is deleted; automatically deleted afterwards.

You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time and the right to give instructions on what happens to your data after your death. Exercise them from your account area — which allows you to export your data and to delete your account — or by writing to contact@pecunnia.com. You may refer the matter to the CNIL (cnil.fr) in case of difficulty.

Exchanges are encrypted (HTTPS), passwords are hashed, access to data is restricted, regular backups are made. In the event of a breach likely to affect your rights, the CNIL and, if necessary, the persons concerned are informed within the statutory time limits.

The Service is reserved for adults. Pecunnia does not knowingly collect data from minors; if you notice any, write to us to have it deleted.

See the cookie policy.