Privacy Policy

Last updated: October 8, 2026

1. Who we are

Rendity ("we", "us", "our") is operated by Anevir LLC, a company organized in the United States, which is the controller of your personal data. For data protection matters, contact us at hello@rendity.app. This policy is part of our Terms of Service.

2. What data we collect

When you create an account, we collect:

• Your email address, used to identify your account and to communicate with you about it.
• If you register with a password: the password, stored only as a hash (we never store it in readable form).
• If you sign in with a social login provider (for example Google): the profile information the provider shares with us: your name, email address and Google account ID. We never see your Google password and do not access any other Google data.

When you connect your Interactive Brokers account, we additionally store:

• Your IBKR Flex Web Service token, encrypted at rest.
• Your IBKR Flex Query ID.
• The transaction history, position snapshots, account ID and other data that you select when you configure the IBKR Flex Query. You decide what the query contains, and so what data Rendity receives.

We also collect:

• Your preferred display language and display currency.
• Timestamps of imports, syncs and your last visit.
• Your interaction history with the app, such as server logs and our own records of how the app is used.
• Billing information, once paid plans are available (see section 5).

If you submit your email via the early-access waitlist form without creating an account, we store that email address and the date of submission.

3. How we use your data and our legal bases

• To authenticate you and maintain your session, to fetch your portfolio data from Interactive Brokers on your behalf, and to compute and display portfolio analytics (returns, income, benchmarks, tax reports). Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To send you account-related emails, such as access invitations and service notices. Legal basis: contract, or our legitimate interest in operating the service (Art. 6(1)(f)).
• To send you a newsletter, only if you have opted in. You can unsubscribe at any time. Legal basis: your consent (Art. 6(1)(a)).
• To keep the service secure, fix errors and understand how the app is used so we can improve it, including recording data-quality anomalies. Legal basis: legitimate interest (Art. 6(1)(f)).
• To meet legal obligations such as tax and accounting rules for paid plans. Legal basis: Art. 6(1)(c).

4. Where your data is stored and how it is protected

Your data is stored on servers operated by OVHcloud in Frankfurt, Germany. Our contract for this hosting is with OVH US, LLC, 11160-C1 South Lakes Drive, Box 811, Reston, VA 20191, USA. We do not choose any data center outside Germany for storing your data.

Because our hosting provider's contracting entity is US-based, US authorities could in theory seek access to data held by it. We address this with contractual safeguards, including a data processing agreement with the provider and the EU Standard Contractual Clauses where they apply, and by encrypting sensitive credentials.

Your IBKR Flex token is encrypted at rest using AES-256 (Fernet). Passwords are hashed using Django's default PBKDF2 algorithm. All connections to Rendity are encrypted via HTTPS/TLS.

We retain your data for as long as your account is active. If you delete your account, all data associated with it is permanently and immediately deleted from our systems, except what we are legally required to keep (for example invoices for paid plans).

5. Data sharing and processors

We do not sell, rent or share your personal data with third parties for marketing purposes. We use the following processors and recipients to operate the service:

• OVHcloud (contracted through OVH US, LLC) — hosting, data stored in Frankfurt, Germany.
• Google Workspace — email.
• Brevo — delivery of the emails we send you.
• Social login providers (for example Google) — if you choose to sign in with one, the provider authenticates you and tells us your basic profile data. The provider's own privacy policy governs what it does with its side of the sign-in.
• Interactive Brokers — we send your Flex token and query ID to IBKR at your direction, to retrieve your own statements.
• A payment processor — once paid plans launch, payments will be handled by a payment processor we will name here before taking any payment. We will not store full card details.

We may also disclose data where the law requires it, for example to answer a valid legal request.

6. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — you can request a copy of all personal data we hold about you.
• Right to rectification — you can correct inaccurate data.
• Right to erasure — you can delete your account and all associated data at any time via Settings → Delete account.
• Right to restriction — you can ask us to stop processing your data while a dispute is resolved.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing rests on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@rendity.app. We will respond within 30 days.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work.

7. Cookies and tracking

Rendity uses a session cookie to keep you logged in and a cookie to remember your language choice. We do not use third-party analytics trackers, advertising cookies, or any third-party tracking scripts.

8. Changes to this policy

If we make material changes to this policy, we will notify you by email at least 14 days before they take effect. The current version is always available at this URL.

9. Language

This policy is written in English, and the English version is the only legally binding one. A German translation is provided as a courtesy; if the two differ, the English version controls.

10. Contact

Questions or requests: hello@rendity.app

---

Want to delete your account? Sign in and go to Settings → Delete account.