1. Information We Collect
When you use Fortress Finance, we collect information you provide directly, including:
- Account registration data (name, email address, password hash)
- Financial account connection metadata (exchange names, connection timestamps)
- Portfolio data imported from connected exchanges and wallets
- Usage analytics and interaction patterns within the platform
- Device information, IP addresses, and browser type for security
2. How We Use Your Information
We use collected data to:
- Provide and maintain the Fortress Finance platform and services
- Generate portfolio analytics, risk assessments, and performance reports
- Send transactional emails including weekly digests and security alerts
- Improve our AI-powered features and recommendation engines
- Detect and prevent fraud, unauthorized access, and security threats
3. Data Storage & Security
Your data is protected using industry-standard security measures:
- API credentials are encrypted at rest using AES-256-GCM encryption
- All data in transit is protected with TLS 1.3
- Authentication is secured with mandatory two-factor authentication (TOTP)
- We use Supabase for database hosting, and every data query is scoped to the authenticated account
4. Third-Party Services
We integrate with third-party services to provide our platform:
- Supabase — Authentication and database hosting
- Stripe — Payment processing (we never store card details)
- Resend — Transactional email delivery
- CoinGecko & Polygon.io — Market data providers
- Vercel — Application hosting and CDN
Product usage analytics are collected first-party through our own endpoint (/api/track); no third-party analytics service receives your data. We do not sell your personal data to third parties.
5. Cookies
We use essential cookies for authentication session management and security. Usage analytics are collected first-party (/api/track) and do not rely on third-party analytics cookies. You can disable non-essential cookies in your browser settings.
6. Your Rights
You have the right to:
- Access and export your personal data
- Correct inaccurate personal information
- Delete your account and associated data
- Opt out of non-essential communications
- Withdraw consent for data processing
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).
8. Changes to This Policy
We may update this privacy policy periodically. We will notify you of material changes via email or in-app notification. Continued use of Fortress Finance after changes constitutes acceptance of the updated policy.