Last updated: October 6, 2026 · IWB Terminal, operated by InvestingWithBrandon, LLC
1. What we collect
Account info: your name, email, and a salted cryptographic hash of your password (we cannot see the password itself).
Portfolio data: positions, cash, options, and trade history that you type in, import from a CSV file, or sync read only from your brokerage.
Membership and purchase records: whether you hold a membership bought on our website (through Whop) or in the iPhone app (through Apple), and, for a purchase in the iPhone app, the purchase identifiers Apple gives the app, so the purchase can be attached to your account. We never receive your card or bank details.
Notification tokens: if you allow notifications, the device token Apple gives the iPhone app, or the push address your web browser gives the site, so we can send the notifications you turned on.
Technical data: basic logs (such as rate limiting counters based on IP address, and error reports from the app) used to keep the Service working and secure.
2. How we use it
Solely to operate the Service: showing you your own analytics, syncing your data across your devices, powering optional features you invoke (like the AI copilot), sending service emails, and keeping the platform secure. We do not sell your personal data. We do not share your portfolio with other members or advertisers.
3. Brokerage connections
Broker links are made through SnapTrade on a read only basis. You authenticate directly with your brokerage on SnapTrade's secure pages. We never receive or store your brokerage username or password. SnapTrade's handling of your data is governed by their own privacy policy.
4. Service providers we rely on
Vercel, hosting and encrypted storage of account and portfolio data
SnapTrade, brokerage connectivity that can only read
Market data providers, price quotes (they receive ticker symbols, not your identity)
Anthropic, which processes your question and a summary of your portfolio when you use the AI copilot, to generate the answer
Resend, email delivery: password reset links and the emails the Service sends you, such as the daily digest and the weekly summary (it receives your email address and the contents of those emails)
Apple, billing for memberships bought in the iPhone app (under Apple's own privacy policy), and delivery of iPhone notifications
Whop, billing for memberships bought on our website, and the membership check that unlocks your account (we look up your email in Whop's membership records)
Your web browser's push service (for example Apple, Google or Mozilla), only if you turned on notifications in a web browser
Each provider receives only what's needed to do its job.
5. Cookies
We use a single essential session cookie to keep you signed in. No advertising or cross site tracking cookies.
6. Data retention & deletion
Your data is kept while your account is active. You can delete your portfolio data or your entire account at any time from the Account tab, or by emailing brandon@investingwithbrandon.co from your account email. We'll complete deletion promptly.
7. Security
Passwords are stored as salted cryptographic hashes; data is encrypted in transit; brokerage access is read only by design. No system is perfectly secure, so please use a unique password.
8. Children
The Service is for adults 18+. We do not knowingly collect data from children.