Privacy Policy
Svift Intel ("we", "us") operates the tax calculation and portfolio tracking service available at sviftintel.com. We are the data controller for personal data collected through this Service. Contact: support@sviftintel.com
| Data | Why we collect it | Legal basis |
|---|---|---|
| Email address | Account creation, login, password reset emails | Contract performance |
| Name (optional) | Personalization only | Consent |
| Password hash | Authentication - stored as bcrypt hash, never plaintext | Contract performance |
| IBKR CSV files | Tax calculation (FIFO matching, PLN conversion). Processed server-side, not stored permanently unless you save a report | Contract performance |
| Saved tax reports | Storing your calculation results for future reference | Contract performance |
| Stock portfolio data | Portfolio tracking feature | Contract performance |
Your IBKR CSV files contain sensitive financial data. We process them solely to compute your tax results. We do not sell, share, rent, or use your financial data for advertising, profiling, analytics, or any purpose other than providing the Service to you.
Account data and saved reports are stored in a PostgreSQL database. Data is encrypted in transit (HTTPS/TLS). Passwords are hashed using bcrypt - we never store plaintext passwords. JWT tokens are used for session authentication and are stored client-side only. We do not use tracking cookies or third-party analytics.
| Service | Purpose | Data shared |
|---|---|---|
| Vercel | Hosting and serverless functions | Request logs, IP addresses (standard infrastructure) |
| Resend | Transactional email (password reset) | Your email address, when a reset is requested |
| Yahoo Finance | Stock price and chart data | Ticker symbols only - no personal data |
| NBP API | USD/PLN exchange rates for tax calculation | No personal data |
We retain your account data and saved reports for as long as your account is active. Uploaded CSV files that are not explicitly saved as a report are not retained after the calculation response is returned.
If you delete your account, all associated personal data and saved reports will be permanently deleted within 30 days.
As an EU/EEA resident, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at support@sviftintel.com. We will respond within 30 days.
The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it promptly.
We may update this Privacy Policy periodically. We will update the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated Policy. For significant changes we will notify you by email.
Privacy questions: support@sviftintel.com
You also have the right to lodge a complaint with the Polish data protection authority (UODO - Urząd Ochrony Danych Osobowych) at uodo.gov.pl.
Also see our Terms of Use.