Legal documents
Privacy Policy
Last updated: 9 October 2026
This Privacy Policy explains what personal data the Service collects, why, how it is protected, and the rights you have over it.
1. Controller
The publisher of Patrima, identified in the Legal Notice, is the controller of the personal data described below. For any privacy question, contact support@patrima.app.
2. Data we collect
Account data: your email address and authentication identifiers. Portfolio data: the holdings, positions, transactions, and asset information you enter or connect. Investor profile: the preferences, objectives, horizon, and risk answers you provide. Connection credentials: the read-only exchange API keys you choose to connect, held encrypted. Technical data: the limited usage and diagnostic information needed to operate and secure the Service. We do not collect government identity documents, and we do not ask for withdrawal or trading permissions. Beta access requests: if you ask for an access while Patrima is in private beta, we store the email address you submit, the answers you choose to give (the kinds of assets you hold, how many and which platforms you use, how you keep track today, what you would use first, how you heard of Patrima, whether you are open to a call with the team) and the optional message you write, so we can come back to you and prepare your access. We also store where your visit came from: the campaign parameters of the page's address and the name of the referring site, read when you send the request and never stored in your browser. We never ask for amounts, wallet addresses or keys. This happens before any account exists. Problem reports: when you use Report a problem, we store the message you write and what the form tells you it sends with it (the page, the language, the screen size, the theme, the browser and, from an error screen, the reference of the error), and forward it to our support inbox so we can reply to you by email. A report never contains an amount or a screenshot. Reports are deleted with your account.
3. Why we process it
We process your data to provide the Service (to aggregate your portfolio and produce analyses and scenarios), to secure and maintain accounts, to send the transactional and alert emails you enable, and to keep the Service reliable. We do not sell your personal data and do not use it for advertising.
4. Legal bases
Where the GDPR applies, we rely on the performance of our contract with you (to provide the Service), on your consent (for optional features such as AI analysis and non-essential communications), and on our legitimate interest in keeping the Service secure and improving it.
5. Who processes your data
We share personal data only with service providers that process it on our behalf, under contract, and solely to run the Service. Rather than expose a live infrastructure map, we disclose the categories of provider we rely on: cloud hosting and database infrastructure; transactional email delivery; optional AI processing (only when you enable AI features, and limited to what the feature needs); security and anti-abuse; product analytics and error monitoring; and payment processing if you subscribe. The current list of named sub-processors is available on request at support@patrima.app.
6. International transfers
Your data may be processed in countries other than your own, including within the European Economic Area and the United States. Where personal data is transferred internationally, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent mechanism. A summary of the safeguards is available on request.
7. Retention
We keep your data for as long as your account is active. When you delete your account, your personal data and portfolio records are deleted, subject only to any limited retention required by law or necessary for security. Encrypted connection credentials are removed as soon as you disconnect them or delete your account. An access request submitted during the private beta is kept until the beta ends, and is deleted on request at any time by writing to support@patrima.app.
8. Your rights
You can request access to your data, and its rectification, export, or deletion. Where the GDPR applies, you may also object to or ask us to restrict certain processing, and you have the right to lodge a complaint with your local data-protection authority. You can exercise any of these rights by contacting support@patrima.app; where in-product tools are available, you can also export or delete your data directly from your settings.
9. Security
The Service is non-custodial and connects to your accounts in read-only mode: it cannot move or withdraw funds. Personal data is logically isolated per user, connection credentials such as exchange API keys are encrypted at rest, and data is transmitted over encrypted connections. No method of storage or transmission is perfectly secure, but we maintain technical and organisational measures proportionate to the sensitivity of the data.
10. Cookies
We use cookies and similar technologies that are strictly necessary to keep you signed in and to secure the Service, together with limited analytics to understand usage. We do not use advertising cookies. Our product analytics runs without cookies and never follows you across other websites. It does not build a profile of you: events are recorded without an account identifier. If we show you a survey inside the app, your browser keeps a local note of which surveys you have already seen or started answering, so that we do not ask you the same question twice. That note stays on your device, and clearing your browser data removes it.
11. Minors
The Service is intended for adults only (18+). We do not knowingly collect data from minors, and we delete such data if we become aware of it.
12. Changes
We may update this Policy as the Service evolves. Material changes will be signalled in the app or by email, with the date updated above.
13. Contact
For any privacy question or request, contact support@patrima.app.