Legal

Privacy Policy

Last updated: April 27, 2026

Rendity is a personal portfolio analytics tool. We collect only what is necessary to provide the service. We do not sell or share your data with third parties. You can delete your account and all associated data at any time.

1. Who we are

Rendity ("we", "us", "our") is operated by Anevir LLC. For data protection matters, contact us at hello@rendity.app.

2. What data we collect

When you create an account, we collect:

Username and password (hashed — we never store your password in readable form).
Email address, used to communicate with you about your account.

When you connect your Interactive Brokers account, we additionally store:

Your IBKR Flex Web Service token, encrypted at rest.
Your IBKR Flex Query ID.
Transaction history, position snapshots, and cash snapshots fetched from IBKR via your credentials.
Your IBKR account ID and account opening date.

We also collect:

Your preferred display language.
Timestamps of imports and syncs.

If you submit your email via the early-access waitlist form without creating an account, we store that email address and the date of submission.

3. How we use your data

To authenticate you and maintain your session.
To fetch your portfolio data from Interactive Brokers on your behalf.
To compute and display portfolio analytics (returns, income, benchmarks, tax reports).
To send you account-related emails (e.g. access invitations). We do not send marketing email.

4. Data storage and security

Your data is stored on AWS servers located in the European Union. Your IBKR Flex token is encrypted at rest using AES-256 (Fernet). Passwords are hashed using Django's default PBKDF2 algorithm. All connections to Rendity are encrypted via HTTPS/TLS.

We retain your data for as long as your account is active. If you delete your account, all data associated with it is permanently and immediately deleted from our systems.

5. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We use the following sub-processors to operate the service:

Amazon Web Services — hosting.
Google Workspace — email.

6. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access — you can request a copy of all personal data we hold about you.
Right to rectification — you can correct inaccurate data.
Right to erasure — you can delete your account and all associated data at any time via Settings → Delete account.
Right to restriction — you can ask us to stop processing your data while a dispute is resolved.
Right to data portability — you can request your data in a machine-readable format.
Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, contact us at hello@rendity.app. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection supervisory authority. In Germany, this is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).

7. Cookies and tracking

Rendity uses a single session cookie to keep you logged in. We do not use analytics trackers, advertising cookies, or any third-party tracking scripts.

8. Changes to this policy

If we make material changes to this policy, we will notify you by email at least 14 days before they take effect. The current version is always available at this URL.

9. Contact

Questions or requests: hello@rendity.app

Want to delete your account? Sign in and go to Settings → Delete account.