Privacy Policy

This Privacy Policy explains what NodVest collects, why, and who else sees it. We built NodVest to collect as little personal information as the product can function on — this page is meant to be short and read in full.

The one piece of personal information we store

The email address you provide at checkout. That is the only personal information NodVest stores. We use it to send your one-time link that connects your subscription to your iPhone, to send billing and account-security emails, and to help you recover access if you reinstall the app. We do not collect your name, mailing address, date of birth, or government ID.

How your app account works

The NodVest app creates an anonymous account tied to your device — there is no signup form and no password. That account is identified only by a random device token, never by your email. Your device also stores an optional passcode/Face ID preference and your notification settings, locally.

What else we store, and why

• Your brokerage connection. We store a reference to your connection with our brokerage-connection provider (SnapTrade) so we can request quotes, positions, and place orders you approve. Your brokerage login credentials are never seen or stored by us — SnapTrade handles that connection directly. A brokerage-issued secret we do receive is encrypted at rest, used solely to operate the Service (requesting quotes and positions, and placing orders you approve), and never appears in logs, API responses, support tooling, or any sale or share of data.
• Your allocations, trade proposals, and their outcomes. Which strategies you’ve allocated to, the proposals sent to your device, and whether you approved, skipped, or let one expire — so the app can show your history and we can generate a receipt for anything that fills.
• Your subscription status. Provided by Stripe: plan, billing status, and renewal date. We never see or store your card number — Stripe handles payment details directly.
• A push-notification token, so Apple can deliver trade alerts to your device.
• Basic request metadata for security and abuse prevention — for example, a hashed, non-reversible form of your IP address, never the raw address.

Who processes data on our behalf

This is the complete list — we do not use any other third-party data processor.

• Vercel hosts the Service and, as any web host does, logs requests (including IP addresses) for operational and security purposes.
• Neon (Postgres) stores the data described above.
• Stripe processes payments and holds your billing details and email.
• SnapTrade brokers the connection between the Service and your brokerage account.
• Apple delivers push notifications to your device.
• Resend delivers transactional email (claim links, receipts, and security notices).

The NodVest app contains no third-party advertising SDKs — Meta, TikTok, or otherwise — and neither the app nor the website uses analytics tools that fingerprint your device or build an advertising profile. We do not sell your personal information, and we have never sold it — see the “Your rights” section below.

Cookies and tracking

The nodvest.com website does not set advertising or analytics cookies and does not use any third-party tracking script. The site relies only on standard, necessary web infrastructure to render pages and process the checkout and account-linking flows described above.

Data retention, deletion, and device revoke

We keep account and trading data for as long as your account is active, and for a limited period after that as needed for legal, tax, and dispute-resolution purposes. Two controls are available in the app’s Settings: “sign out of this device” revokes your current device token without deleting anything, useful if you believe a device is compromised; and “delete account” permanently deletes your device account and its associated proposals, allocations, and brokerage-connection reference, and disconnects your SnapTrade connection. Deleting your account unlinks, but does not automatically cancel, an active subscription — cancel separately through the billing portal if you also want billing to stop. You can also request deletion by emailing us.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. Contact team@delvir.co to exercise any of these rights.

California residents: we do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the preceding 12 months. You may request access to or deletion of your personal information as described above.

EEA/UK residents: where GDPR applies, our legal bases for processing are performance of our contract with you (providing the Service), our legitimate interests (security and fraud prevention), and compliance with legal obligations (billing records). You may lodge a complaint with your local data protection authority.

Children: the Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Security

We encrypt sensitive credentials at rest, restrict access to production data, and never store your brokerage login or full card number. No system is perfectly secure, but we design NodVest to collect the least data it can and to protect what it does hold.

Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the “Effective” date above and, where required, notify you in the app or by email.

Contact

Delvir Limited Liability Co., 30 N Gould St, Ste R, Sheridan, WY 82801, United States — team@delvir.co.