Privacy Policy

This Privacy Policy describes how Hank ("we," "us," or "the Service"), accessible at https://hank.investments, collects, uses, stores, and shares information about you when you use the Service.

Hank is a personal AI investment analyst that connects to your brokerage accounts to provide portfolio analysis, risk metrics, and AI-assisted research. By using the Service, you agree to the practices described below.

1. Information we collect

1.1 Information you provide via Google sign-in

We use Google Identity Services for authentication. When you sign in, we receive and store:

• Your email address
• Your name (as provided by Google)
• Your Google account identifier (the sub claim from the OAuth ID token)

We do not receive or store your Google password.

1.2 Brokerage and financial data

When you link a brokerage account through one of our supported providers, we receive and store:

• Positions: ticker symbols, share quantities, cost basis, currencies, account identifiers, institution names
• Transactions: trades, dividends, interest, deposits, withdrawals, transfers, including raw payloads from the provider
• Account metadata: account types, institution names, account-level identifiers
• Provider-issued tokens (Plaid access tokens, SnapTrade user secrets, etc.) used to maintain the connection

These tokens are stored as KMS-encrypted columns in our database, not in plaintext.

We never see, receive, or store your brokerage username or password — those are entered directly into the provider's secure interface (Plaid Link, SnapTrade OAuth, etc.).

1.3 AI conversations and preferences

When you use Hank's AI features, we store:

• Your chat messages, the AI's responses, and any tool calls / tool results that occurred during the conversation
• Per-user agent memory (notes, observations, working state the AI accumulates across sessions)
• Risk preferences, allocation targets, and other configuration you set

1.4 Technical information

We collect standard technical data needed to operate the Service:

• Session cookies (see Section 6)
• HTTP request logs: timestamp, endpoint, response code, user identifier
• Error logs that may include user identifier and request context

We do not use third-party analytics, advertising trackers, or fingerprinting tools. The Service does not embed Google Analytics, Mixpanel, Sentry, PostHog, or similar services.

2. How we use your information

We use your information to:

• Authenticate you and maintain your session
• Pull portfolio data from your linked brokerages on your behalf
• Calculate risk metrics, factor exposures, scenario results, and other analytics you request
• Provide AI-assisted analysis of your portfolio
• Maintain a per-user history of conversations and preferences so the AI is useful across sessions
• Operate, secure, and improve the Service

We do not sell your data or share it for advertising, and we do not train our own AI models on your data. The AI providers that process your data for the Service are listed in Section 3.3; their terms govern whether they may use it to train their models.

3. Third parties

To deliver the Service, we share specific data with the following providers. Each operates under its own privacy policy, linked below.

3.1 Brokerage data aggregators

Plaid and SnapTrade are enabled by default. Schwab and Interactive Brokers are available only when explicitly enabled for your account.

3.2 Market and reference data

3.3 AI and infrastructure

Each AI provider handles the data it receives under its own terms and privacy policy for the account in use. Those terms, not this policy, govern whether and how long the provider retains that data and whether it may use it to improve or train its models.

• Anthropic — AI chat and document reading: these run through the Anthropic account attached to your session. If that is your own Claude subscription or Anthropic API key, your agreement with Anthropic governs that data; for a Claude subscription (Anthropic's Consumer Terms and Privacy Policy), that includes the model-training setting in your Claude account. Where Hank provides the chat, it runs on Hank's Anthropic API account under Anthropic's Commercial Terms, which do not permit Anthropic to train its models on that data.
• Anthropic — portfolio interpretation, summaries, and asset classification: these run on Hank's Anthropic API account under Anthropic's Commercial Terms.
• OpenAI: all OpenAI use runs on Hank's OpenAI API account, governed by the OpenAI Services Agreement and OpenAI's Privacy Policy.

3.4 What we do not do

• We do not sell your data.
• We do not share your data for advertising or marketing.
• We do not share data between users.
• We do not train our own AI models on your data, and we do not provide your data to anyone for the purpose of training models. Section 3.3 describes the terms that govern the AI providers' use of the data they receive.

4. Where your data is stored and how it is protected

• Region: Data is stored in AWS US East (Ohio, us-east-2). Encryption keys (AWS KMS) are managed in AWS US East (N. Virginia, us-east-1).
• Database (RDS PostgreSQL): Encrypted at rest with AES-256.
• Filesystem state (EBS volume): Encrypted at rest. Holds per-user SQLite memory files and cached filings.
• Brokerage credentials and API keys: Encrypted at the column level using AWS KMS-managed keys before being written to the database.
• Network: All client traffic uses HTTPS (TLS). Database connections from application servers to RDS use SSL.
• User isolation: All financial data is scoped by user identifier with cascading deletion rules. One user cannot access another user's data through the Service.

No system is perfectly secure. We continue to harden infrastructure, audit configurations, and apply security updates.

5. Data retention

6. Cookies

We use a single first-party session cookie to keep you signed in:

We do not use advertising cookies or third-party analytics cookies.

7. Your choices and rights

7.1 Disconnecting a brokerage

You can disconnect any linked brokerage from inside the Service. Disconnecting revokes the provider token and stops further data syncing. You may also manage Plaid connections directly at my.plaid.com.

7.2 Account deletion and data export

You can download a redacted JSON archive of the data associated with your account from Settings → Preferences → Your data. The export is scoped to your signed-in account and includes account, portfolio, transaction, conversation, and private-document data. Credentials, provider tokens, API keys, and other secret fields are redacted. You may also request an export by emailing hc@henrychien.com from the email address associated with your account.

Self-service account deletion is not yet available. To request deletion, email hc@henrychien.com from the email address associated with your account. We will:

• Verify the request comes from your account email.
• Revoke linked brokerage tokens (Plaid /item/remove, SnapTrade disconnect, etc.).
• Delete your account record and all associated portfolio, transaction, conversation, and memory data from our primary database.
• Allow database backups containing the deleted data to age out within 30 days under the normal backup retention schedule.

We aim to complete deletion requests within 7 days of verification.

The email path above remains the supported channel for account deletion.

7.3 California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion of your personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right not to be discriminated against for exercising your rights. To exercise any of these rights, email hc@henrychien.com.

7.4 European residents (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection. The legal basis for processing your data is the performance of our contract with you (delivering the Service) and our legitimate interests in operating the Service securely. To exercise any of these rights, email hc@henrychien.com. You also have the right to lodge a complaint with your local data protection authority.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy at this URL and revise the "Effective date" above. For material changes, we will provide additional notice (in-app banner or email).

10. Contact

Questions about this policy, or requests to exercise your rights, can be sent to:

• Email: hc@henrychien.com
• Service: https://hank.investments