What Anacleto stores (only encrypted), where, for how long and how to export or delete it.
Who runs Anacleto: Attilio Lughetta, as a private individual, as a private beta. For any request about your data write to the operator, or use the functions in "My data" described below.
Nothing stored in clear: we do not store your email, your Google account identifier or any of your portfolio data in clear. The database only holds: - a one-way fingerprint of your Google identifier and one of your email (used to find your account and, if you ask, to delete it), and the dates of your first and last sign-in and of accepting the notice; - your data (email, profile, ETFs, transactions, rules, latest projection) only encrypted with AES-256-GCM, with a key derived from your Google identifier when you sign in, and never stored.
Without your Google sign-in your data cannot be read, not even by whoever runs the service or has access to the database. While you use the app, it is decrypted only in the server's memory to run the calculations, and never written in clear, including in logs. No passwords: sign-in goes through Google, which only tells us your identity and email.
Claude connector (MCP): if you connect Claude to Anacleto, Claude can read your data and add ETFs and transactions on your behalf, only after you press Allow. The connection tokens are stored only as fingerprints; your identity is stored encrypted with a key derived from the token itself, so only the connection you authorised can open your data. What Claude does with the answers is governed by your Claude account and Anthropic's terms. You can disconnect at any time from "My data".
Data from your Google account: we only ask for the basic scopes (openid, email, profile). We use them solely to recognise you, check that your email is verified and keep your data separate from everyone else's. We do not read Gmail, Drive, contacts or anything else, and we do not sell, share or use any data for advertising.
Why: to provide the service you asked for by signing in (legal basis: performance of the service, art. 6(1)(b) GDPR). No profiling, no automated decisions about you.
Cookies: a technical session cookie, needed to keep you signed in. When advertising is shown (see below), Google and its partners may use cookies and similar technologies, for personalised ads only with your consent where the law requires it. No analytics cookies of our own.
Advertising: some pages may show one ad slot served by Google AdSense, marked "Sponsored". Google acts as an independent controller for the data it collects to serve and measure ads (device and browser information, IP address, cookies); in the EU and UK it asks for your consent through its certified consent banner, and you can change your choice at any time with "Privacy settings" at the bottom of every page. We never send Google your portfolio, your email or any data stored in Anacleto, and we choose no targeting based on it; the ad script runs on the same page, so we do not place ads inside the portfolio, settings or legal pages. How Google uses data: policies.google.com/technologies/partner-sites. Ads may concern financial products: they are third-party advertising, not checked or endorsed by Anacleto. On request an account can be made ad-free.
Where: in a Postgres database hosted by Neon (European Union); the app runs on Render (Frankfurt). Neon, Render and Google (for sign-in) process data only as technical providers.
Who can see it: only you, when you sign in. No other user and not even the administrator: in the app they only see how many accounts exist and the sign-in dates; in the database they only find fingerprints and encrypted data.
Quote list: to update prices every morning, the service keeps a list of ETF symbols (for example "VWCE.DE") seen in the last 60 days, with no link to who holds them.
Price sources: to search for ETFs and update quotes the app queries Yahoo Finance and the public Deutsche Börse instrument list with the instrument's code, never with your data.
How long: as long as you keep your account. If you delete your account, fingerprints and encrypted data are deleted immediately; the beta may close, in which case the database is deleted.
Your rights: from "My data" you can download everything in a file and delete your account with all its data, at any time. You can also request access, rectification, erasure, restriction or portability, object to processing, and lodge a complaint with your data protection authority (in Italy the Garante, garanteprivacy.it). The free database does not guarantee backups and, if the service key were lost, the encrypted data could no longer be read: the export is how you keep it. Even encrypted, under the law it is still your data: the rights above always apply.