Privacy Policy
Effective date:
This policy explains what information FullPockets uses, why we use it, and your choices.
Who is responsible
FullPockets is provided by Pilnos kišenės, MB, company code 306272711, Linkmenų g. 42-61, Vilnius, Lithuania ("we"). We are the controller of the personal information described here. Contact us at info@fullpockets.app.
Information we use and why
- Accounts: your email address or username, authentication records, and profile information returned by Google if you choose Google sign-in when available. We use these to identify you, secure your account and provide the service, on the basis of our contract with you.
- Portfolio information: holdings, transactions, dividends, options, cash balances, notes, watchlists and preferences that you enter or import. We process this to calculate and display your portfolio and requested reports, on the basis of our contract with you. We do not require your broker password.
- Chat questions: when you use the AI assistant, we send your question and relevant stock or watchlist context to Anthropic, and your question, sometimes with relevant tickers, to Brave Search. This is necessary to provide the answer you request. Avoid including information you do not want these providers to receive.
- Emails and support: we use your email address and message contents to send authentication messages, provide requested reports or alerts, and respond to you. This supports our contract with you and our legitimate interest in resolving enquiries. We do not add you to marketing campaigns simply because you create an account.
- Technical and security information: IP addresses, request details, timestamps, errors and authentication activity help us operate the website, prevent abuse and investigate problems. We rely on our legitimate interest in keeping the service secure and reliable.
Account and portfolio information needed to provide a requested feature is necessary for that feature to work. Optional notes, watchlists and chat questions are your choice. Public registration is currently paused; available features may differ for existing accounts.
Where information goes
The main application and database run on our own server in Vilnius, Lithuania. We use the following external services where the relevant feature is used:
| Provider | Purpose and information | Location |
|---|---|---|
| Supabase Pte. Ltd. | Authentication and a synced copy of portfolio, transaction, watchlist and related account records. | Project database in AWS Ireland (eu-west-1); other processing is governed by Supabase’s terms and subprocessors. |
| Brevo (Sendinblue SAS) | Authentication emails, recipients, message contents and delivery records. | EU data storage; delivery involves recipients’ mail providers. |
| Workspace sends existing reports and alerts and handles support email. Google sign-in exchanges account identity information when available. | No account-specific EU-only processing region verified. | |
| Anthropic PBC | AI questions, relevant stock/watchlist context and search results. | International processing; no EU-only restriction configured. |
| Brave Software Inc. | Web and market-news searches, including the full question submitted to the AI assistant. | Processing region not pinned to the EU. |
Our server requests public market information from Yahoo Finance, justETF, Deutsche Börse, BlackRock/iShares, Vanguard and Amundi. Those requests include security identifiers and server network information; the market-data requests do not include your email address or portfolio quantities. Namecheap provides our domain’s DNS service. Fonts and application libraries are served directly by FullPockets.
Providers may process information outside the European Economic Area. For restricted transfers we rely on the applicable provider agreements and transfer safeguards, such as European Commission Standard Contractual Clauses or an applicable adequacy decision. You can contact us for information about the safeguards relevant to your data. A database being in Ireland does not mean every provider activity takes place in the EU.
We do not sell your personal information. We may disclose information when legally required or where necessary to protect rights or investigate abuse. We have not installed a third-party advertising, behavioural analytics or error-monitoring service in the app.
Cookies and browser storage
We use essential session and security cookies to keep you signed in and protect requests, and browser storage for interface preferences and application state. Our family-account session cookies expire after 30 days unless renewed or cleared earlier. Clearing browser storage may sign you out or reset your preferences. There are no advertising cookies installed by FullPockets.
How long we keep information
- Account and portfolio records: while needed to provide your account and requested features. You can request account closure and deletion by email. We may retain records necessary for a legal obligation or an identified dispute for as long as that purpose requires.
- Brevo email delivery logs: configured for one month. Storage of new email previews is disabled. Deletion can take additional processing time at the provider.
- Google email: Email Log Search covers 30 days. Copies in mailboxes and support correspondence are separate from those logs and may remain while needed to handle your enquiry or maintain relevant business records.
- Server logs: web-server logs use daily rotation with 14 archived files; system text logs use weekly rotation with four archived files. Some application diagnostics in the system journal currently have no fixed automatic age limit and are managed through storage limits. We do not currently guarantee that every security log is deleted after 90 days.
- Provider logs and backups: these follow the applicable provider and backup lifecycle and can outlast the active record. Account deletion does not instantly erase every backup copy. Contact us for the retention applicable to a particular record.
Your rights
Subject to the applicable conditions, you can request access, correction, deletion, restriction and a portable copy of your personal information, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it without affecting earlier lawful processing. We may need to verify your identity before acting on a request.
Send requests to info@fullpockets.app. You can also complain to Lithuania’s State Data Protection Inspectorate or your local data-protection authority. We do not use your information to make solely automated decisions with legal or similarly significant effects on you; portfolio calculations and AI answers are informational.
Changes
We will update this page when our practices change and identify the effective date above. We will provide additional notice of material changes where appropriate.