Privacy Policy

1. Who we are

“Lakefolio,” “we,” and “us” refer to the Lakefolio web application operated for educational equity diversification planning. Contact for privacy requests will be published on the live site once a support email is configured for the production domain.

2. What we collect

• Account identity from sign-in (email/password and/or Google or X): name, email, profile image if provided by the provider, and authentication tokens.
• Billing data via Stripe: customer id, subscription status, plan. Card numbers are handled by Stripe. We do not store full payment card numbers.
• Product feedback you submit in-app (message, optional reply email, light page context). Feedback is not used to re-identify statement contents.
• Usage metering for free-plan limits (e.g., number of full analyses in a calendar month). This is a count, not your holdings.
• Technical logs typical of a hosted web app (IP, user agent, error diagnostics) as needed to operate and secure the service.

3. Equity statements & lots (important)

Equity statements and lot details stay in your browser on this device. We store account identity and billing information only — not your Shareworks PDF contents — unless you later opt into cloud save.

Uploaded PDFs/CSVs are processed to extract lots and build your plan. When you are signed in, plan details (lots, profile settings, and onboarding answers) can sync to your account as an encrypted cloud backup so you do not lose work across devices. Raw statement files are not used for advertising. You can clear local browser data anytime; account deletion removes server-side plan data we control.

4. How we use information

• Authenticate you and operate your account
• Provide, meter, and bill the service
• Improve reliability and prevent abuse
• Respond to feedback you send
• Comply with law and enforce terms

We do not sell personal information.

5. Sharing

We use processors such as hosting, authentication, and payment providers (e.g., Stripe) under contracts that limit use to providing their services. We may disclose information if required by law or to protect rights, safety, and security.

6. Security & encryption

Protecting your equity data is core to the product. We use industry-standard security controls:

• Encryption in transit. All traffic uses HTTPS/TLS so data between your browser and our servers is encrypted.
• Encryption at rest. Account and plan data in our cloud database is stored with encryption at rest on our hosting providers.
• Access controls. Signed-in sessions are required for cloud sync; passwords for email accounts are hashed (not stored in plain text).
• Billing isolation. Card numbers are handled by Stripe; we do not store full payment card numbers. Stripe webhooks are signature-verified.

No method of transmission or storage is 100% secure. Minimize sensitive free-text (do not paste SSNs, full account numbers, or passwords into chat or feedback). We do not sell your personal or portfolio data.

7. Retention & deletion

Account and billing records are kept while your account is active and as needed for legal and accounting purposes. You may request account deletion; we will delete or anonymize personal data we control except where retention is required by law. Browser-local portfolio data is under your control on your device.

8. Children & geography

The service is intended for adults in the United States. It is not directed to children under 13 (or under 16 where applicable).

9. Not professional advice

Lakefolio provides educational estimates of diversification and tax scenarios. It is not a CPA firm, law firm, broker-dealer, or registered investment adviser. Figures can be wrong or incomplete. Do not rely on them alone for sales, withholding, estimated taxes, or filings. Confirm every material decision with a qualified professional who can review your full facts.

10. Changes

We may update this policy. Material changes will be reflected by the “Last updated” date and, where appropriate, additional notice in the product.