Privacy Policy
Who we are
WhyThat (whythat.org) is a portfolio analysis tool that explains why your investments moved. Operated by Asher Canter, Davie, FL. Contact: morning@whythat.org
What we collect
- Email address and password (password is hashed by Supabase — we never see it in plain text)
- Portfolio holdings you enter (ticker symbols and share counts)
- Email preferences (subscribed/unsubscribed status)
What we don't collect
- Your brokerage login credentials
- Your actual account balances or buy prices
- Payment information
How we use your data
- To generate your daily portfolio brief and send it to your email
- To run the on-demand portfolio analysis feature
- We do not sell your data to third parties
- We do not use your data to trade securities
- We do not share your individual data with anyone
Third party services we use
- Supabase — stores your email, hashed password, and holdings (supabase.com/privacy)
- Resend — sends your daily email (resend.com/legal/privacy-policy)
- Financial Modeling Prep — provides stock price data (site.financialmodelingprep.com/privacy)
- Finnhub — provides financial news (finnhub.io/privacy)
- Anthropic — generates AI explanations of your portfolio movements (anthropic.com/privacy)
Data retention
We keep your data as long as your account is active. You can delete your account and all associated data by emailing morning@whythat.org.
Your rights
You can request to see, correct, or delete your data at any time by contacting morning@whythat.org.
Changes
We'll notify users of material changes to this policy via email.