Privacy Policy

Last updated 7 October 2026

What Plootra keeps about you, why, who else handles it, and how to see, take or delete it.

1. Who we are

[Operator name], [Postal address], Luxembourg, runs Plootra and is responsible for your information (the “controller”). Questions and requests go to support@plootra.com.

2. What we keep

• From Google, when you sign in: your name, email address, profile picture and Google account identifier. Never your Google password.
• What you add: portfolios, positions, transactions, cash balances and watchlists, including those read from statements you import, such as an Interactive Brokers statement.
• Your settings: for example the theme, how risk is read and the research model.
• Research: the questions you ask, the answers, and how much of your plan's allowance each used.
• Sign-in records: for each signed-in session, the IP address, the browser it was opened in, and when it was last used.

We do not keep payment card details. When paid plans open, a payment provider will handle them, and this policy will say so first.

3. Why, and on what basis

• To run the service you signed up for: your account, your portfolios and their figures, research, and your plan's limits. Basis: our contract with you.
• To keep accounts safe: sign-in records, preventing abuse. Basis: our legitimate interest in a secure service.
• To meet legal duties, where the law requires us to keep or hand over information.

We don't sell your information, show advertising, or build marketing profiles.

4. Research and AI

When you ask a research question, the question and the figures from your portfolios it needs are sent through a routing service to an AI model provider, which writes the answer. With web search on, the question is also used to search the web. Leave out anything you would not want to send.

5. Who handles it for us

• Cloud hosting and database, in the United States.
• Domain name, network and content delivery services.
• Google, to sign you in.
• AI model providers and the routing service between them, for research.

Each handles your information only to provide its service to us. The providers of market data receive ticker symbols, never information about you.

6. Outside Europe

Some of these providers are in the United States. Where your information leaves the European Economic Area, it is protected by an adequacy decision, such as the EU–US Data Privacy Framework, or by the European Commission's Standard Contractual Clauses.

7. Cookies

Plootra sets only the cookies it needs: one that keeps you signed in, and a few that remember your choices, such as the theme, your time zone, how panels are laid out and whether values are hidden. There are no analytics, advertising or third-party tracking cookies, which is why there is no cookie banner.

8. How long we keep it

For as long as your account exists. A signed-in session lapses after a week without use. You can delete your account yourself, in Settings › Account: everything in it is deleted at once, except anything the law requires us to keep.

9. Your rights

You can ask to see, correct or delete your information, to restrict or object to how it is used, and to receive it in a portable form. Two of these need no request: your account deletes from Settings › Account, and each portfolio's transactions download from its Transactions tab. Email us and we will answer within a month. You can also complain to Luxembourg's data protection authority, the CNPD (cnpd.lu), or to the authority where you live.

10. Security

Connections to Plootra are encrypted, access to its systems is limited, and a session can be ended at any time by signing out.

11. Children

Plootra is not for anyone under 18, and we do not knowingly keep information about children.

12. Changes

We will tell you before a change to this policy takes effect; the date above shows the latest one. The Terms of Service say what else you agree to.