Veralux Finance ("Veralux", "we", "us") is an independent research and portfolio-intelligence service. We do not custody assets, execute trades, or act as a bank or broker. This policy explains what information we collect when you use our website and member platform, why we collect it, and the rights you have over it.
Information we collect
- Account data — email address, display name, and the membership tier on your profile.
- Portfolio data you choose to upload — holdings, custodians, prices, coupon and maturity details, and the documents you attach. This data is stored only against your account and is not shared with other members.
- Research interactions — which research notes you open, requests you submit, and messages exchanged with our analysts.
- Technical data — IP address, browser type, and timestamps strictly needed to operate and secure the service.
How we use it
- To operate the platform and the analyst workflow you signed up for.
- To send service emails (sign-in links, password resets, research deliveries).
- To improve our research, alerts, and pricing accuracy.
- To meet our legal and tax obligations.
We do not sell your data, and we do not share your portfolio with banks, brokers, or third-party marketers.
Cookies and analytics
Veralux uses only the cookies required to keep you signed in and to secure the session. We do not currently run third-party analytics, advertising trackers, or marketing pixels. If that ever changes we will update this policy and request consent before any non-essential cookie is set.
Where data is stored
Account and portfolio data are stored on managed infrastructure inside the European Union. Uploaded files (statements, reports) are stored in private buckets accessible only with a short-lived signed URL.
Statement parsing and AI processing
When you upload a bank or brokerage statement, Veralux extracts the holdings by sending the document’s contents to a third-party AI provider (currently Lovable AI Gateway, which routes the request to Google Gemini) for parsing. Before the text leaves our servers we run an automated redaction pass that replaces IBANs, SWIFT/BIC codes, and any long numeric sequences (account and custody numbers, phone numbers, etc.) with [REDACTED]. Scanned or image-only PDFs are sent to the same provider as page images so that the positions can be read.
The uploaded statement file is deleted immediately after extraction completes; only the structured position data you confirm (security name, quantity, price, currency, custodian) is retained in your portfolio. The AI provider processes the request transiently and does not train models on Veralux traffic. If you would prefer not to have statements parsed by a third-party model, contact us and we can extract your positions manually.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by writing to privacy@veralux.finance. Deleting your account erases your profile, holdings, requests, and uploaded documents within 30 days, subject to legal retention rules.
Contact
Questions about this policy: privacy@veralux.finance.