Privacy Notice
Draft of 2026-08-21, published for transparency ahead of counsel review. It describes what the system actually does today; where practice and this notice ever disagree, tell us and we will fix whichever one is wrong.
Who we are
Deeplica Portfolios is operated by Deeplica. Questions and requests about your data: eran@deeplica.ai.
What we hold, and why
| Data | Why |
|---|---|
| Your phone number | It is your account and your sign-in second factor. Sign-in codes are sent to it by SMS. |
| Your name and email address | Contact only. Email is never a way to sign in. |
| Your workspace's portfolio records | The product: transactions, holdings, valuations, alerts, and the reports computed from them. |
| Questions you ask the AI analyst, and its answers | Kept as a record so a disputed figure can be re-examined later. |
| Billing records | Payments received, usage metered, and the token wallet — the ledger you can read in full on your billing page. |
| Audit trail | Who changed what in your workspace, including every access by a Deeplica operator. |
Where it lives
Data is stored in Google Cloud Firestore in the Tel Aviv region (me-west1). Daily backups are kept for 14 weeks. Traffic reaches the service through Google's global front door; storage and processing stay in Israel.
Who processes it for us
| Processor | What they receive |
|---|---|
| Google Cloud | Hosts the application and the database. |
| Twilio | Your phone number and the text of SMS we send you (sign-in codes, account notices). |
| Anthropic | When you ask the AI analyst a question: your question and a computed snapshot of that portfolio (symbols, quantities, values, P&L). Never your name, phone, or email. |
| Market-data and exchange-rate providers (when enabled) | Ticker symbols and currency codes only. |
What we do not do
No advertising, no sale of data, no tracking beyond what running the service requires. Operator access to your workspace is recorded in your own audit trail, reads included, labelled as operator access.
Your controls
- Export — your portfolio records (CSV) and billing ledger export at any time, at any balance,
including after you decide to leave. Your account profile exports at
/api/auth/me/export. - Delete your workspace — from Settings. It becomes read-only for 30 days (restorable, exportable), then is permanently purged. Backups of purged data age out within 14 weeks. Records of payments we received are retained as our own bookkeeping, as the law requires.
- Delete your account — after your workspaces are handed over or deleted,
DELETE /api/auth/meremoves your sign-in, sessions, memberships and the number binding.
הודעת פרטיות
טיוטה מיום 21.8.2026, מפורסמת לשקיפות לפני בדיקת עורך־דין. היא מתארת את מה שהמערכת באמת עושה.
דיפליקה פורטפוליוס מופעלת על ידי Deeplica. פניות בענייני מידע: eran@deeplica.ai.
מה נשמר: מספר הטלפון (הוא החשבון וגורם האימות), שם וכתובת דוא״ל (ליצירת קשר בלבד), רישומי תיק ההשקעות של סביבת העבודה, שאלות לאנליסט ותשובותיו, רישומי חיוב, ויומן ביקורת — כולל כל גישה של מפעיל Deeplica, גם לקריאה בלבד.
היכן: Google Cloud Firestore באזור תל אביב (me-west1). גיבוי יומי נשמר 14 שבועות.
מעבדים: Google Cloud (אחסון), Twilio (מספר הטלפון ותוכן הודעות SMS), Anthropic (בעת שאלה לאנליסט: השאלה ותמונת מצב מחושבת של התיק — לעולם לא שם, טלפון או דוא״ל), וספקי שערים ומחירים (סמלי ניירות ומטבעות בלבד).
שליטה: ייצוא מלא בכל עת ובכל יתרה; מחיקת סביבת עבודה עם חלון שחזור של 30 יום ואז מחיקה של ממש; מחיקת חשבון עצמאית לאחר טיפול בסביבות העבודה. רישומי תשלומים שקיבלנו נשמרים כנדרש בדין.