Privacy policy
Last updated October 30, 2026
Who operates Grayedge
Grayedge is operated by Grayedge Capital Management LLC. This policy explains how Grayedge handles information used for account access, portfolio analytics and shared-firm reporting. Contact support@grayedgefinancial.com with privacy questions.
Information we process
- Account information: email address, authentication information, user identifiers, saved sessions and firm membership or access roles.
- Financial records: connected brokerage account identifiers and authorization information, balances, holdings, transactions, contributions, withdrawals, investor allocations and calculated portfolio results.
- Information you provide: firm and investor records, requests, notes, documents and support messages.
- Technical information: device/browser information, IP addresses, request times and diagnostic or security information processed by our hosting and account services. The information available depends on your device, connection and provider settings.
- Purchases, when offered: subscription identifiers, purchase status and firm entitlement information needed to verify access. Apple handles Apple-billed payment details.
How information is collected and used
We receive information when you create or use an account, enter or upload records, contact support, join a firm or authorize a supported brokerage connection. Authorized services supply connected brokerage data and market information.
We use it to authenticate users, enforce access roles, synchronize records, retrieve connected account data, calculate and display analytics, provide investor reporting, verify subscription access when offered, protect the service and handle support or data requests.
Advertising, analytics and AI
Grayedge does not sell personal information, use it for targeted advertising, add optional visitor-analytics trackers, or send portfolio records to AI services. Operational diagnostics and security processing by our infrastructure providers are used to run and protect the service.
Service providers and shared firms
We use Cloudflare for web hosting and application delivery and Supabase for authentication, database and backend services. Brokerage connections and related data involve tastytrade and its data services. Market and economic information may also be requested from Yahoo Finance, the Federal Reserve Bank of St. Louis and the U.S. Bureau of Labor Statistics. Support email is handled through our configured email-routing and mailbox services.
Providers receive information needed for their function, such as connection/request information, account authentication or authorized financial-data requests, under their applicable service terms and privacy arrangements. Apple processes Apple-billed purchases when available. Service processing may take place in a country different from yours.
Your firm administrator and other authorized members can access shared records according to their roles. Only add information you have authority to share. We may also disclose information when required by applicable law or necessary to investigate misuse or protect accounts and the service.
Device storage and security
The web app uses browser storage for sign-in sessions, preferences, cached portfolio records and recovery information. Using the app in an iPhone web view can also create device-side website storage. Removing a login from one device does not delete your cloud account, other saved logins or exported files.
Grayedge uses HTTPS connections and account access controls. No service or device is completely secure. Protect your device and login, and never send passwords, authentication codes or brokerage tokens in a support message.
Retention
| Category | Retention criteria |
|---|---|
| Active account and portfolio records | Kept to provide your account, connected features and shared-firm records while they remain in use, subject to deletion controls and requests. |
| Shared firm records | A member deleting a login does not automatically erase the firm’s records or records used by its other members. These remain under the firm’s access and deletion controls. Contact the administrator or support about personal information remaining in shared records. |
| Support, operational and security records | Retention depends on resolving the request or incident, protecting the service, handling disputes and satisfying applicable recordkeeping obligations. Infrastructure logs follow the relevant provider’s configured retention. |
| Backups and recovery copies | Deleted live records may remain in protected recovery copies until those copies rotate out under the configured backup retention. A live-account deletion is not an immediate erasure of every backup copy. |
| Device caches and exports | Copies may remain until removed from the relevant device, browser storage or export destination. Copies held by others are not removed by signing out. |
Our database service is on Supabase Pro. Backup retention depends on the configured daily-backup or point-in-time-recovery service; this policy does not promise that every copy is removed within a fixed number of days. If you need details about a retained record or recovery copy, contact support.
Account deletion and broker authorization
Open More → Account & help → Delete my Grayedge account. Review the affected firms and follow the reauthentication and confirmation steps. Owners of shared firms may need to transfer ownership first. Deleting a sole-user firm can also delete its stored records and brokerage connection credentials. Other firms and shared records can remain for their authorized members, as described above.
Disconnecting a brokerage, deleting Grayedge account data and closing a brokerage account are separate actions. To revoke brokerage authorization, use the supported connection controls and, where applicable, your brokerage’s authorized-app controls. Deleting a Grayedge login does not close a brokerage account or automatically cancel Apple billing.
Your choices and requests
You may contact support@grayedgefinancial.com to request access, correction, deletion, disconnection or information about processing and retention. Depending on applicable law, additional privacy rights may apply. We may verify your identity and authority before handling sensitive requests. Do not email full account exports or credentials.
Changes to this policy
We will update this page when these practices change and revise the date above. Where a change requires additional notice or consent under applicable law, we will provide it.