Your Portfolio Health Score in 60 Seconds

We do not sell your personal information under any definition — CCPA, GDPR, or otherwise. We do not share your data with third parties for advertising or behavioral profiling. We have no financial incentive programs that involve selling consumer data. The only third parties that touch your data are the service providers we name in our Privacy Policy — each processes only what's strictly required to run the platform (auth, payments, transactional email, market data).

All connections use TLS — every request, every database session, every cache read. Data at rest is encrypted with AES-256 at the database and blob-storage layer (Azure-managed keys). Sensitive fields (email, portfolio notes, broker details, cost basis) get an additional application-level encryption pass using Fernet symmetric encryption before they're written. Payments are handled entirely by Stripe (PCI DSS Level 1 certified) — we never store, process, or transmit credit card numbers ourselves.

Vault items (jewelry, watches, precious metals, gemstones, and any other items you choose to store there) are encrypted with a key derived from a PIN that only you know. We never store your PIN — we derive a Key Encryption Key (KEK) from it using Argon2id, then use that KEK to wrap a per-item Data Encryption Key (DEK), which encrypts the item with AES-256-GCM. The decryption key exists only inside an unlocked browser session and never touches our servers' disks. If you forget your PIN, the only recovery path is the recovery code you captured at setup — there is no backdoor, even for Moneyta support.