Privacy

Who is responsible

Benoît Pellevoizin, who publishes Etfy (see Legal notice), decides why and how your personal data is used. Write to bpellevoizin@gmail.com for any question about your data: to access it, correct it, withdraw a consent or delete your account.

Without an account

• You can read fund pages and use the tools without an account. Etfy does not ask who you are.
• Our hosting provider receives the technical data every web request carries, such as your IP address and browser type, to deliver the pages and keep the service secure. The application does not copy it into its own database. To limit repeated requests for a confirmation email, it also uses the IP address briefly in memory, without storing it.
• Etfy loads no advertising or audience-measurement script, and its fonts are served from its own domain.

When you create an account

Etfy collects:

• your first name, your email address and a password. The password passes through Etfy’s server while your account is created; Etfy does not keep it or write it to its logs, and our sign-in service stores it only in hashed form;
• the language of the screen you used;
• optionally, three ranges: your age, the amount you have invested or plan to invest, and your investing horizon. They are kept only if you tick the statistics box below, and are never shown with your name;
• your choices on the three boxes (statistics, alerts, sponsored message): your choice, the date and time, the screen, the exact text shown to you and whether the box was pre-ticked. This record is the proof of your consent.

Why: to create and secure the account you ask for, to confirm your email address (a confirmation email is sent before the account can be used), and to keep proof of your choices. Optional answers and each box rest on your consent.

The box “Tell me when something changes in my ETFs” is pre-ticked. A pre-ticked box is not a valid consent, so the legal basis for this alert is not decided yet. Etfy does not send alerts or sponsored messages yet; the choices are recorded for when it does.

Minimum age: Not decided yet. The optional age question starts at 18.

Anonymous statistics sold to issuers

• Today, if you tick the statistics box, only your optional answers are recorded, with your consent. Etfy does not produce or sell statistics yet.
• If it does, your answers could be counted in anonymous statistics sold to ETF issuers. Etfy commits that no figure will cover fewer than 50 people, and that no figure will show your name, your email or your individual answers.
• Nothing about you is passed to an issuer individually. Sign-up offers no such choice today.
• These answers are used for statistics only: never to recommend a product or to change what you see.
• If you withdraw the statistics consent, your three optional answers are erased from your profile.

The assistant

When the assistant is switched on, you can ask a question about a fund. It answers only from that fund’s documents and says it is an AI.

• Your question (500 characters at most) is checked, then sent to our AI provider, Anthropic, with extracts of the fund’s public documents. Anthropic processes it in the United States. Your name, email, account and portfolio are not sent. Do not put personal details in a question.
• Etfy keeps a log of each exchange: the question, the answer, the sources cited, whether it was refused, the fund, the date, the model and prompt version. It holds no identity and is not linked to your account. Only Etfy can read it. Because it is not linked to a person, a request about one particular question may not be possible to satisfy.
• How long Etfy keeps the log: Not decided yet.
• Whether Anthropic keeps what it receives, for how long, and the contractual safeguards for the transfer to the United States: Not decided yet. The plan is to switch the assistant on only once they are settled.
• To limit use and cost, a visitor has 3 free questions (counted with the cookie described below) and a member has at most 20 questions an hour and 60 a day. A member’s count uses a non-reversible fingerprint of the account number; it is not part of the log.

Cookies and browser storage

• etfy_vq: set when a visitor asks the assistant a question. A random identifier, signed, with no personal data, kept 24 hours, used only to count the 3 free questions. Whether it needs your consent is an open point; it is not used for anything else.
• Sign-in cookies: set when you log in, when you sign up and when you ask for the confirmation email to be sent again (a temporary one is used to complete the email confirmation), to keep you signed in. They cannot be read by the page’s scripts and are sent only to Etfy.
• etfy.taxCountry, in your browser’s local storage: remembers the country you pick for tax explanations. It stays on your device and is not sent to Etfy.

Broker links are shown for information. No broker partnership is active yet, so Etfy is not paid when you click them. Clicks are counted anonymously (the fund and the broker, no identifier, no cookie). If a partnership starts, this page will say so first. No order goes through Etfy.

Who receives data

• Supabase: database, sign-in service and the confirmation email, in a region of the European Union.
• Vercel: serves the pages. Where its servers process requests is not set in Etfy’s configuration: Not decided yet.
• Anthropic: the assistant, as described above, in the United States.
• Google: the contact address is a Gmail address, so an email you send to it is handled by Google, possibly outside the European Union. A dedicated address hosted in the European Union: Not decided yet.

Etfy does not pass your personal data to issuers, brokers or advertisers.

How long data is kept

• Account data is kept while the account exists. Deleting the account removes it from the database; copies stay in backups until the backups expire, and the backup period is not set yet.
• For the issuer-contact and sponsored-message choices, a pseudonymised proof of consent (a keyed fingerprint of your email, the text shown and the dates) is kept after deletion, to establish that consent was given. The contacts themselves are removed from the issuer’s console and export. Deleting the account also adds a line to an erasure log holding a keyed fingerprint of your account number, to show the deletion was carried out. For how long both are kept: Not decided yet.
• Assistant log and all other retention periods: Not decided yet.

Your rights

You can ask to access your data, correct it, delete it, restrict or object to its use, receive it in a portable form, and withdraw any consent at any time (withdrawing does not undo what was done before).

For now, write to bpellevoizin@gmail.com; a “My data” screen with one-click withdrawal and deletion is planned but not available yet. You can also complain to your data protection authority; in France, the CNIL (cnil.fr).

When something material changes here, the date at the top changes too.