Privacy Policy

Last Updated: February 5, 2026

1. Introduction

Unmanaged LLC ("Unmanaged," "we," "us," or "our") provides portfolio analysis software that helps self-directed investors understand their holdings. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, and password when you create an account
• Profile Information: Age, investment timeline, risk tolerance, and financial goals when you complete our questionnaire
• Payment Information: Billing address and payment method details (processed securely by Stripe; we do not store full card numbers)
• Communications: Information you provide when you contact us for support

2.2 Financial Information via Plaid

When you connect your brokerage accounts through Plaid, we receive:

• Account Information: Account names, types, and balances
• Holdings Data: Securities held, quantities, cost basis (where available)
• Transaction History: Recent transactions to understand portfolio activity

Important: We request read-only access to your accounts. We cannot move money, execute trades, or modify your accounts in any way. Your brokerage credentials are handled entirely by Plaid and are never shared with us.

2.3 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on Service
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication; analytics cookies (with your consent)

3. How We Use Your Information

We use your information solely to provide and improve our Service:

• Portfolio Analysis: To analyze your holdings, calculate fees, identify allocation gaps, and generate your personalized report
• Service Delivery: To authenticate you, process payments, and deliver your analysis
• Communication: To send you your report, respond to inquiries, and provide customer support
• Improvement: To understand how users interact with our Service and improve functionality
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws and regulations

4. How We Share Your Information

We share your information only in limited circumstances:

4.1 Service Providers

• Plaid: To securely connect to your brokerage accounts (governed by Plaid's Privacy Policy)
• Stripe: To process payments (governed by Stripe's Privacy Policy)
• AWS: To host our infrastructure securely within the United States

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to:

• Comply with applicable law or legal process
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or others
• Detect, prevent, or address fraud or security issues

4.3 Business Transfers

If Unmanaged is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict role-based access to production systems; principle of least privilege
• Infrastructure: Hosted on AWS with SOC 2 Type II certified data centers
• Monitoring: Continuous security monitoring and logging
• Credential Handling: Brokerage credentials are handled exclusively by Plaid; we never see or store them
• Token Security: Plaid access tokens are encrypted with AWS KMS before storage

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Active Accounts: We retain your data while your account is active and for a reasonable period thereafter to fulfill legal and business obligations
• Analysis Reports: Your portfolio analysis reports are retained for 3 years to allow you to track progress over time
• Plaid Connections: Access tokens are retained while your connection is active; revoked tokens are deleted within 30 days
• Deleted Accounts: When you delete your account, we delete your personal and financial data within 30 days, except where retention is required by law

7. Your Rights and Choices

You have the following rights regarding your data:

7.1 Access and Portability

You can access your data at any time through your account dashboard. You may request a copy of your data in a portable format by contacting us.

7.2 Correction

You can update your account information directly through our Service or by contacting us.

7.3 Deletion

You can delete your account at any time through your account settings. Upon deletion:

• Your personal information will be deleted within 30 days
• Your Plaid connection will be revoked
• Your analysis reports will be permanently deleted

7.4 Revoke Plaid Access

You can disconnect your brokerage accounts at any time through your account settings or by contacting Plaid directly.

7.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Service functionality.

7.6 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or by updating your preferences in your account settings.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected
• Right to Delete: You can request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Opt-Out of Sale: We do not sell personal information, so this right does not apply

To exercise your CCPA rights, contact us at privacy@beunmanaged.com.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete it promptly.

10. International Users

Our Service is operated in the United States. If you access our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our Service, you consent to this transfer.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email to registered users for significant changes

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@beunmanaged.com
• Mail: Unmanaged LLC, [Address to be added]

For data deletion requests or CCPA inquiries, please include "Privacy Request" in the subject line.