Where your data lives

What we keep with your account

• Sign-inName, email, a scrambled (hashed) password, sign-in times, when you were last on, your Google account id if you sign in with Google, and the IP address of each sign-in (kept 180 days, for security).
• Sign-in cookieOne cookie keeps you signed in while you use the site: it ends after 30 days without a visit. You can be signed in on up to 3 devices; signing in on a fourth signs out the oldest. The site also keeps your records in your browser's own storage.
• PlanYour plan and our payment processor's ids for it. The payment processor holds your card, not us.
• Watchlist and alert choicesFor email alerts you switch on, also the tickers and share counts you hold, open purchases (shares, date, price, target) and your bell alerts; switching one off deletes what it used.
• Backup and sync, if you turn it onA copy of your records, kept with your account so they follow you. It is encrypted at rest with AES-256 on our servers, never shared or sold, and you can delete it any time by turning sync off.
• Broker connection, if you use oneThe access pass, encrypted. For E*TRADE, also your developer Consumer Key and Consumer Secret (the secret encrypted) until you remove them; an E*TRADE sign-in is kept up to 90 days so an ended one can ask you to reconnect. Disconnecting deletes the pass.
• Connected broker, if you connect one through our connection partnerAn encrypted pass, and the last reading of your accounts (account names and the last four digits only), cash and holdings. More below.
• Complete, the AI helperHow many questions you asked each day and how much they cost to answer. Never the questions or the answers. More below.
• Messages you send usHelp and feedback messages are kept with your account email, the page you were on, your browser and our reply, so we can follow up.

One exception to "files stay on your computer": a spreadsheet you upload (the RMS trading template, the older Upload a spreadsheet button, or the sheet-against-broker check) is sent to our server to be read; it isn't kept. Broker CSV and PDF files are read in your browser.

To show news about your funds, the tickers you hold (never share counts or amounts) are sent to our server to look up their headlines; they aren't saved with your account. Insights, Equal-Dollar and Mag 7 likewise send each fund's ticker and dollar amount to work out what you own underneath; nothing is saved.

Connecting your broker

For brokers we don't connect to directly, we use a secure connection partner that links your broker read-only. You pick your broker, sign in on your broker's own page, and come back to CEF Complete.

• Read-onlyThe connection is made as read-only. CEF Complete can see your accounts, cash, holdings and history. It cannot place, change or cancel a trade, or move money. If a connection ever came back able to trade, we take it straight down.
• Your broker passwordYou type it on your broker's own page. It never passes through CEF Complete, and we never see or keep it.
• What we keepA private pass that lets us read your connection, kept encrypted. Which broker you connected and whether the connection still works. The last reading of your accounts (only the last four digits of each account number), cash and holdings, so your page opens quickly.
• Your historyYour past transactions are read and sent to your browser, where they are kept with your other records for Income and returns. They are not kept on our server, unless you turn on Backup and sync.
• Vanguard, through PlaidVanguard accounts connect through Plaid Inc., read-only, to bring in your holdings and transactions. Plaid's own practices are described in the Plaid End User Privacy Policy. You can disconnect at any time, and you can also manage the connection at my.plaid.com.
• Disconnect at any timeUse the Disconnect button next to your connected broker. We remove the connection at our connection partner and delete its last reading here. The encrypted pass stays with your account, with nothing connected to it, until you close your account.

Complete, the AI helper

Complete answers your questions using an outside AI provider. Here is exactly what goes to that provider when you ask something.

• AlwaysYour question, the last few messages of the same conversation, and the information Complete looks up on this site to answer it (such as fund prices, payments and dates).
• Only if you tick "Use my holdings" (or pick a starter question marked with a briefcase)A summary of what you hold: each ticker, how many shares, what you paid in total and what it is worth now, and your Risk mix totals (working capital, cash and the share at each risk level, with your goal). With it, the payments your imported or connected history shows for the last 45 days (date, fund and dollar amount). It is sent for that one question only; with the box unticked, an earlier answer that used it is not sent again.
• NeverYour name, email, password, account numbers or broker sign-in.
• What we keepA count of your questions each day (there is a daily limit) and how much computing your answers used. We don't keep or log your questions or Complete's answers. The conversation lives in your browser tab and is gone when you close it.

The AI provider is a separate company with its own privacy policy, and it handles what it receives under that policy. If you'd rather nothing about your holdings leaves CEF Complete, leave "Use my holdings" unticked; it is off unless you tick it.

Email

We send email through an email delivery service. It receives your email address, your name if you gave one, and the message itself, so it can deliver it.

• Account emailsThe link to confirm your email address when you sign up, password reset links you ask for, and an invitation if we set up an account for you.
• Alerts you switch onEmails about raises, cuts, specials, upcoming dates and price targets, and the weekly summary, only if you turn them on. Every one has an unsubscribe link, and you can switch them off where you turned them on.
• Notes you send usIf you ask for more access, a copy may come to us by email, through the same service.
• No marketing listsWe don't add you to a newsletter or share your address with anyone to market to you.

Counting visits

We count how many people open our pages, so we know whether anyone is finding the site. The count is kept by day and by page, with the website that linked to us when there is one.

• No cookie for itCounting sets no cookie and uses no tracking service. Nothing follows you to other sites.
• Nothing that identifies youTo tell one visitor from another on the same day we use a scrambled code made from the day, your network and your browser type. It changes every day and can't be turned back into your address. We don't store your IP address for counting visits (sign-ins keep it, as above), and the count isn't linked to your account.
• Gone after 90 daysThe daily codes are deleted after 90 days and only the totals stay, except a short record of sign-up steps (such as starting checkout), kept to see where people get stuck.

Services we use

We use service providers in these roles: a payment processor (payments), an email delivery service (emails), hosting and database providers, a sign-in provider (only if you choose to sign in with it), a secure connection partner that links your broker read-only (only if you connect a broker through it), an AI provider for Complete (it only sees your holdings if you tick "Use my holdings"), a charting provider, and providers of fonts and page scripts. Each handles only what it needs for its role. Complete's AI provider may process questions outside the United States.

The names of our service providers are available on request at support@cefcomplete.com.

Delete or copy your information

Settings → Backup and sync downloads a copy or deletes your synced copy. To close your account, use Settings → Account → Delete my account (or email support@cefcomplete.com) and we delete your account and the records tied to it. Cancel a paid plan in Manage billing first. We keep only what we must: a note that the account was closed (with its email), billing records, and sign-in security logs until they expire. Every broker connection is disconnected, including one made through our connection partner. What is kept only in your browser stays there until you clear it.

Not investment advice. Full disclaimer · Terms of Service.