Privacy note

Market Lab is a small, invite-only tool run by Stewart Stevens. It is an analysis tool, not financial advice. This note says in plain words what it stores and who can see it. It is not a legal document.

What is stored

• You: your name and email, a hash of your password, your authenticator secret (encrypted), recovery-code hashes, and your sign-in sessions.
• Your portfolios: the holdings, cash and other balances you import or type in, your mandate and its history, the proposals and decisions made about it, gates, watchlist, and workups.
• Activity: an audit log of sign-ins and changes (with IP addresses), and a record of each Claude call and its cost.
• Flex tokens you provide for automatic imports, stored encrypted and used only by the background worker.

Where it lives

On a server hosted by Google Cloud, Sydney, Australia. There are no off-server backups yet. If the server is lost, the data on it may be lost too.

Who can see it

• Members of a portfolio see everything in that portfolio, according to their role (owner, member or viewer). Nobody sees a portfolio they don't belong to.
• The operator (Stewart Stevens) administers the server and can technically read the database. The operator does not browse portfolios, and the admin pages show usage and counts, not contents.
• Market data and news the operator holds under a personal licence are never shown to other users.

What is sent to Anthropic

If workups are switched on, when you commission one, the app sends Anthropic (the company behind Claude) your portfolio's mandate text, the name you entered, each holding's symbol, name and weight (never amounts or account numbers), and any earlier workup of that name. Claude may search and read public web pages to write the analysis. Anthropic's commercial terms and privacy centre govern how it handles that content, including how long it is kept: privacy.claude.com. Everything Claude writes is labelled AI-generated and can be wrong.

Cookies

Two cookies: one keeps you signed in and one protects forms from forgery. There is no advertising and no analytics.

Your choices

• Export: download your data (JSON and Word documents) from your Account page.
• Delete: delete your account and data from your Account page. If you are the only member of a portfolio it is deleted too. In a shared portfolio you leave, and the others keep the shared history with your past actions shown as "a former member". An invitation or removal proposal that named your address may keep it in its stored record. You must hand over ownership first if you are the only owner.
• Questions: write to marketlab@bluebutton.co.nz.