Privacy policy
Effective October 2, 2026. What we collect, why, how long we keep it, and how to delete it.
Who we are
xsreturns (“we”, “us”) operates xsreturns.com, a service that analyses the performance of brokerage accounts you choose to connect. Questions about this policy go to privacy@xsreturns.com.
What we collect
- Account details: your email address and sign-in information for xsreturns. We do not set or store a password. If you choose to sign in with Google, Google tells us the email address, name and profile picture of the Google account you chose; we use the email address to recognise you and do nothing with the rest.
- Early-access requests: the name, email address, brokerage accounts, kinds of investment and options-trading frequency you enter on the sign-up form, and the country the request came from. Used only to set you up and to decide which brokers to support first.
- Brokerage data, read-only: for each account you connect, the account type, positions, cash and margin balances, and transaction history (trades, dividends, interest, fees, deposits, withdrawals and transfers), including up to the history your broker makes available.
- Documents you upload (optional): a brokerage statement you provide to confirm a starting balance.
- What you write in the app: your trading journal entries (theses, notes, post-mortems), the benchmark you choose, and any feedback you send us through the feedback form, with the page you sent it from.
- Basic usage data: pages visited and errors, used to keep the service working.
What we never collect
- Your brokerage username or password. Connections are made through SnapTrade, which authenticates with your broker directly, usually through the broker’s own sign-in page. We receive read-only data, never credentials.
How we use it
- To reconstruct your holdings and calculate your returns and their attribution.
- To generate your report, including written findings produced from your calculated figures.
- To write your Skill Insights: hypotheses about your own past decisions, produced by an AI model from summary figures we calculate.
- To support you, fix problems, and keep the service secure.
We do not sell your data, use it for advertising, or share it with anyone for their own marketing.
Who processes it for us
- SnapTrade, which connects to your broker and passes us your account data through its API.
- Hosting and database providers, which store and serve the service.
- Email delivery providers, which deliver sign-in links and codes and service messages to you, and your feedback to us.
- Google, only if you choose to sign in with Google, which confirms who you are. It learns that you signed in to xsreturns. It receives nothing about your brokerage accounts or your reports.
- An AI model provider (Anthropic), which receives summary figures calculated from your accounts to write the report’s findings and your Skill Insights hypotheses. Those figures include dollar totals and percentages, and the tickers and holding dates of your largest winners and losers. It does not receive your name, email, login or account numbers, your list of transactions, or anything you write in your journal.
- Market data providers, which receive only the tickers we need prices for, never your identity or holdings amounts.
Each processes data only to provide its service to us. We may disclose data if the law requires it.
How long we keep it
We keep your data while your account is open. If you disconnect a brokerage account, we stop collecting new data from it immediately. If you delete your account or ask us to delete your data, we delete it from our live systems within 30 days and from backups within 90 days.
Deleting your data
You can disconnect a brokerage account at any time, and ask us to delete everything by emailing privacy@xsreturns.com from the address on your account. You can also revoke our access from your broker’s connected-apps settings.
Security
Data is encrypted in transit and at rest. Access inside the company is limited to what is needed to run and support the service. Brokerage data reaches us through SnapTrade’s API, never through your login.
Your choices and rights
You can ask to see, correct or delete the data we hold about you. Depending on where you live, you may have additional rights under local law. Contact us and we will respond within 30 days.
Children
xsreturns is not for anyone under 18, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will tell you by email before the change takes effect.