Privacy

Who is responsible

We don’t have a data protection officer. The service is in closed beta.

What we collect

Account information: your email address, display name, hashed password, settings, profile picture (if you add one), and details about two-factor authentication and any outside account you sign in with.
Sign-in codes and known devices: when you create an account or sign in from a new browser, we email you a six-digit code. We never store the code itself, only a fingerprint of it. After you confirm the code, we remember the browser by storing a fingerprint of a random number, the browser string, and when the browser was added and last used.
Sign-in with Google (optional): if you choose “Continue with Google”, Google gives us a permanent ID for you, the email address on your Google account, whether Google has verified that address, and your name. If you create your account with Google, that name becomes your display name. We store the ID, the address, and when you first and last signed in with Google. We never receive your Google password, and we don’t ask for your contacts, calendar or anything else in your Google account.
Portfolio data: the holdings, cost basis, transactions, cash balance, import files and watchlist that you enter or import yourself.
Agent conversations, reports and assessments: earlier questions to the portfolio agent and its answers, research reports, the daily briefs written for you, and the explanations from “Assess my portfolio” with the scores they were written from.
Answer ratings: a thumbs up or down on an AI answer, along with that question, that answer and any comment you add.
Session data: a hashed copy of your session token, timestamps and the browser string (which browser and operating system you signed in from), so you can see and end your own sessions.
Usage metadata: the time, customer ID, model name and number of tokens used for each AI request. We use this for quotas and cost control. These records don’t include the text of your question.

We don’t store IP addresses in our database, and it has no field for them. We use your IP address in memory to limit how many times anyone can try to sign in or call the API. When certain errors occur, the server’s technical log may record the address. That log is operational data and is not linked to your account.

How we use your information, and our legal basis

Running your account and providing the service: signing you in, showing your portfolio, and delivering the research and alerts you asked for. Legal basis: our contract with you (GDPR Art. 6(1)(b)).
Security, preventing abuse and improving the service: limiting sign-in attempts, keeping an audit log of account events, troubleshooting, and improving answer quality. Legal basis: legitimate interest (point (f)). You can ask us to stop this processing at any time.
Email alerts: price alerts and other emails you turn on yourself. Legal basis: consent (point (a)). You can withdraw consent in your settings. Withdrawing doesn’t affect emails we have already sent.
Bookkeeping: purchases, receipts and accounting records, once we start taking payments. Legal basis: legal obligation (point (c)).

We need your account information and portfolio data to enter into and carry out our contract with you. Without them, we can’t create your account or show you anything about your portfolio.

Feedback on answers

If you give an AI answer a thumbs up or down (in the chat, on a report or on today’s brief), we store that question, that answer and any comment you add. This helps us see what went wrong or right and improve the service. We delete it 7 days after we have reviewed it, and never later than 90 days. If you delete your account, we delete your feedback too.

Ask Kervence and “Assess my portfolio”

These are two separate features, and we store them differently.

We don’t store your chats with Kervence. The chat lives in your browser and disappears when you close the tab. We send your question to our AI provider to get an answer, and we store a record of the time and token usage, but not the text. If you ask about your own portfolio, Kervence looks up your holdings and scores itself, and those figures are sent to the AI provider with your question.
“Assess my portfolio” on the portfolio page writes an explanation of your scores. We store the explanation in your account, per portfolio and language, along with the scores it was written from. We delete it when you delete your account, and it is included when you download your data.

The portfolio agent has been removed. Nothing more is written to the conversations you had with it, but they stay in your account until you delete your account.

Your trading pattern

On the portfolio page you can turn on “Your trading pattern”. The service then works out how you have traded, from the transactions in your portfolio: how often you trade, how long you hold a stock, how concentrated the portfolio is, how many purchases you sold at a gain and how many you still own that are below cost. This is profiling under Article 4(4) of the GDPR. It is calculated only when you ask for it, and it is not stored. Whether you have turned it on is remembered only in your browser (kv-handelsmonster, localStorage). No AI is involved in the calculation, and the figures are not sent to anyone. The figures describe what you have done. They are not an assessment of how much risk you can take or of what suits you, and they drive nothing in the service. If your trading clearly looks like a different trader type from the one you chose, the card suggests the other one, but only you can switch. If you press “Remember this”, one fixed line with two of the figures is saved in the note below, and the rules there apply.

What the agents remember about you

The agents keep a short note of what you tell them about yourself, such as how you feel about price swings, which sectors you follow and how short you want answers to be. The note is written automatically: Kervence adds a point when you say something like that in the chat, and your answers to “Tailor the agent to you” become points in the note. The agents use the note to tailor explanations and examples to you. It is never the reason for a buy or a sell. The note is sent to Anthropic along with your question when the AI answers you. The agents are told never to store health, political views, religion, trade union membership, sexuality, passwords, account numbers or national identity numbers. The service itself rejects lines that look like an account number, an identity number, a password or a link. No code catches the other kinds. If you write something like that yourself in “Tailor the agent to you” or on your profile page, it stays in the note until you delete it. You can see, correct and delete the note under “What Kervence remembers about you” on your profile page. It is deleted when you delete your account, and it is included when you download your data.

Who else receives your information

Anthropic (USA) provides the language model behind five features: Ask Kervence, “Assess my portfolio”, research reports, today’s brief and the advice on the portfolio page. We send Anthropic your question and whatever context that feature needs. For Kervence, “Assess my portfolio” and the portfolio-page advice, this can include your holdings with quantity, price, value and unrealized gain or loss. No other part of the service sends information about you outside. When we use the model on public material, such as company filings, we send only that material. If you import a CSV file in a format we don’t recognize, we also send, one time only, the column names, the type of data in each column (such as “date” or “number”), and words that repeat in the text columns, with all digits removed, so the model can work out the format. These words are usually transaction types, but they may include names of securities. We don’t send amounts, quantities, dates or account numbers. We store the result without any link to you and use it the next time someone imports a file in the same format.
Google (USA), only if you choose to sign in with Google. In that case we send you to Google, and Google sees that you are signing in to Kervence. Google handles this as an independent controller for your Google account, under Google’s privacy policy. It is not our processor. We don’t send Google your portfolio data, your questions or any other information about you. If you sign in with email and password, Google isn’t involved.
Domene AS runs our email service and mailboxes. It receives your email address and the content of emails we send you, such as alerts and password reset links.
Stripe is our chosen payment provider, but we haven’t built checkout yet, and no payments go through Stripe today. Once checkout opens, Stripe will receive your name, email and payment details. We don’t store card numbers.
OpenFIGI (Bloomberg, USA): if you import a file with US securities, our server may look up their ISINs at OpenFIGI to find the ticker. We send only the ISINs, with no name, email address or anything else that identifies you.
Cloudflare sits in front of the service as a tunnel. All traffic between your browser and our servers passes through Cloudflare, so Cloudflare sees your IP address and the pages you open. Cloudflare keeps its own logs of this under Cloudflare’s privacy policy.

We don’t sell your information, and we don’t use portfolio data on public pages.

Transfers to the USA

Anthropic is a US company, so questions from the five features above are processed outside the EEA. A transfer like this requires a valid transfer mechanism, in practice the European Commission’s standard contractual clauses (SCCs) or something equivalent, as well as a data processing agreement. We are working on getting both. We don’t claim the agreement is in place today. Once it is signed, we will list it here with the date.

How long we keep your data

Account: as long as your account exists. If you delete your account, we remove your email address, name and sign-in details. An anonymized record stays behind so no one else can take over your account.
Portfolio and transactions: your transactions count as accounting records, so we do not delete them when you delete your account. They stay without any name or email attached, because bookkeeping rules may require us to keep them. If you want them deleted, contact us and we will weigh your request against our duty to keep records.
Agent conversations, reports, briefs and explanations from “Assess my portfolio”: as long as your account exists. We haven’t set a shorter limit yet.
Answer ratings: 7 days after we have reviewed them, and never longer than 90 days.
Sessions: 30 days, or 90 days if you checked the box to stay signed in. If you log out, the session ends right away.
Sign-in codes: a code is valid for 10 minutes and works only once. We delete the fingerprint when it is more than an hour old and you get a new code, and in any case when you delete your account.
Sign-in with Google: we keep the ID, email address and timestamps as long as your account exists, and delete them when you delete your account.
Known devices: we remember a browser for one year after you last signed in from it. We stop trusting it right away if you change or reset your password, or choose “Forget all devices” on your profile page. The record itself stays until you delete your account, even after we stop trusting the browser or the trust expires.
Usage metadata for AI requests: we haven’t set a retention period yet. If you delete your account, we remove your customer ID from these records, so the usage no longer points to you. We keep the records themselves to track quotas and costs.
Audit log of account events: 400 days, including after you delete your account. We keep this log for security, and no one can change it after the fact.
Accounting records: as long as bookkeeping rules require, including after you delete your account.
Backups: a backup may still contain data for a while after it has been deleted from the service. We haven’t decided yet how long to keep backups.

Cookies and browser storage

On your first visit we show a window where you choose which categories you accept. Necessary cookies are always on; we don't use statistics or marketing today. Your choice is kept in kv:samtykke (localStorage) for a year. You change it with the “Cookies” link at the bottom of the page.

We store these items in your browser, all of them our own. None of them track you, and no third party can read them.

tr_session (cookie) keeps you signed in. If you don’t choose “remember me”, it expires when you close the browser, and your session ends after 30 minutes of inactivity. If you check “remember me on this device”, it lasts 90 days with no inactivity limit, so you stay signed in for three months even if you don’t use the service.
kv_enhet (cookie) remembers that you confirmed your sign-in from this browser with an emailed code, so we don’t ask for a code every time. It contains only a random number and lasts one year from your last sign-in. The secure sign-in you ask for depends on it. If you choose “Forget all devices”, it stops working in every browser and is deleted from the one you are using.
kv_oidc_kode (cookie) is set only when you sign in with Google from a browser we don’t recognize. It carries your sign-in over to the page where you enter the code. It holds a random one-time token, your account number and your partly hidden email address. It lasts no more than 10 minutes, is sent only to the sign-in page, and is deleted as soon as that page has read it. The sign-in you ask for depends on it.
kv-handelsmonster (localStorage) remembers that you turned on “Your trading pattern” on the portfolio page. It contains only an on marker and is removed when you press “Turn off”.
kervence-planvalg (localStorage) remembers the plan and billing period you picked, so your choice carries through sign-up. It stays until you clear your browser data.
kervence-spor (sessionStorage) holds your latest messages in the Kervence chat, so they aren’t lost when you move to another page in the same tab. It disappears when you close the tab.

We don’t use analytics tools, advertising cookies or third-party tracking. We host our fonts on our own server.

We count how many people visit, but not who they are. Each day, the server stores one line recording which pages were opened, how many times, and how many browsers visited. To avoid counting you again on every page you click through, we compute a short identifier from your IP address and browser. The identifier exists only in the server’s memory, for half an hour, and becomes useless when the service restarts. We don’t store the identifier, your IP address or your browser string anywhere.

Your rights

You have the right to see the information we hold about you, have mistakes corrected, have your information deleted, and get a copy in a readable format. You can also object to processing we base on legitimate interest, and ask us to restrict processing while we consider your objection.

You can use two of these rights yourself on your profile page. “Download my data” gives you a JSON file, and “Delete account” deletes your account. The download includes your profile, portfolios, transactions, the companies you follow, alert settings, alerts we have sent you, agent conversations, explanations from “Assess my portfolio”, what the agents remember about you, research reports, daily briefs, answer ratings, sign-in identities, sessions, known devices, subscription and token purchases, and the log of account events. It also shows your AI usage: when each AI call was made, what it was for, and how many tokens it used.

If you think we are handling your information wrongly, contact us through support and we will look into it. If you live in the EU or EEA, you also have the right to complain to the data protection authority in your country.

The content is written by AI

The text the service shows you, including chat answers, reports, briefs and explanations from “Assess my portfolio”, is written by a language model based on data we have collected. It is research to support your own judgment, not investment advice, and it may contain errors.

Age limit

The service is not for anyone under 18, and we don’t direct it at children.

Changes

If we change this policy, we will post the new version here. If the change is significant, such as a new recipient or a new purpose, we will email account holders.