Privacy Policy

Fuente Price Pro ("we", "the platform") is a portfolio valuation and passive-income engineering tool, offered by Paulo Fuentealba as an individual, until it is eventually formalized as a legal entity — this section will be updated when that happens. This policy explains what personal data we collect, why, and what rights you have over it, in compliance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and, where applicable, the GDPR for EU users.

Data Protection Officer / contact: Paulo Fuentealba — gutierre.fuentealba@gmail.com. As a small-scale data processing agent (individual/early-stage startup), the founder holds this role directly — a common and permitted practice at this scale.

• Name, email and profile photo (via Google login or email/password, Firebase Authentication).
• Full name, phone number and location (optional, if you fill them in under Settings → Profile).

• Assets you add to your watchlist (ticker, type, class).
• Transactions you record (buy/sell, date, quantity, price, fees).
• Personal goals (target yield, monthly spending goal, estimated monthly contribution) — used to calculate your financial independence progress.
• Answers to the investor profile questionnaire (if you fill it in), used only to personalize recommendations within the app.

• Access timestamps and session identifiers from Firebase Authentication, needed to keep you securely signed in.

What we do NOT collect today: tracking/analytics cookies, third-party advertising, or any browsing data outside the app itself. If this changes (e.g. we enable analytics tools to understand product usage), you will be notified via a specific consent banner before any such collection begins.

• Contract performance (Art. 7, V, LGPD): account and portfolio data are collected because they ARE the service — without them we cannot calculate your Ceiling Price, project your passive income, or show your portfolio history.
• Consent (Art. 7, I, LGPD): optional data (phone, location, investor profile questionnaire) and any future collection of non-essential analytics/cookies depend on your explicit consent, which can be revoked at any time.

• Google Cloud / Firebase (authentication and database storage) — acts as a data processor, under contract, following Google Cloud's security standards. Servers may be located outside Brazil (Google Cloud's global infrastructure); this international transfer follows Google Cloud's standard contractual safeguards for LGPD/GDPR compliance.
• Market data sources (Brapi, Yahoo Finance, SEC EDGAR, CVM, Banco Central do Brasil): we query these sources to fetch prices and fundamentals of public assets — we never send your personal or portfolio data to these sources, we only look up public market information using the ticker you search for.
• We do not sell or share your data with third parties for advertising purposes.

At any time, under Settings → Privacy, you can:

• Export your data (full CSV backup) before taking any other action.
• Permanently delete your account — removes all your personal and portfolio data from our servers (right to erasure), an irreversible action.

You may also, at any time, write to the Data Protection Officer's email (section 1) to: confirm what data we hold about you, correct inaccurate data, or ask questions about this document.

We keep your data for as long as your account is active. When you delete your account via Settings → Privacy → Delete Account, your personal and portfolio data is permanently erased from our servers.

Data is stored in Firebase/Firestore with security rules that prevent any user from accessing another user's data. Write access to sensitive settings (e.g. subscription tier) is restricted to the backend and can never be written directly from the browser.

If we change relevant data collection practices (e.g. adding analytics), we will update this page and, when applicable, show a new consent notice before the change takes effect.