Privacy Policy

Account information. When you create an account we collect your email address and a securely hashed password. We never store your password in plain text.

Portfolio data you enter. The properties, deadlines, transactions, contacts, documents, and notes you add are stored so we can provide the service to you and the members of your account. This is your data; we do not sell it or use it to build advertising profiles.

We use your data to operate HoldVue: to sign you in, show your portfolio, send the deadline reminders you configure, and keep the service secure and reliable.

We use a single, essential session cookie to keep you signed in. It is httpOnly, SameSite=Lax, and holds only an opaque session token — not your personal data. We do not use advertising or cross-site tracking cookies.

To understand which features are useful and where the product can improve, we use privacy-first analytics (PostHog). Analytics are off by default until you opt in, and requests are proxied through our own domain. We capture only a small set of curated events (for example, that a property was created) — never the contents of your properties, financial figures, addresses, or anything you type. Your IP address is anonymized.

When analytics are enabled, we may record a masked replay of your session to diagnose usability issues. All text and form inputs are masked in your browser before anything is sent, so recordings never contain your data, property addresses, or financial figures. Recordings are IP-anonymized, do not capture the browser console or network traffic, and you can opt out at any time.

We keep your portfolio data for as long as your account is active. Session replays are retained for a limited period (currently 30 days) and then deleted automatically.

You can opt in or out of analytics and session replay at any time. You can also request access to, correction of, or deletion of your account data by contacting us.

Questions about this policy or your data? Email us at privacy@holdvue.com.