Privacy Policy

Limnal Research is a daily-updated macro-regime allocation research product. We collect the minimum data needed to authenticate you and deliver the service. We do not sell your data. We do not run advertising. We do not collect brokerage logins or payment card numbers. If you use the Rebalance tool, we store the holdings you enter or upload so the tool can build your plan. Other members cannot see that data, you can delete it at any time, and we never sell it or share it beyond the service providers listed below.

• Account info from Google sign-in: your email address, name, and profile picture URL. This is the only data we receive from Google. We request the standardemail and profile OAuth scopes — nothing sensitive.
• Usage events: standard server logs (request paths, timestamps, IP, user agent) for security and debugging. Not used for tracking or behavioral profiling.
• Auth session cookie: a single signed cookie that keeps you signed in across visits. Cleared when you sign out.
• Holdings you give the Rebalance tool: the tickers, share counts, prices and dollar values you type in or upload, the names and types (taxable, IRA, Roth, 401(k)) you give your accounts, and any screenshots or PDF statements you upload. We do not extract or store account numbers from uploads, but an uploaded file can still show one until it is deleted, which normally happens as soon as it has been read (see Data retention).

• Your Google account password (handled by Google, never reaches us).
• Brokerage logins or credentials. We do not connect to your brokerage accounts.
• Account numbers from the files you upload. We do not extract them, and a file that shows one is normally deleted as soon as it has been read (see Data retention).
• Payment cards or banking information.
• Health, biometric, or precise-location data.
• Contacts, calendar, drive contents, or any other Google services.

• To sign you in and keep your session active.
• To grant access to private-beta features (admin manually approves your account after sign-in).
• To send transactional notices (invitation, access changes) when needed.
• To diagnose and fix issues, and to keep the service secure.
• To build your rebalance plan from the holdings you provide. We use them for nothing else, never sell them, and share them only with the service providers listed below that run the tool.

Limnal is hosted on the following infrastructure providers, each under their own privacy commitments:

• Vercel — serves the Next.js web application.
• Supabase — stores user records and the model outputs that power the dashboards. US data centers. It also holds the holdings you give the Rebalance tool, and each file you upload until it is deleted, in private storage that other members cannot read.
• Railway — runs the FastAPI backend that computes the daily model rows.
• Anthropic — generates a daily prose summary of the model outputs. Receives only the aggregated daily model outputs (regime score, allocation %s); does not receive user identifiers.
• Anthropic, for Rebalance uploads:when you upload a screenshot or statement, the file is sent to Anthropic's API so its AI model, Claude, can read the holdings in it. The file is sent without your name or email, though the file itself may show them. Anthropic processes it under its commercial API terms, which do not allow it to train models on the file, and keeps it only for a limited period. Holdings you type in by hand are not sent to Anthropic.
• Google — operates the OAuth sign-in flow. Receives only the OAuth handshake; does not receive any Limnal usage data after sign-in.

We use a single first-party authentication cookie set by Supabase. We do not use third-party analytics or advertising cookies. We do not embed Google Analytics, Meta Pixel, or similar tracking.

Account data persists for as long as your account is active. If you ask us to delete your account, we remove your user record and any personally identifying information within 30 days. Anonymous server logs are retained for up to 90 days for security and operational diagnostics, then rotated.

Rebalance tool data stays until you delete it, except uploaded files. Your saved holdings remain in your account until you clear them. Uploaded files are deleted as soon as the holdings in them have been read, and also when a read fails or cannot go ahead. Two cases can leave a file in your private folder: the page is closed or the connection drops right after the upload, before our server or your browser can delete the file; or our storage provider refuses the delete, which can happen if you are signed out at that moment. Such a file stays in your folder until it is deleted in one of these ways: “Delete my holdings and uploads” on the Rebalance page, which deletes every file in your folder; the Delete button next to that upload, when it is listed under Your uploads on the same page; or an email to aakash.desai@gmail.com asking us to delete it, which also works if you can no longer open the Rebalance page. You can delete the record of each upload, or all of your holdings and uploads at once, on the Rebalance page.

You can request access to, correction of, or deletion of your account data at any time by emailing aakash.desai@gmail.com. We will respond within a reasonable period. If you live in a jurisdiction with specific privacy rights (EU, UK, California, Virginia, etc.), those rights apply to your account data.

Limnal is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided data to us, contact us and we will delete it.

We may update this policy as the product evolves. The effective date above is updated when changes ship. Material changes (new data categories collected, new third-party recipients) will be communicated via email to active accounts.

Questions or requests: aakash.desai@gmail.com.