Trust & security

• Nothing in Allocaria is personal investment advice. Ratings, plans and review items are information to help you decide; the decision is always yours. Some figures in your account, such as “Portfolio fit” on a stock’s page, are calculated from the holdings you entered; they are shown apart from the Allocaria Score and remain information, not a recommendation to you.
• We never hold or manage your investments or the money you invest — it never passes through us.
• Tax dates are general information from public sources, not tax advice. Rules change — check with your tax authority.
• Past performance and backtests do not guarantee future results.

• You add holdings yourself: upload a broker statement (for example an Interactive Brokers Flex file), paste a list or a screenshot, or type them in. A statement is a record of past activity — it cannot be used to trade.
• We never ask for your broker login, password or API keys.
• Your money stays in your own brokerage account. Every buy and sell is placed by you, at your broker.

• The site works only over HTTPS (TLS with HSTS), so everything between your device and our server is encrypted in transit.
• Passwords are kept only as one-way scrypt hashes, and sign-in tokens only as hashes. Other stored data is not separately encrypted by the application.
• Two-factor sign-in with an authenticator app is available in settings. Sign-in attempts are rate-limited, and changing your password signs you out everywhere.
• We don't sell your data, and this site runs no advertising or analytics trackers.
• In your account settings you can download all the data your account holds (profile, portfolios, transactions, goals, watchlist, sign-in history and more) as a JSON file. It does not include secrets such as password hashes, results the system computes from your data, or the audit log of account actions (write to us for those entries). Transactions also export as CSV and reports as PDF from the Portfolio page.
• Deleting your account immediately blocks sign-in, signs you out everywhere and cancels any subscription. The remaining data is erased automatically after 30 days, apart from the few records the Privacy Notice lists as kept.

• The overview of your account area shows your allocation against the model split of your risk level and a review of each holding — its share, its Allocaria Score and its tax-free date.
• Nothing is sent to a broker and nothing is placed on your behalf; you place any trade yourself.
• No background process changes your portfolio: your holdings change only when you add trades or positions.
• When data is out of date or the rating model's health is in doubt, the account area says so instead of staying silent.

• Every stock rating (the Allocaria Score) shows the factors behind it — open a stock to see what lifts the score and what holds it back. The score is the same for everyone. “Portfolio fit”, calculated from your own holdings, is shown apart on a stock’s page and is not part of it.
• A rating is a rank, not a probability or a price forecast.
• Backtests are labelled as backtests; they are not live results.
• Your portfolio is compared with SPY over the same days, in euros; a measure with too little history says so instead of showing a number.
• The AI assistant explains and answers questions. It does not set your allocation.
• Ratings are produced by Allocaria's own models. We accept no payment from any company to influence a rating, and hold no financial position in the securities we rate.

• We hold no third-party security certification and have not had an external security audit.
• This page describes how our own code works; it is not an auditor's attestation. Accessibility is self-tested with automated checks (axe) that run on the public pages and the main account pages and fail on critical or serious findings; they cover only part of WCAG AA, and there has been no manual or external accessibility audit.

• You can export your data and delete your account in settings. For anything else about your data — a question, a correction, an objection — write from the email address of your account.
• Found a security issue? Please tell us privately before disclosing it publicly.

Email: info@allocaria.com