How Worthly handles your data.

1. Who is responsible for your data

Worthly is run by one individual, not by a company: Stanimir Tsvetkov, Sofia 1000, Bulgaria. Wherever these pages say “Worthly”, they mean that person. For every privacy, data or legal request, write to privacy@worthly.eu.

Under the GDPR this person is the data controller. Should the service later be operated by a company, this section will be updated and you will be notified.

2. What data Worthly holds

• Account. Your email address, a nickname, an optional profile picture, and your password stored only as a slow argon2 hash. Worthly cannot read your password.
• Your financial data. Balances, positions and transactions read from your exchange and broker accounts through read-only keys, and anything you type in by hand: positions, cash movements, goals.
• API credentials. If you add a key, it is encrypted with Fernet symmetric encryption before it is written to the database. Your data export never contains your keys.
• Security data. If you switch on two-factor sign-in: the authenticator secret and your recovery codes, the codes stored only as hashes. One-time email codes are stored as hashes and expire after 15 minutes. A short audit record says that some credential was decrypted at some time; after your account is deleted it no longer points to anyone, and it is removed after 180 days.
• Notifications. If you switch on browser notifications, your browser gives Worthly a push address so it can reach you. It is erased with your account.
• Connection data. Like any web server, Worthly’s server sees your IP address and browser details when you connect. It uses the address to limit repeated sign-in attempts. Server log retention: 14 days.
• Website statistics. Worthly counts visits with Umami, self-hosted on Worthly’s own server. See the cookies page.

3. What Worthly does not do, and what it cannot promise

Worthly does not sell, rent, share or monetise your positions or balances, in any form, ever. It shows no advertising. It does not build profiles of you for anyone else.

Worthly only ever holds what you have chosen to give it: the information you enter yourself, and the information returned by the read-only keys you issue. It holds nothing else about you.

Worthly has no access to your accounts at the exchanges and brokers themselves. It cannot sign in to them, it cannot open or close a position, and it cannot deposit, withdraw or transfer funds. Read-only keys do not permit those actions, and Worthly never requests keys that do.

To keep the service running, secure and correct, the operator holds technical access to the database in which your information is stored. That access is used solely to operate, secure and repair the service. It is never used to browse your finances, and your information is never disclosed to anyone.

4. Why Worthly may use your data

• To provide the service you asked for (GDPR Art. 6(1)(b)): your account, your connections, your net-worth figures, the codes sent by email.
• To keep the service secure and stable (Art. 6(1)(f), legitimate interest): rate-limiting sign-ins, spotting abuse, fixing faults, counting visits to the website.
• To meet legal obligations (Art. 6(1)(c)), if the law ever requires it.

Where Worthly asks your permission for something, such as a browser asking to show notifications, you can withdraw it at any time.

5. Who else handles your data

Worthly uses these providers to run the service. They act on Worthly’s behalf, not for their own purposes.

Your exchanges and brokers. When you add a key, Worthly’s server calls that venue with it. What the venue holds about you is governed by its own privacy terms.

The public website and fonts. The public website serves its typefaces from Worthly’s own server. Fonts are not requested from any third party, so no third party sees the visitor’s IP address when a page is loaded.

Transfers outside the EU. The server and database are in the EU. Hetzner and Brevo both process data within the European Union. Financial Modeling Prep is based in the United States, but it receives only ticker symbols and currency pairs — never any personal data, and never anything about your holdings — so no personal data leaves the European Economic Area.

6. How long data is kept

• While your account exists, your data is kept so the service can work.
• When you delete your account, the rows are removed from the live database immediately.
• Backups are the exception. Encrypted backups retain residual copies: daily backups for 30 days, and monthly archives for up to 12 months. After that they expire and are destroyed. So data you deleted can still exist inside an encrypted backup for up to 12 months.
• Backups are never used for anything except restoring the service. They are not read, mined or analysed.
• The credential-decryption audit record is kept for 180 days and is no longer linked to anyone after deletion.

7. Your rights

You have the right to access your data, correct it, have it erased, restrict or object to its use, receive it in a portable form, and withdraw any permission you gave. The two most common you can do yourself, inside the app: export all your data and delete your account. For anything else, write to privacy@worthly.eu. You will get an answer within one month, as the law requires.

You can also complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or to the data protection authority in your own country.

8. How data is protected

Credentials are encrypted at rest with Fernet. Passwords are hashed with argon2. Two-factor sign-in (authenticator app, with recovery codes) is available, and backups are encrypted. No system can be guaranteed to be wholly secure, and the security page sets out the measures that are still in progress. If a breach affecting you occurs, you will be notified, as the law requires.

9. Age

Worthly is for people aged 18 and over. It is not meant for children and does not knowingly collect their data.

10. Changes to this policy

This policy carries a version and an effective date at the top. When it changes in a way that matters, you will be told by email and in the app before the new version takes effect.

11. Contact

All privacy, data and legal requests: privacy@worthly.eu.