Marisco
Privacy Policy
Marisco is built so that what you own stays on your Mac, encrypted, and we have no access to it. This page says plainly what little we do hold, what passes through us and is not kept, who else is involved, and how to make us delete it.
Last updated
1. Who we are
Marisco is a portfolio learning tool for the Mac, operated by Manuel Martínez Almeida, a sole trader established in Portugal. For the purposes of the EU General Data Protection Regulation (GDPR),Manuel Martínez Almeida is the data controller for the personal data described here.
This policy covers the marketing site trymarisco.com, the Marisco app for Mac, the marisco command that ships with it, and the Marisco gateway the app talks to for prices, connections, the analyst and your account.
Contact for any privacy matter: [email protected], or the contact form if you'd rather not email. Both reach the same person. For anything else, including formal or legal notices, [email protected].We have not appointed a Data Protection Officer; we are not required to.
2. What stays on your Mac, and what we collect
Your portfolio data stays on your Mac
Marisco keeps what you own in an encrypted database on your Mac, with its key in your Mac's Keychain. That covers the statements you import (the raw rows and the ledger derived from them: trades, dividends, fees, taxes, deposits, withdrawals, interest, FX conversions, transfers and, for bank accounts, everyday transactions and merchants), your holdings and cash, your reports, your tax years, your goals and plans, what you tell Marisco about how you invest, and your conversations with the agent.
We do not receive, store or have access to any of it. It is processed on your Mac, by software running on your Mac. You can copy the file, back it up or delete it without us. Because we never hold it, we cannot restore it, read it or hand it to anyone.
Account data
If you choose a Marisco account, our gateway stores your email address, the sign-in sessions of your devices (as hashed tokens), and the link to your billing record at our payment provider (see §5). That is the whole of what your account holds. You can use Marisco without an account in Private mode, below.
What passes through the gateway, and is not kept
Some things your Mac cannot make on its own. When you use them, the request crosses our gateway, is processed in memory, and is not stored or logged by its content:
- Market data. Prices, exchange rates and history are requested by instrument identifier (ISIN or ticker), currency and date. Your quantities, values and portfolio identifiers are never sent.
- Broker and bank connections. If you connect an account instead of importing files, the connection runs through SnapTrade (brokers) or Enable Banking(banks); see §5. We never receive your broker or bank login. The keys a connection needs are sealed with a key only your Mac holds, so the gateway cannot open them on its own. Balances, positions and transactions pass through to your Mac and are not kept. Access is read-only: Marisco cannot place trades or move money.
- Questions to the analyst. When you ask the built-in analyst something, your question and the portfolio figures needed to answer it go to our AI model provider for the answer. They are not stored by us, not logged, and not used to train any model.
Private mode
If you set Marisco up yourself, with your own market-data key and your own agent, nothing about you reaches us. The only request the app still makes to us is the update check, which carries the app version, your Mac's architecture and operating system version, and no identifier for you. Keys you supply are kept in your Mac's Keychain.
Your own agent
If you use Claude Code, Codex or another assistant with the marisco command or its MCP server, that assistant reads your data on your Mac and sends what it needs to the AI company you chose, under your agreement with them. It does not pass through us.
Usage and diagnostics
The app sends product analytics (which screens and features are used, and when) and error reports (what broke, in which version). They describe what the app did, never what you own: no holdings, amounts, account names, transactions or file contents. If you are signed in, they are linked to your account so that usage and billing describe one person; you can turn them off in Settings → Privacy, and in Private mode they are off by default. Analytics requests are routed through our own domain.
Browsing this marketing site is cookieless and anonymous: nothing is stored on your device, no profile is built, and no identifier for you reaches the analytics provider. Visitor counts are estimated by the provider from a rotating, privacy-preserving hash.
Submitting a form on it is different, and this is the line. Once you give us your email address, by asking us to email you the download link or by writing to us, we create a record for you at our analytics provider under that address, with which form you used and the campaign code on the link you arrived through, if it had one. We do this on our servers, not in your browser, so it still stores nothing on your device. It does not reach back to the anonymous browsing before it. You can object under §8.
A statement you choose to share with us
If Marisco cannot read a statement, it stays on your Mac. You can choose to send it to us so we can add support for that format: the app shows you the file first, and nothing is sent until you press Share. We keep a shared file for no more than 60 days.
Marketing site submissions
If you ask for the download link or write to us through the contact form, we store your email address, what you told us, and the context of your visit: the page you submitted from, referring page, campaign tags and codes, and browser language.
3. Why we use it, and on what legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Run your account, keep your devices signed in, and bill you | Account data | Performance of a contract, Art. 6(1)(b) |
| Deliver prices, broker and bank syncs and analyst answers to your Mac | Requests passing through the gateway (§2), not kept | Performance of a contract, Art. 6(1)(b), and for connections your explicit authorisation at the broker or bank |
| Send you transactional email (sign-in links, receipts, the download link) | Account data, marketing submissions | Performance of a contract, Art. 6(1)(b) |
| Understand how the product is used, how people arrive, and fix what breaks | Usage and diagnostics, marketing site submissions | Legitimate interests, Art. 6(1)(f): operating and improving a product people rely on |
| Add support for a statement format you shared | The file you chose to share | Consent, Art. 6(1)(a), given when you press Share |
| Answer you when you write to us | Marketing site submissions | Legitimate interests, Art. 6(1)(f), and your own request |
4. What we do not do
- We do not hold your portfolio data. It stays on your Mac.
- We do not sell your personal data. There is no version of this where we do.
- We do not share anything about you with advertisers or data brokers.
- We do not use your data to train AI models, and our AI provider is contractually barred from training on the questions you send.
- We do not execute trades, hold your money, or take custody of your assets.
- We do not make automated decisions producing legal or similarly significant effects about you (GDPR Art. 22).
5. Who we work with
We use a small number of service providers to run Marisco. Except where the table says otherwise, each is a processor: it handles personal data only on our instructions, under a data processing agreement.
SnapTrade and Enable Banking are the exception. For the step where you sign in to your broker or bank they act as independent controllers, not our processors: they decide how they collect and secure your login, under their own terms and privacy policies, which you accept when you connect. Read them before you connect an account.
| Provider | What it does | What it sees |
|---|---|---|
| Cloudflare | Hosts this site, the gateway and the app downloads; routes analyst requests to the AI provider | Request metadata and IP addresses; account data; requests in transit (§2), not kept |
| Whop | Payments and subscriptions | Your email address and payment details (which we never see) |
| AI model provider | Answers questions you ask the built-in analyst | Your question and the portfolio figures needed to answer it, without your name or email. Not retained, not used for training |
| SnapTrade (independent controller; see above) | Brokerage connections, if you connect a broker | Your brokerage login (which we never see) and the account data it returns to your Mac |
| Enable Banking (independent controller; see above) | Bank connections in Europe, if you connect a bank | Your bank authorisation (which we never see) and the account data it returns to your Mac |
| Financial Modeling Prep, EODHD | Market data: prices, FX rates, company and fund data | Instrument identifiers only (ISINs, tickers). No account identifiers and no personal data |
| PostHog | Product analytics and error diagnostics | Usage events, device data, IP address. Anonymous on this site until you submit a form; linked to your account email in the app if you are signed in (see §2). Never your portfolio |
| Resend / SendGrid | Transactional email delivery | Your email address and the message content |
We will also disclose data where legally required by a valid court order, regulatory demand, or where necessary to establish or defend a legal claim. We can only disclose what we hold: your account data, never your portfolio.
If Marisco is ever acquired or merged, personal data may transfer as part of that transaction. You would be told before it happened and before any new controller applied a different policy.
6. International transfers
Some providers above process data outside the European Economic Area, principally in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies. You can ask us for details of the safeguards in place for any specific provider.
7. How long we keep it
- Data on your Mac: for as long as you keep it. Deleting a portfolio in the app, or Marisco's folder on your Mac, deletes it. We have no copy to keep.
- Account data: for as long as your account exists, and deleted within 30 days of a deletion request. Billing records are kept as long as tax law requires.
- Requests passing through the gateway (prices, syncs, analyst questions): not kept.
- A statement you shared: no more than 60 days, then erased.
- Download-link and contact submissions: kept while they are useful to answer you, reviewed each year, and deleted sooner on request.
- Usage analytics: no longer than 12 months, the retention period we set at our analytics provider.
8. Your rights
Under the GDPR you have the right to:
- Access: get a copy of the personal data we hold about you.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Portability: receive your data in a structured, machine-readable format, or have it sent to another provider.
- Restriction: have processing limited while a dispute is resolved.
- Objection: object to processing based on legitimate interests, including analytics.
- Withdraw consent: where we rely on consent, withdraw it at any time, without affecting processing already carried out.
Write to [email protected] to exercise any of these, or use the contact formwith the "Privacy, data access or deletion" topic. We answer within one month, as the GDPR requires, and we do not charge for it, though the GDPR lets us charge a reasonable fee for, or decline, a request that is manifestly unfounded or excessive, in particular a repetitive one. If a request is complex we may extend that by up to two further months, in which case we will tell you why inside the first month (Art. 12(3)). Where we cannot tell from the request that you are who you say you are, we may ask for something that establishes it. We will not use what you send us for anything else.
You also have the right to lodge a complaint with a data protection supervisory authority: your own local one, or ours, the Comissão Nacional de Proteção de Dados (CNPD) inPortugal. Raising the matter with us first is usually faster.
9. Cookies and similar technologies
This marketing site stores nothing on your device. It sets no cookies and writes nothing to local storage for analytics or anything else. That holds whether you browse it or submit a form on it. That is why you are not being asked to consent to anything: there is nothing stored to consent to. Visits are counted by our analytics provider from a rotating hash computed on its own servers, which does not identify you and cannot follow you between sites or across days.
The Mac app keeps its sign-in session and settings in its own folder on your Mac, and keys in your Keychain. It uses no cookies and no cross-site tracking. Its analytics are described in §2 and can be turned off in Settings.
We do not use advertising or cross-site tracking cookies anywhere.
10. Security
The strongest protection is that your portfolio is not on our servers. On your Mac it lives in an encrypted database, whose key is kept in the macOS Keychain; backups of it are copies of the encrypted file. The keys a broker or bank connection needs are sealed with a key only your Mac holds. All traffic between the app and the gateway runs over TLS, and access to our infrastructure is limited to the operator. How Marisco keeps your data on your Mac explains each piece.
No system is perfectly secure, and we do not warrant that ours is. Where a personal data breach is likely to result in a risk to your rights, we will notify the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, and will tell you directly in the cases where the GDPR requires that.
Found a vulnerability? Write to [email protected], or pick the "Security vulnerability" topic on the contact form, before disclosing it publicly. We will not pursue anyone who reports a genuine issue in good faith.
11. Children
Marisco is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has given us personal data, write to us and we will delete it.
12. Changes to this policy
We update this page when what we do changes. The "last updated" date at the top always reflects the current version. Material changes (a new category of data, a new purpose, a new class of recipient) are announced by email to account holders before they take effect.
Marisco is an educational analysis tool. It is not a financial advisor and does not provide investment advice. See the Terms of Service for what that means in practice.