Privacy policy

Effective September 21, 2026. What we collect, why, how long we keep it, and how to delete it.

The short version. We read your brokerage data, read-only, to calculate your performance report. We never receive your brokerage password, we can never place a trade or move money, we don’t sell your data, and you can delete everything at any time.

Who we are

xsreturns (“we”, “us”) operates xsreturns.com, a service that analyses the performance of brokerage accounts you choose to connect. Questions about this policy go to privacy@xsreturns.com.

What we collect

Account details: your email address and sign-in information for xsreturns.
Brokerage data, read-only: for each account you connect, the account type, positions, cash and margin balances, and transaction history (trades, dividends, interest, fees, deposits, withdrawals and transfers), including up to the history your broker makes available.
Documents you upload (optional): a brokerage statement you provide to confirm a starting balance.
Basic usage data: pages visited and errors, used to keep the service working.

What we never collect

Your brokerage username or password. Connections are made through SnapTrade, which authenticates with your broker directly, usually through the broker’s own sign-in page. We receive read-only data, never credentials.
Any permission to trade, move money or change your account. Our connection is read-only.

How we use it

To reconstruct your holdings and calculate your returns and their attribution.
To generate your report, including written findings produced from your calculated figures.
To support you, fix problems, and keep the service secure.

We do not sell your data, use it for advertising, or share it with anyone for their own marketing.

Who processes it for us

SnapTrade, which connects to your broker and passes us read-only account data.
Hosting and database providers, which store and serve the service.
An AI model provider, which receives your calculated report figures to write the report’s findings. It does not receive your login, account numbers or contact details.
Market data providers, which receive only the tickers we need prices for, never your identity or holdings amounts.

Each processes data only to provide its service to us. We may disclose data if the law requires it.

How long we keep it

We keep your data while your account is open. If you disconnect a brokerage account, we stop collecting new data from it immediately. If you delete your account or ask us to delete your data, we delete it from our live systems within 30 days and from backups within 90 days.

Deleting your data

You can disconnect a brokerage account at any time, and ask us to delete everything by emailing privacy@xsreturns.com from the address on your account. You can also revoke our access from your broker’s connected-apps settings.

Security

Data is encrypted in transit and at rest. Access inside the company is limited to what is needed to run and support the service. Our brokerage connection is read-only, so it cannot be used to trade or move money.

Your choices and rights

You can ask to see, correct or delete the data we hold about you. Depending on where you live, you may have additional rights under local law. Contact us and we will respond within 30 days.

Children

xsreturns is not for anyone under 18, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will tell you by email before the change takes effect.