Privacy Policy
Last updated: 2026-05-09
1. Who we are
FxIQ is a financial dashboard operated by LumenIQ. For privacy questions, contact privacy@lumeniq.ai.
2. What we collect
- Account information (email address, sign-in timestamps)
- Financial account data via Plaid (balances, account names, masked numbers, holdings)
- Business accounting data via QuickBooks Online and Tabby CSV uploads (P&L, expenses, mileage)
- Trading data via IBKR Flex Query (positions, realized P&L)
- Manual inputs you provide (tax estimates, notes, custom data)
3. How we use it
Your data is used solely to render your dashboard, run tax exports, and compute P&L for you. We do not share, sell, or rent your data. We do not use your data for advertising, profiling, or training third-party models.
4. How we protect it
- Provider access tokens (Plaid, QuickBooks, IBKR) are encrypted at rest with AES-256
- All data is transmitted over TLS 1.3
- Database access is gated by Postgres Row Level Security (RLS) and tenant scoping
- Authentication uses Supabase magic-link email login
- Production access is protected by MFA
5. Your rights
- Access: view your data anytime in the dashboard
- Disconnection: revoke any institution from the Accounts page; tokens are revoked within 24 hours
- Deletion: delete your account from Settings; data is removed from production immediately and from backups within 30 days
- Export: tax exports and CSV downloads are available from the Tax Mode page
6. Third parties
We share data only with the providers necessary to operate the service:
- Plaid -- bank account aggregation
- Supabase -- database, authentication, storage
- Netlify -- web hosting
- Intuit QuickBooks -- accounting data via OAuth
- Interactive Brokers (IBKR) -- trading data via Flex Query
7. Retention
- Active accounts: data retained for the lifetime of the account
- Account deletion: production data deleted immediately; backups rotate out within 30 days
- Anonymized, aggregated analytics may persist beyond account deletion
8. Changes
Material changes to this policy will be communicated by email at least 30 days before they take effect.
9. Contact
Questions or requests? Email privacy@lumeniq.ai.