BMarker
Open app
BMarker home

Legal

Privacy Policy

This policy explains how BMarker collects, uses, protects, and shares information when you use the service.

Effective date

1. Operator and our privacy commitment

BMarker is operated by Bytescale LLC. References to "BMarker," "Bytescale," "we," "us," or "our" in this policy refer to Bytescale LLC.

2. Information we collect

  • Account information. Your email address, display name, optional profile details, and information provided by Google or Microsoft when you choose those sign-in methods.
  • Authentication and security information. Password verifiers, account verification status, session records, authentication methods, multi-factor authentication records, security events, user-agent information, and hashed identifiers used for rate limiting. BMarker does not store your password in readable form.
  • Portfolio information. Portfolio names and settings, benchmarks, transaction rows, ticker symbols, dates, quantities, prices, amounts, fees, notes, holdings, performance results, and analytics preferences.
  • Import information. For transactions you save from a Fidelity or Schwab CSV, we may retain the source broker, file name, row number, source description, and a fingerprint used to prevent duplicate imports.
  • Sharing information. Share-page titles, descriptions, public labels, link identifiers, selected portfolios, and the content and privacy settings you choose for a share page.
  • Operational information. Request timing, service activity, diagnostic logs, error details, device or network information, and security telemetry needed to run, protect, and debug the service.
  • Product analytics. Limited page-view events, the time of the event, basic browser and device information, and a device identifier stored in your browser. For signed-in use, these events are associated with your internal BMarker account identifier and email address. Analytics events are configured to exclude portfolio and transaction content, ticker symbols, notes, form entries, display names, URL query parameters, and share-link values.
  • Communications. Information you include when you contact us for support, privacy requests, or other questions.

3. Broker CSVs

Broker CSV files are read and parsed in your browser so you can review and correct the proposed transactions. BMarker does not save the raw CSV file. Only transaction rows you choose to save, together with limited source details used for traceability and duplicate detection, are sent to and stored by the service.

4. How we use information

  • Provide account access, portfolio records, holdings, analytics, and sharing tools.
  • Authenticate users, protect accounts, enforce rate limits, prevent abuse, and investigate suspected fraud or misuse.
  • Retrieve market data, calculate portfolio and benchmark results, cache completed reports, and improve report reliability.
  • Understand which BMarker pages are used and guide product improvements.
  • Send transactional communications such as verification emails, password resets, and service notices.
  • Respond to support requests, troubleshoot incidents, and improve the product.
  • Comply with legal obligations and enforce our agreements.

5. Cookies and local storage

BMarker uses essential session cookies to keep you signed in and protect authenticated requests. We also use local browser storage to remember interface preferences such as your light or dark theme and, when product analytics is enabled, to retain an analytics device identifier across visits. Analytics honors your browser's Do Not Track setting. Disabling these technologies may prevent account features from working correctly. We do not use advertising or behavioral-tracking cookies.

6. Third-party providers

We use providers that help operate BMarker, including:

  • Google and Microsoft when you choose those sign-in methods.
  • Infrastructure, database, networking, and email-delivery providers.
  • PostHog, which processes the limited product-analytics information described in this policy on behalf of Bytescale.
  • Market-data providers used to retrieve prices and benchmark history. Requests may include ticker symbols and dates, but we do not intentionally send your account identity with those requests.

We share information with providers only as needed to operate the service. Those providers process information under their own terms and privacy policies.

7. Data ownership and confidentiality

You retain ownership of the information you submit to BMarker. You give Bytescale a limited license to host, process, transmit, and display that information only as needed to operate, secure, support, and improve the service. We use reasonable measures to limit access to customer data to systems and people who need that access for those purposes.

We do not sell your personal information or portfolio data. BMarker does not use customer portfolio data for targeted advertising.

8. Share pages

Portfolios begin private. If you create a share page, the information you select becomes accessible to anyone who has the random or vanity link you configure. A share link should not be treated like a password, and search-engine controls cannot guarantee that its contents will remain undiscoverable.

You control which portfolios, labels, analytics, holdings, transactions, and notes are included, including whether absolute balances, values, shares, and dollars are shown. You can disable a share page to revoke its BMarker links, although we cannot remove copies that other people saved or shared elsewhere while the page was available.

9. How we share information

We share information only in the following circumstances:

  • With service providers that process it for the operational purposes described above.
  • When you intentionally publish information through a BMarker share page.
  • When required by law or reasonably necessary to protect the rights, safety, and security of BMarker, Bytescale, our users, or the public.
  • In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections and this policy's commitment that customer data is not a product for sale.

10. Data retention

We retain account, portfolio, security, and sharing information for as long as reasonably needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements. Retention periods vary by data type. Backups, security logs, and records required for legal or operational purposes may remain for a limited period after an account or portfolio is deleted.

11. Security

We use reasonable administrative and technical safeguards designed to protect information, including hashed password credentials, encrypted multi-factor authentication secrets, and hashed session and action tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Your choices

You can edit portfolio information, revoke share pages, sign out sessions, disconnect supported identity providers, or stop using the service at any time. To request access, correction, export, or deletion of account data, contact support@bytescale.io. We may need to verify your identity before completing a request, and some records may be retained where permitted or required by law.

13. Children

BMarker is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

14. Changes and contact

We may update this Privacy Policy from time to time. The effective date above identifies the current version. If a change materially affects how we handle information, we will take reasonable steps to provide notice through the service or by email.

Questions or privacy requests can be sent to support@bytescale.io.

Also see the Terms of Service.