Privacy Policy
This page describes the data flows implemented in BLS Prime today, why the data is needed, and which controls are currently available. When a control is not yet self-service, we say so.
Effective date: July 27, 2026To create a workspace we store your name, email address, and a hashed password. Passwords are never stored in readable form. Email is used to sign you in, reset your password, and send service notices about your account. The application does not sell it or use it for third-party advertising.
Positions you enter or import are stored against your workspace so the risk and portfolio views can be rebuilt between sessions. Workspace access checks keep one account from reading another account's portfolio. The current workspace lets you edit or replace stored positions; it does not yet provide self-service account deletion.
Analyses linked to your workspace, saved companies, theses, and research context you enter may be stored so the product can reopen your work. Public first readings run without an account are stored without an account identifier and are not linked to a user profile.
Company analysis sends the ticker being studied to configured market and filing providers. When you use portfolio chat with a configured AI provider, the request includes your question, recent chat history, and a summary of holdings, weights, alerts, and workspace context. The application does not deliberately add your name or email to that prompt. The external provider processes what is sent under its own terms and retention controls.
The application and its hosting platform may record IP address, timestamp, requested route, and error codes to operate the service, apply rate limits, and diagnose failures. The application does not define how long the hosting platform retains those records; platform settings and provider terms control that period. The application code does not use these records to build a marketing profile.
We use a session cookie to keep you signed in and a preference key to remember your language. The application code does not install third-party advertising or cross-site tracking cookies.
Account and workspace records remain stored while the account is active. The product does not yet offer self-service account deletion. You can request access to or deletion of your data through the configured privacy contact below; the request is handled manually and its scope and timing must be confirmed before processing. Records required by law or still present in provider backups may follow a different retention period.
You may use the public first reading without creating an account. You may use the workspace without entering real holdings. Any feature that requires an account is labeled as such before you click it.
If this policy changes materially, we will update the effective date. A service notice may also be sent when email delivery is configured. For privacy questions or a data request, contact tbasaure@uc.cl.