Aligned with privacy notice 2026-08-09
Provider-by-provider
Anthropic
- Used for
- AI onboarding, generated briefings and Future Me letters
- When
- Only when you use one of those AI features
- Information
- The text, screenshots and relevant financial context needed for that request
- Not shared
- Anthropic has no tools or direct access to your Compass account or database
Resend
- Used for
- Verification, password recovery and optional briefing emails
- When
- When Compass sends an email you requested or enabled
- Information
- Your email address and the content of that email
Yahoo Finance and CoinGecko
- Used for
- Matching investments and obtaining market prices
- When
- When Compass searches for or values a holding
- Information
- Investment names or tickers
- Not shared
- Your CSV, account name, quantity and total portfolio value are not sent to these market-data searches
Public blockchain services
- Used for
- Reading a connected Bitcoin or Ethereum wallet balance
- When
- When you connect or refresh a wallet
- Information
- The public wallet address and chain
- Not shared
- Compass never asks for or stores private keys or seed phrases
Google
- Used for
- Optional Google sign-in
- When
- Only when you choose Continue with Google
- Information
- The information required for the OAuth sign-in flow
Self-hosted Umami
- Used for
- Optional product-usage analytics
- When
- Only after you allow analytics on this device
- Information
- The Compass site hostname, a redacted pathname, browser language and screen size, interaction categories, filtered counts and timings
- Not shared
- Financial values, account names, holding symbols, email addresses, free text and internal IDs are blocked; page titles, referrers and URL query strings are removed from the event payload
AI safety boundary
The onboarding model has no tools and cannot read or write the database. It returns a structured proposal that you review before the server validates and applies it.
Scenario calculations are performed by deterministic Compass code. AI is not used to invent or validate scenario arithmetic.
AI output and market data can still be incomplete or wrong. Keep source statements and provider records as the authoritative record.