Back to Home

Privacy Policy

Last updated: 26 October 2026

1. Introduction

Oak AIDIA ("we", "our", "us") is an AI-powered investment platform that helps investors understand markets, analyze opportunities, manage their portfolio, and make smarter decisions with the help of AI agents. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use our platform.

2. Data Controller

Oak AIDIA is owned and operated by Journey Tendency Lda, registered at Praceta do Castelo, Pavilhão C6, 4705-629 Sequeira, Braga, Portugal, with Tax ID (NIF) 510412467. This company is the data controller responsible for the personal data described in this Privacy Policy.

3. How You Sign In

Oak AIDIA uses etoro Single Sign-On (SSO) to authenticate users. We do not store your etoro password. When you log in, etoro shares basic profile information with us (such as your username, GCID, and display name) to identify you within the platform.

4. Information We Collect

Through your authorized connection to etoro, we retrieve data needed to power the platform's features, including:

  • Portfolio data: open and closed positions, mirrors/copy-trading, cash balance, and realized/unrealized P&L.
  • Trading history, used to calculate performance statistics, your Trader Scorecard, achievements, and AI-generated insights.
  • Account preferences you set in Oak AIDIA, such as investor style, risk tolerance, holding horizon, watchlists, price and volume alerts, and saved screens.
  • Your MiFID II risk profile: your answers to the mandatory risk questionnaire, the resulting risk class, the date it was assessed and expires, the legal notices you accepted, and the number of attempts made. We also keep an append-only audit record (with timestamps and the rules version applied) of questionnaire attempts, profile changes, and risk-mismatch events, so that the assessment can be demonstrated if required.
  • Conversations with our AI agents (fundamental, technical, portfolio, and writer agents), including messages and summaries, so we can keep context between sessions.
  • Subscription and billing information processed through Stripe, our payment provider.

5. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

  • Performance of a contract: to create and manage your account, provide the app's features, and process payments.
  • Legal obligation: to keep billing records and the MiFID II risk profile audit trail required by law.
  • Legitimate interests: to keep the service secure, prevent abuse, and fix errors.
  • Consent: for analytics cookies (see "Cookies and Analytics"). You can withdraw consent at any time.

6. How We Use Your Information

We use this information to operate the platform's features, including market screening, instrument analysis, price forecasts, portfolio intelligence, the Trader Performance scorecard, AI agent conversations, and daily/periodic reports. We also use it to process your subscription, allocate your monthly Oak Credits, and send account-related communications.

Your risk profile is used to apply limits to the platform's AI agents and to pause automated features that are incompatible with it (for example, limits on volatility, position size, leverage, derivatives, short selling, and intraday trading). It is not used to give you personalised investment recommendations. AI agents only receive the data strictly necessary to answer your current request, and their responses are informational only.

7. How We Use AI

To answer your questions, our AI agents send your messages and relevant data (such as your portfolio and preferences) to our AI model provider. This data is used only to generate your answers and is not used to train AI models, ours or our provider's.

Our AI agents keep a memory of your previous conversations and preferences so they can give you more relevant answers with better context. This memory is private to your account, is never shared with other users, and is not used to train AI models. It is deleted when you delete your account.

8. Service Providers

We share personal data only with providers that help us run the service, under data processing agreements:

  • Base44 – app hosting and database.
  • Google (Gemini) and Anthropic (Claude) – AI models used to generate the agents' answers, accessed through Base44.
  • Stripe – payment processing.
  • etoro – sign-in (SSO) and market and portfolio data.
  • Google – analytics (Google Analytics), only with your consent.

We do not sell your personal data.

9. International Transfers

Some of our providers are located outside the European Economic Area, including in the United States. When your data is transferred outside the EEA, we rely on the European Commission's adequacy decisions (including the EU-US Data Privacy Framework) or Standard Contractual Clauses to protect it.

10. Data Security

We use industry-standard technical and organizational measures to protect your data, including access controls restricted to what each feature needs, and keeping service credentials as protected server-side secrets. We do not store your etoro password or your personal etoro API keys. However, no method of transmission or storage is completely secure.

11. Data Retention

We keep your data while your account is active. When you delete your account, we cancel any active subscription immediately and keep your data for a 30-day grace period, after which your personal data is permanently deleted, except:

  • Billing records, kept for 10 years as required by Portuguese tax law.
  • The MiFID II risk profile audit trail, kept for the period required by law.

12. Your Rights

Under the GDPR you have the right to access, correct, delete and export (portability) your personal data, to object to or restrict its processing, and to withdraw your consent at any time. To exercise these rights, contact us at info@oakaidia.com. We will reply within one month. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (https://www.cnpd.pt).

13. Cookies and Analytics

We use essential cookies that are strictly necessary for the app to work (for example, to keep you signed in and remember your settings). These cannot be switched off.

With your consent, we also use Google Analytics, a web analytics service provided by Google Ireland Limited, to understand how visitors use our website and app (for example, pages visited, time spent, device and browser type, and approximate location). Google Analytics uses cookies and similar technologies, and the information is processed by Google and may be transferred to the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. We do not use Google Analytics to identify you personally, and we do not send your portfolio, trading data or AI conversations to Google.

Analytics cookies are only set if you accept them in our cookie banner. You can withdraw or change your consent at any time through "Cookie settings" at the bottom of the page, and you can also block cookies in your browser. Our legal basis for analytics is your consent (Article 6(1)(a) GDPR).

More information: Google Privacy Policy (https://policies.google.com/privacy) and Google Analytics opt-out (https://tools.google.com/dlpage/gaoptout).

14. Minimum Age

Oak AIDIA is only for users aged 18 or over. We do not knowingly collect data from anyone under 18.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will reflect material changes by updating the "Last updated" date above.

16. Contact Us

If you have questions about this Privacy Policy, contact us at info@oakaidia.com.

View Terms & Conditions →
Oak AIDIA uses cookies that are strictly necessary for the app to work, such as keeping you signed in and remembering your preferences. With your consent, we also use Google Analytics to understand how the app is used. See our Terms and Conditions.