How we protect your investment records
Investech is built for private investors who store company details, SEIS and EIS certificates, convertible loan notes, valuations and other investment paperwork. This page explains — in plain language — how we help keep that information protected.
Your data
Your investment records are yours. Investech is software to organise them — not a marketplace that sells access to your holdings.
- Your portfolio records, company notes and uploaded documents belong to you.
- You can export a copy of your profile and portfolio records from Settings → Privacy while signed in.
- You can permanently delete your account and associated portfolio data from Settings → Privacy. Deletion cannot be undone.
- If Investech ever winds down the service, we will give reasonable notice by email and a way to export your data before accounts are closed.
- We recommend you also keep your own copies of critical originals (for example SEIS3 and EIS3 certificates).
Authentication
Only you should be able to open your Investech workspace. We use a signed-in account to prove it is you.
- You sign in with your email address and a password you choose.
- We use a trusted identity provider (Supabase Auth) to check your login and keep your session secure.
- You can change your password at any time in Settings.
- If you forget your password, you can reset it using the email address on your account.
- We recommend a unique, strong password that you do not reuse on other sites.
Encryption
Encryption means your information is scrambled so outsiders cannot read it easily while it travels or while it is stored by our providers.
- When you use Investech in the browser, connections run over HTTPS — the same kind of secure lock you see on online banking sites.
- That protects your data in transit between your device and our services.
- Your account and portfolio data are held by specialist cloud providers that encrypt data at rest as part of their standard platform security.
- Payment card details for paid plans are handled by Stripe; Investech does not store your full card number.
Hosting
Investech runs on established cloud platforms rather than a laptop in an office. That matters for reliability and basic security hygiene.
- The Investech website and app are hosted on Netlify.
- Account sign-in and portfolio data are hosted with Supabase.
- Subscriptions and billing are processed by Stripe.
- These providers are widely used by modern software companies and maintain their own security and uptime programmes.
- We do not sell access to your portfolio to third parties for marketing lists or deal matching.
Reliability
No cloud product is online forever without interruption. Here is how we think about availability.
- We rely on Netlify, Supabase and Stripe for hosting, data and billing — platforms that publish their own status pages when infrastructure is disrupted (status.netlify.com, status.supabase.com, status.stripe.com).
- If Investech is unavailable for a prolonged period, email team@investech.app; we will acknowledge and tell you what we know.
- Managed database backups help recover from infrastructure failures; they are not a substitute for keeping your own copies of important certificates.
Backups
Backups are copies of data kept so that a technical failure is less likely to wipe out your records.
- Our database provider maintains managed backups of application data as part of its platform.
- Backups exist to help recover from infrastructure problems — they are not a substitute for you keeping copies of critical certificates if you wish.
- We recommend you also keep your own copies of important originals (for example SEIS3 and EIS3 certificates) in a place you control.
- You can export a copy of your profile and portfolio records from Settings → Privacy.
Access controls
Access controls decide who can see your portfolio — and who cannot.
- By default, your investments, documents and company notes are visible only to your signed-in account.
- If you invite an accountant or team member, you choose to share access — it is not opened to the public.
- Shared access is limited to what you grant; people without an invite cannot browse your holdings.
- You can sign out of your session from Settings when you finish on a shared or borrowed device.
- Admin tools inside Investech are restricted to authorised operators of the service, not to other customers.
Privacy
Security protects against unauthorised access. Privacy covers how we use personal information when we do have it.
- We collect account details needed to run your workspace — such as name, email and, where you provide them, contact details.
- We use that information to operate Investech, process subscriptions and support you — not to run an investor–startup marketplace.
- Our Privacy Policy explains what we collect, why, and your rights under data protection law.
- You can ask privacy questions at privacy@investech.app.
Document security
Private investors often upload the most sensitive files: share certificates, tax scheme certificates, investment agreements and board packs.
- Files you upload are stored in private cloud storage tied to your account (Supabase Storage), linked to the right companies in your portfolio — not in a public folder.
- Other Investech customers cannot see or download your document library.
- Access follows the same account and sharing rules as the rest of your workspace; accountant access is opt-in.
- Documents remain while your account is active. Deleting a file or your account removes associated stored files as part of that process, subject to short-lived infrastructure backups.
- AI features are for helping you inside your workspace (for example summaries you request). We do not sell your portfolio or documents as training data to third parties.
- Treat shared devices carefully: lock your screen, sign out when finished, and avoid uploading files on public computers when possible.
- If you believe someone else has used your account, change your password immediately and contact team@investech.app.
No online service can promise perfect security. We design Investech so that private investors can store investment records with sensible protections, clear access rules and honest limits — and we keep improving those protections as the product evolves.