Privacy policy
Last updated: October 14, 2026
Shadowfolio is made by The Open Apps, Inc., a Delaware corporation ("we", "us"). This policy covers the Shadowfolio plugin in ChatGPT and the website shadowfolio.ambientapp.ai. It explains what we collect, why, who receives it, how long we keep it, and how to delete it.
The short version
- Shadowfolio doesn't know who you are. It keeps your saved strategies under a scrambled form of the anonymous ID that ChatGPT sends, never your name, email address, chat or any brokerage or bank details.
- What we keep is what you save: the rules of each strategy you choose to track, its daily tracking record and any share link you create.
- Strategies you only backtest, without saving, are not stored.
- No ads, no analytics, no cookies, no selling of data. Shadowfolio never asks for account numbers, balances or holdings.
- Say "delete my Shadowfolio data" in ChatGPT to delete everything tied to you at once.
What we collect
| What | Where it comes from | Why we need it |
|---|---|---|
| A scrambled (hashed) form of the anonymous user ID that ChatGPT sends with each request | ChatGPT | To keep your saved strategies yours, in any chat. We never receive your name, email address or chat history from ChatGPT. |
| The rules of a strategy you save (tickers, buy and sell rules, rebalancing, sizing, benchmark, name) and when you saved it | You, in ChatGPT | To keep tracking it every trading day and show you the record |
| The strategy's daily tracking record and simulated holdings | Computed by Shadowfolio | To show how it would be doing since you saved it |
| Share links: a random code tied to one saved strategy | Created when you ask to share | To show that strategy's rules and record to whoever opens the link. The page shows no name or account details. |
| Technical logs: the time, the page or tool used, counts (such as how many tickers a test used) and errors. For requests from ChatGPT, also the app type and language ChatGPT reports, your approximate country, and scrambled (hashed) forms of the user and conversation IDs ChatGPT sends | Your browser or ChatGPT | To keep the service running and secure and to find problems. Logs never contain your rules, tickers or results. We don't store IP addresses. |
| Support messages: your email address and message | You | To answer you |
Strategies you test without saving are processed to produce the result and then discarded. We don't collect your name, email address (unless you write to support), contacts, precise location, IP address, financial accounts or ChatGPT conversations. We don't use your data to train AI models.
About ChatGPT. You use Shadowfolio in ChatGPT, where OpenAI handles the conversation under OpenAI's privacy policy. We send ChatGPT the results of the tools you use: the rules in plain English, backtest statistics, the equity curves shown in the card, and your saved strategies' tracking records.
How we use it
- To run backtests of the rules you describe and show the results.
- To keep each strategy you save up to date after every US market close.
- To show share pages you create.
- To prevent misuse, keep the service secure, and answer support requests.
Who receives it
| Recipient | What they receive | Why |
|---|---|---|
| OpenAI | Tool results: rules, statistics, curves and tracking records | So ChatGPT can show them to you |
| Anyone you give a share link to | That strategy's name, rules and tracking record | You chose to share it |
| Hetzner Online GmbH | Our servers and database | Hosting |
| Our price data provider (Yahoo Finance) | Ticker symbols only, with no information about you | To get end-of-day prices |
We may disclose information when the law requires it.
How long we keep it
| Data | How long |
|---|---|
| Saved strategies, their tracking records and share links | Until you delete them, or 400 days after you saved them, whichever comes first |
| Backtests you don't save | Not stored |
| Technical logs | 30 days |
| Support messages | 12 months after the last reply |
Deleting sooner. In ChatGPT, say "stop tracking strategy #2" to delete one, or "Delete my Shadowfolio data" to delete all of them at once; share links stop working immediately. You can also email support@theopenapps.com; because we don't know who you are, include a share link or the strategy's name and the day you saved it.
Children
Shadowfolio is a general-audience tool for ages 13 and up and is not directed at children under 13. If you think a child under 13 has given us personal data, email support@theopenapps.com and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, or to object to how we use it. Email support@theopenapps.com and we will answer within 30 days. You can also complain to your local data protection authority.
Cookies and storage in your browser
The website sets no cookies and loads nothing from other companies. The card in ChatGPT keeps no data of its own beyond what ChatGPT provides.
Where data is processed
We are based in the United States. Our servers are run by Hetzner Online GmbH in Germany. OpenAI may process data in the United States and other countries under its own privacy and security commitments.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data we already hold, we will say so on this page before it takes effect.
Contact
The Open Apps, Inc. · support@theopenapps.com