Your data, in plain language

1.What Zoe accesses

If you add holdings manually, Zoe uses those positions for portfolio context. If you connect eToro, Zoe syncs holdings and positions for the same purpose.

Ask Zoe may send symbol weights to Google Gemini so an answer can use your book.

2.What Zoe does not access

Zoe does not need or store your eToro password. Zoe does not custody funds. Zoe does not offer withdrawals.

Live-money Autopilot is not currently available. Zoe does not place trades from a connected user eToro account.

3.Broker connection

Normal users connect eToro for portfolio sync. Create a Read key at api-portal.etoro.com if that option is available. Zoe cannot verify the key's scope from here.

Zoe's internal research and execution infrastructure uses separate system credentials. It does not use customer broker credentials.

4.Encryption

Broker API keys are encrypted at rest with AES-256-GCM. The encryption key lives on Zoe's servers. That protects a stolen database copy more than a full server compromise. Keys are not shown back in the app and are not sent to Ask Zoe.

5.AI and third parties

Ask Zoe uses Google Gemini (Developer API). Minimized book context may be included: symbols, weights, and when needed a capital band. Before that context is sent, Zoe removes names, email addresses, phone numbers, exact portfolio values, exact cash balances, and broker credentials. Zoe uses Google's paid Gemini API. Under Google's applicable Paid Services terms, prompts and responses are not used to improve Google's products. Gemini Developer Logging is disabled for Zoe's project. Limited Google abuse/security monitoring may still apply under Google's terms. Project-specific Zero Data Retention is not enabled. Chat history is also stored in Zoe's database. Zoe does not use Gemini Search/Maps grounding, File API, persistent Interactions storage, explicit context caching, or Live session resumption.

Other processors include hosting on Railway, authentication, payments, notifications, and market-data providers. Zoe does not sell personal data to advertisers.

6.Data location

Information may be processed and stored outside your country of residence, including on Railway. We do not currently publish a single-country residency guarantee.

7.Disconnect and deletion

Disconnect stops future sync, deletes Zoe's stored eToro key, and removes synced eToro holdings from the live system. Zoe cannot delete the key inside eToro. Do that in eToro Settings. Some records may remain in backups for a limited period.

8.Manual holdings

You can use Zoe without connecting a broker. Manual holdings are a full supported path.

9.Independent security testing

We perform internal security testing. Zoe has not yet completed an independent penetration test.

10.Report a security issue

Email hi@imzoe.io. Do not send live credentials in that email.