The privacy note
How Kurto treats your data.
Pilot edition · July 2026. Plain words, no legal fog. Questions: reply to your invitation email, or write to hello@kurto.ai.
What we hold
The minimum the product needs: your email address (it is your sign-in; there are no passwords), the names and time horizons of your goals, and the funds you enter with a dollar amount or share count. That’s it. No real name, no bank links, no brokerage credentials, no documents, no phone number.
Where it lives, and how
- On our own hardware.Kurto’s analysis runs on machines we own, not in a rented cloud. The AI that writes your briefing runs locally on that same hardware: your portfolio is never sent to any third-party AI service.
- Encrypted before it’s stored. Your email, goal names, and positions are encrypted with a key that belongs to your account before they ever reach the database. What sits on disk is scrambled ciphertext, so a copy, a backup, or anyone browsing the stored data sees nothing. The analysis happens in program memory, at the moment you ask for it.
- The honest boundary, because you deserve the real sentence and not a slogan: the system must decrypt your data to analyze it, so the operator of the machine could, deliberately, access it through the application’s key. What the encryption guarantees is that no stored artifact leaks your data and no casual access sees it. We won’t pretend otherwise; companies that claim absolute “zero knowledge” while analyzing your data are describing something mathematically impossible.
What we never do
- We never sell or share your data. There is no third party to share it with: no analytics trackers on your pages, no ad tech, no data partners.
- We never send your portfolio to outside AI. (The one outside service in the whole flow is the email carrier that delivers your six-digit sign-in code; it sees your address and the code, nothing else.)
- We never give investment advice, and we never will. Kurto tells you what you own and what touched it, with sources.
Leaving
Two buttons on your account page, no process, no email to support:
- Export: everything we hold about you, downloaded as one file, any time.
- Delete: every goal, position, and briefing is erased immediately, you are signed out everywhere, and the encryption key for your account is destroyed, which means your data becomes permanently unreadable even in our short-lived backups (which themselves expire within 14 days). Kurto forgets you. Deleting your data doesn’t revoke your invitation; you’re welcome back anytime, starting fresh.