Privacy

Last updated 2026-10-13. Applies to the OpenInvest software, its agent plugins (Claude Code, Codex, Hermes, OpenClaw), this website, and the public demo.

The short version

OpenInvest is open-source (MIT) software that runs on your own machine. Your portfolio, decisions and keys stay on your machine. The author runs no server that receives them. The software contacts third parties only to fetch market data and to call the AI model you choose.

Data stored on your machine

• Everything lives in your data directory (~/openInvest by default, or INVEST_HOME). That covers your profile, holdings, cash, decision ledger and committee transcripts, plus the .env file for the API keys and optional email settings you enter.
• LLM usage logs (token counts and cost) are written to a local file in the same directory. They are not sent anywhere.
• You can delete the directory at any time. Nothing else needs to be removed.

Connections the software makes from your machine

• Package download: on first run, the plugins download the openinvest package from PyPI through uvx, at the version pinned in the plugin.
• Market data: public prices and fund data from Yahoo Finance (via yfinance), East Money, CNN Fear & Greed, and any news feeds you add. Requests carry the symbols being looked up, not your holdings.
• AI model: committee prompts include the context needed to analyse a symbol, which can include your holdings and cash. They go to the model provider you configure: your agent's own model (for example Claude in Claude Code), or DeepSeek or another OpenAI-compatible provider on the Direct path, or Gemini for the optional daily report. Each provider handles that data under its own privacy policy.
• Optional notifications: if you configure them, reports go out through your own email account (SMTP) and alerts through your own Discord relay.
• OpenInvest never connects to a broker and never places orders.

Install statistics

The plugins and the backend send no telemetry. The manual installer skills/install.sh (git-clone setup only) sends one anonymous install count on first run. The count contains the OpenInvest version and the OS name and goes to a self-hosted Umami instance at umami.involutionhell.com. To turn it off, set OPENINVEST_NO_TELEMETRY, INVEST_NO_TELEMETRY or DO_NOT_TRACK to any value.

This website

• The website and these docs use self-hosted Umami analytics, with no cookies. They record page and section views and copy events. A copy event records the first 200 characters of the copied text, for example an install command. The analytics contain no names, accounts or other personal identifiers. The analytics server keeps standard web access logs, which include IP addresses, for error monitoring. The logs rotate by size (at most three 50 MB files).
• The site is served by Cloudflare Pages. Cloudflare processes request data such as IP addresses to deliver and protect the site, under its own privacy policy.

Public demo

The demo at fund.longsizhuo.com (also mirrored on QMuse) receives the six-digit fund code you submit. It uses your IP address to enforce daily usage limits; that counter is held in memory and reset every day. Like any web server, it keeps standard access logs for error monitoring. They include the request path and connection details such as the IP address forwarded by Cloudflare, and they rotate by size (at most three 50 MB files). Reports are generated on the server and are not tied to an account; there are no accounts.

Contact

Questions or security reports: github.com/longsizhuo/openInvest/issues.