Privacy

Valora uses invited accounts for private valuation work and a public investment community. Some information stays private to your account; content you publish or choose to share may be visible to others.

Information we store

Depending on the features you use, we store your username, a salted password hash used to verify your password, account role and active sessions. Private account data can include your watchlist, saved company cases, valuation assumptions and scenarios, portfolio holdings and transaction histories, and notes. We also store community activity such as ticker requests, picks, comments, reactions and follows. Hashed address-based counters help limit abusive requests, and error reports may include page paths and technical diagnostics.

Private and shared information

Your watchlist, portfolio data, saved valuation work and notes are private to your account. Company research is shared across Valora accounts so a current research record can benefit the group.

When you publish a pick, its username, selected scenario, rationale, calculated valuation and related company research are visible to visitors. Comments and reactions on picks are visible too. Other private account data stays private.

Security

We take precautions designed to help protect the site and the information stored on it. However, no website, storage system or data transmission can be guaranteed 100% secure. Your information may not be held in a completely secure environment, and unauthorized access, loss or disclosure is possible. This includes holdings, transaction histories, custom valuation assumptions, saved scenarios and notes. Please use Valora with this risk in mind and avoid storing information you consider highly sensitive.

External services

Sharesight connections use encrypted OAuth tokens stored on the server. Valora reads Sharesight portfolio data and never adds, edits or deletes portfolio records there. We import portfolio records only for the connected Valora account; this portfolio data is private, included in account exports and removed when an account closes. Disconnecting Sharesight retains the imported portfolio as a read-only snapshot. Valora retrieves market information from external public data sources and uses Cloudflare to run the site and its security checks. A temporary GPT handoff can contain research and valuation context. Its link expires 60 minutes after creation, so treat it as private while active.

Retention and your choices

From your account page, you can review sessions, download your account data, change your password and close your account. Published research can remain available to the community after the account that imported it closes, with the account identifier removed. Temporary operational backups and logs may outlast an account closure.

For access, correction, retention or other privacy questions, contact the owner of the site.

Last updated 12 October 2026.