What we keep: your username, a one-way hash of your passphrase (we can't read it back), your holdings, and a log of security events (logins, lockouts, admin actions).
What we never keep: bank details, broker credentials, anything outside this build.
Where it lives: on this same private machine, in files readable only by the server. Nothing is sold, shared, or sent anywhere.
Deletion: ask the admin to remove your account and its data goes with it.