Privacy Policy

DividendIQ — Last updated: May 2026

1. Controller

2. Principles of Data Processing

We process personal data only to the extent necessary to provide our services, and in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

3. Data Collected and Purposes

Category	Purpose	Legal Basis	Retention
Email address, name	Account registration and login	Art. 6(1)(b) GDPR (contract)	Until account deletion
Portfolio data (stocks, quantities)	Core service functionality	Art. 6(1)(b) GDPR	Until account deletion
Payment data	Pro subscription processing	Art. 6(1)(b) GDPR	Legal retention period (7 years)
Language, currency settings	Personalization	Art. 6(1)(f) GDPR (legitimate interest)	Stored locally in browser
Server logs (IP, timestamp)	Security and error analysis	Art. 6(1)(f) GDPR	30 days

4. Third-Party Service Providers

We share your data only with the following service providers required to deliver our services:

Supabase Inc. (USA) — Authentication and database hosting. Data transfer based on Standard Contractual Clauses (SCC).
Stripe Inc. (USA) — Payment processing. Data transfer based on Standard Contractual Clauses.
Netlify Inc. (USA) — Web hosting. Data transfer based on Standard Contractual Clauses.
Finnhub — Market data provider (no personal data transmitted).
Google AdSense — Ad serving for free users. See Google Privacy Policy.

No data is shared with other third parties except as required by law.

5. Your Rights (GDPR)

You have the right to:

Access your stored data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR) — available directly in your profile under "Delete Account"
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR) — CSV export available in your profile
Object to processing (Art. 21 GDPR)

To exercise these rights, contact: support@dividendiq.app

6. Cookies and Local Storage

DividendIQ does not use tracking cookies. We store the following data locally in your browser (localStorage/sessionStorage):

Session token for your logged-in state
Language and currency preferences
Local portfolio backup copy

This data does not leave your browser and is not used for advertising purposes.

7. Advertising (Free Plan)

Free plan users may see advertisements served by Google AdSense. Google may use cookies to serve personalized ads based on your browsing behavior. You can opt out at adssettings.google.com. Pro plan users do not see any advertisements.

8. Data Security

All data is transmitted using encryption (HTTPS/TLS). Passwords are not stored in plain text. Authentication is handled via Supabase Auth with secure JWT tokens.

9. Changes to this Policy

We will notify you by email of any material changes. The current version is always available on this page.

10. Contact

For all privacy inquiries: support@dividendiq.app