Privacy Policy

• Account data: email, name, encrypted password
• Financial data: stock symbols, transactions, portfolio — voluntarily entered by the user
• Usage data: nr. analyses, access dates
• Payment data: managed exclusively by Stripe (we do not store card numbers)

• Providing the financial analysis service
• Processing payments and managing subscriptions
• Improving the platform
• Communication about account and service

• Contract performance (subscription)
• Your explicit consent
• Legitimate interests (security, fraud prevention)

• All data is encrypted in transit (HTTPS/TLS)
• Passwords stored with bcrypt hash
• Financial data isolated per user
• API keys stored in secure environment variables
• Limited data access (principle of least privilege)
• Providers: EU infrastructure, Anthropic (US - SCC), Stripe (EU/US - PCI DSS certified)

• Account data: for the duration of the subscription + 30 days
• Financial data (portfolio): deleted upon request
• Payment data: as per Stripe and tax requirements
• AI analyses: 12h cache, 1 year history

• Right of access — you can download all your data
• Right to rectification — you can correct your data
• Right to erasure ("right to be forgotten")
• Right to data portability — CSV/JSON export
• Right to object
• Right to withdraw consent

To exercise these rights: investiq.dev@yahoo.com

We only use essential cookies:

• Session cookie (authentication)
• Preferences (language, theme, currency)

We do not use tracking or advertising cookies.

• Anthropic (USA) — Standard contractual clauses
• Data stored in EU (Frankfurt)
• Stripe — PCI DSS Level 1 certified