Privacy
Privacy policy
What data we process, why, and how you can exercise your rights.
1. Controller
The controller is the person operating Dividend Tracker Pro. You can contact us about privacy through the support channel published in the application.
2. Data we process
We process account and authentication data, portfolio, brokers, accounts, lots, transactions, dividends, declared tax data, imports, billing, support and technical security events. Statements may contain third-party data; by uploading them you represent that you have a legal basis. We do not request special categories of data or data from minors under 18.
3. Purposes and legal bases
We use data to provide the service and support (contract), billing and accounting obligations (legal obligation), security and fraud prevention (legitimate interest), aggregated analytics (legitimate interest or consent), marketing and cookies/ads where applicable (consent), and legal requests (legal obligation).
4. Recipients and processors
We do not sell personal data. We use OVHcloud for EU hosting and database, Loops for transactional email, OpenRouter for AI with the L0 payload, LemonSqueezy as Merchant of Record for payments, self-hosted Umami for analytics, and Google/CMP only if ads are active and with consent. The subprocessor list will be updated before launch.
5. International transfers
The database and backups are hosted in the EU. OpenRouter (US) receives only the anonymized L0 payload with ZDR and the DPA/SCC framework to be formalised before launch; it does not receive portfolio, tax or identity data. LemonSqueezy (US) acts as Merchant of Record for payments and billing under SCC/DPA. Tax AI receives only countries, never personal data.
6. Retention
Account and portfolio data are retained while active and for applicable backup and retention periods. Invoices are retained as required by law. Raw CSV files and L0 payloads are not retained longer than necessary; security logs and analytics have limited periods. You can export or delete your account from settings.
7. Rights
You may exercise access, rectification, erasure, objection, restriction and portability, and withdraw consent where processing is based on it, through the support channel. We will respond within the legal deadline. You may complain to the AEPD (www.aepd.es) or your local authority.
8. Security
We apply reasonable measures such as TLS, access control, backups, event logging and vendor review. No system is completely secure; if we detect a breach with risk, we will notify the authority and affected users as required by law.
9. Minors
The service is for users aged 18 or older. If we detect a minor’s account, we will cancel it and delete the data.
10. Changes
We may update this policy. Material changes will be notified by email or on the site; the current version will always be published.
11. Contact
For any privacy question, rights request or account deletion, use the application support channel. You can also read the terms of service and the tax notice.