Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

• Dividendio
• contact@dividendio.com

2. Data We Collect

We collect the following categories of personal data:

• Account information: name, email address, and profile picture (provided via Google OAuth)
• Financial data: dividend transactions, portfolio positions, and price alerts you enter into the platform
• Usage data: pages visited, features used, and interaction patterns
• Technical data: IP address, browser type, device information, and cookies
• Payment data: processed securely by Stripe. We do not store your credit card details

Providing your email and authentication data is mandatory to use the service. Financial data input is voluntary. If you do not provide mandatory data, we cannot provide you with the service.

3. Legal Basis for Processing

• Consent: for optional analytics and marketing communications
• Contract performance: to provide you with the Dividendio service
• Legitimate interest: to improve our service, prevent fraud, and ensure security

4. Purpose of Data Processing

We use your data to: provide and maintain the Dividendio service; process your subscription payments; send you service-related notifications; improve and personalize your experience; comply with legal obligations.

5. Third-Party Processors

We share your data with the following trusted third-party processors:

• Stripe: payment processing (PCI-DSS compliant)
• Google: authentication via OAuth 2.0
• Vercel: application hosting and delivery
• Cloudflare R2: secure file and image storage

All processors are bound by data processing agreements and comply with GDPR requirements.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will erase your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to restriction: limit how we process your data
• Right to data portability: receive your data in a structured format
• Right to object: object to data processing based on legitimate interest
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at contact@dividendio.com. We will respond within 30 days.

8. Cookies

We use essential cookies required for the functioning of the service (authentication, session management). We do not use advertising cookies. Analytics cookies are only used with your explicit consent.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure authentication, and access controls.

10. International Transfers

Some of our processors (Stripe, Vercel, Cloudflare) may transfer data outside the EEA. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Minors

Dividendio is not intended for users under 16 years of age. We do not knowingly collect personal data from minors.

Data Obligation and Automated Decisions

Dividendio does not make automated decisions or profiling that produce legal effects or significantly affect you. The dividend projections and portfolio analysis displayed are purely informational calculations based on the data you enter, and do not constitute automated individual decision-making under Article 22 of the GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

13. Contact & Complaints

For any questions or complaints regarding your data, contact us at contact@dividendio.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.