Privacy Policy

1. Introduction

DividendQuad ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our Service. It has been drafted to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data We Collect

2.1 Information You Provide

Email address: Collected when you create an account. Used for authentication via our magic link login system and for essential account notifications.
Contact form submissions: Name, email, and message content when you contact us through our contact form.

2.2 Payment Information

Payment processing is handled entirely by our Merchant of Record, Lemon Squeezy. We do not store, process, or have access to your credit card numbers, bank account details, or other financial payment information. We only receive confirmation of payment status and subscription details from Lemon Squeezy.

2.3 Automatically Collected Data

Usage data: Pages visited, features used, and interaction patterns to help us improve the Service.
Technical data: IP address, browser type, operating system, and device information collected via server logs.
Cookies: Essential cookies for authentication and site functionality. See our Cookie Policy for details.

3. How We Use Your Data

We use your personal data for the following purposes:

Provide the Service: To authenticate your account, deliver features, and manage your subscription.
Manage subscriptions: To process payments, handle billing, and manage your premium access through our third-party payment processors.
Account notifications: To send essential communications such as magic link login emails, subscription confirmations, payment receipts, and service-related updates.
Improve the Service: To analyze usage patterns and improve user experience, features, and performance.
Customer support: To respond to your inquiries and provide assistance.

We do not use your data for marketing emails unless you explicitly opt in. We do not sell, rent, or trade your personal information.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data based on the following legal grounds:

Contract performance: Processing necessary to provide the Service you have subscribed to (Article 6(1)(b)).
Legitimate interests: Processing for analytics and service improvement, where our interests do not override your rights (Article 6(1)(f)).
Legal obligation: Processing required to comply with applicable laws (Article 6(1)(c)).
Consent: Where required, we will obtain your explicit consent (Article 6(1)(a)).

5. Third-Party Service Providers

We do not sell your personal data. We share data only with the following categories of service providers, strictly as necessary to operate the Service:

Provider	Purpose	Data Shared
Lemon Squeezy	Payment processing	Email, subscription plan
Google Gemini	AI data summarization	Public financial data only (no user data)
Infrastructure provider	Hosting and delivery	Server logs (IP, user-agent)
Email service	Transactional emails	Email address

6. Data Retention

We retain your personal data only for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

Account data: Retained for the lifetime of your account. Deleted upon account deletion request.
Payment records: Retained as required by applicable tax and accounting laws (typically up to 7 years).
Server logs: Retained for up to 90 days for security and troubleshooting purposes.

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Right of Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your account and all associated personal data at any time.

Right to Data Portability

You may request your data in a structured, machine-readable format.

Right to Object

You may object to the processing of your data based on legitimate interests.

CCPA Rights (California Residents)

You have the right to know what personal data we collect, request deletion, and opt out of the sale of personal data. We do not sell personal data.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

8. International Data Transfers

Your data may be processed in countries outside of your country of residence, including the United States. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws, including standard contractual clauses approved by the European Commission.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (HTTPS/TLS), secure authentication mechanisms, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when this policy was last revised.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

If you are in the EU and believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority (DPA).