Data Processing
Last updated: 18 July 2026.
InvestWhen is part of docutati (Netherlands, KvK 42095190, BTW-id NL005492040B03). This page summarises how we process your personal data. A countersigned data-processing agreement is available for business customers on request at support@investwhen.com.
What we hold
Your account (email, name, hashed password, plan), your preferences (markets and topics you follow, timezone, digest schedules), your chat conversations and AI-focus history, bookmarks and share links, and minimal billing and delivery records. We do not build advertising profiles and we do not sell data.
Where processing happens
The AI models that write the reads and answer the chat run on private infrastructure InvestWhen owns and operates in the EU. Your questions and reading habits are never sent to any third-party AI provider and are never used to train any model.
Sub-processors
Stripe processes subscription payments (never handled by our AI). An email provider (Resend) delivers verification, password-reset and digest emails — your email address only. The market content itself comes from licence-safe public sources; no third party receives your personal data for content generation.
Retention & your rights
You can export all your data or permanently delete your account at any time from your account page — deletion erases your profile, preferences, chats, bookmarks and share links. Minimal billing records are kept only as required for accounting and legal obligations. Technical logs are kept up to 90 days to secure the service.
Security
Traffic is encrypted in transit, passwords are hashed (argon2), and access to the infrastructure is restricted over a private network. We assist with access, correction and deletion requests at support@investwhen.com.