Privacy Policy
Last updated: 18 July 2026.
Who is responsible
InvestWhen is part of docutati. The controller for your personal data is docutati (Netherlands, KvK 42095190, BTW-id NL005492040B03). Contact: support@investwhen.com.
What we process
Your account (email, optional name, hashed password, plan), your preferences (the markets and topics you follow, timezone, digest schedules), your chat conversations and AI-focus history, your bookmarks and any share links you create, minimal billing records, and basic technical request data. We use your email only for transactional messages (verification, password reset, receipts) and the digests you schedule.
Where it is processed
The models that write the reads and answer the chat run on our own private infrastructure in the EU. Your questions and reading habits are never sent to any third-party AI provider and are never used to train any model.
Retention & your rights
You can export all your data or permanently delete your account at any time from your account page (GDPR access, portability and erasure). Deletion removes your profile, preferences, chats, bookmarks and share links; minimal billing records are kept only as required by law. You may also contact support@investwhen.com to exercise your rights.
Security & server logs
Passwords are hashed (argon2), traffic is encrypted in transit, and infrastructure access is restricted over a private network. Servers keep minimal technical logs (IP, timestamp, requested page) for up to 90 days to secure the service and prevent abuse — never used to profile or track you across sites.
Optional sign-in
If you choose "Continue with Google" or "Continue with Microsoft", we receive only your verified email address from that provider — nothing else. Signing up with an email and password works exactly the same; the social sign-in is purely optional.
Payments
Subscription payments are handled by Stripe as an independent processor. We never receive or store your card details.
Cookies
We use one strictly-necessary session cookie to keep you signed in. We use privacy-friendly, cookieless analytics that do not track you across sites, and no advertising or third-party trackers.