Privacy Policy
Last updated: 18 July 2026.
Who is responsible
InvestWhen is part of docutati. The controller for your personal data is docutati (Netherlands, KvK 42095190, BTW-id NL005492040B03). Contact: support@investwhen.com.
What we process
Your account (email, optional name, hashed password, plan), your preferences (the markets and topics you follow, timezone, digest schedules), your chat conversations and AI-focus history, your bookmarks and any share links you create, minimal billing records, and basic technical request data. We use your email only for transactional messages (verification, password reset, receipts) and the digests you schedule.
Where it is processed
The models that write the reads and answer the chat run on our own private infrastructure in the EU. Your questions and reading habits are never sent to any third-party AI provider and are never used to train any model.
Retention & your rights
You can export all your data or permanently delete your account at any time from your account page (GDPR access, portability and erasure). Deletion removes your profile, preferences, chats, bookmarks and share links. Minimal billing records are kept only as required by law. You may also contact support@investwhen.com to exercise your rights.
Security & server logs
Passwords are hashed (argon2), traffic is encrypted in transit, and infrastructure access is restricted over a private network. Servers keep minimal technical logs (IP, timestamp, requested page) for up to 90 days to secure the service and prevent abuse — never used to profile or track you across sites.
Optional sign-in
If you choose "Continue with Google" or "Continue with Microsoft", we receive only your verified email address from that provider — nothing else. Signing up with an email and password works exactly the same — the social sign-in is purely optional.
Payments
Subscription payments are handled by Stripe as an independent processor. We never receive or store your card details.
Cookies
We use one strictly-necessary session cookie to keep you signed in. We use privacy-friendly, cookieless analytics that do not track you across sites, and no third-party trackers.
Advertising
Some free and public pages carry a small number of clearly labelled placements. They are served from our own servers as ordinary page content: there is no third-party ad script, no advertising cookie, and no tracking pixel, so no data about you is sent to an advertiser or an ad network when a placement is shown to you.
We count how often a placement was shown and clicked in our own logs, as aggregate totals per placement. Those counts are not linked to a profile of you and are not shared with advertisers as personal data. Clicking a placement takes you through a link on our own domain and then on to the advertiser, at which point their own privacy policy applies.
Paying subscribers see no advertising at all. If we ever introduce a third-party advertising network on the free pages, it would set cookies or process personal data, so we would ask for your consent first and update this page before it ran.