GDPR Policy

Last updated: February 4, 2026

1. Introduction

Intellistonks ("we", "our", or "us") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This GDPR Policy explains how we collect, use, and protect your personal data when you use our stock information dashboard service.

2. Data Controller

Intellistonks
Email: [email protected]
Data Protection Officer: Jesse ([email protected])

3. What Personal Data We Collect

3.1 Account Information

• Email address
• Username
• Password (encrypted)
• Account creation date
• Premium status and subscription information
• User roles and permissions

3.2 Usage Data

• Dashboard configurations and layouts
• Watchlist contents
• Search history and preferences
• IP addresses and login timestamps
• Device and browser information

3.3 Financial Data

• Stock symbols you track
• Portfolio performance data (calculated, not stored)
• Price alerts and notifications

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you explicitly agree to our terms and privacy policy
• Contract: To provide our services and fulfill our contractual obligations
• Legitimate Interest: To improve our services and ensure platform security
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Data

• To create and manage your account
• To provide personalized dashboard and watchlist functionality
• To send important service notifications
• To improve our services and develop new features
• To ensure platform security and prevent fraud
• To comply with legal obligations

6. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your data with:

• Email Service Providers: For sending notifications (encrypted and secure)
• Legal Authorities: When required by law

7. Data Retention

• Account Data: Retained while your account is active and for 3 years after deletion
• Usage Logs: Retained for 12 months for security and analytics
• Financial Data: Retained only as necessary for service provision

8. Your Rights Under GDPR

8.1 Right to Access

You have the right to request a copy of all personal data we hold about you.

8.2 Right to Rectification

You can update your personal information through your account settings.

8.3 Right to Erasure

You can delete your account and all associated data at any time.

8.4 Right to Data Portability

You can export your dashboard configurations and watchlists.

8.5 Right to Restrict Processing

You can limit how we process your data by adjusting your account preferences.

8.6 Right to Object

You can opt out of non-essential data processing.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics that collect personal data.

10. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Password encryption using bcrypt
• Regular security audits and updates
• Secure data storage with access controls

11. International Data Transfers

Your data is primarily stored in secure data centers. If data is transferred internationally, we ensure appropriate safeguards are in place.

12. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16.

13. Changes to This Policy

We may update this GDPR Policy periodically. We will notify you of significant changes via email or platform notification.

14. Contact Us

If you have questions about this GDPR Policy or wish to exercise your rights, please contact us:

• Email: [email protected]
• Subject: "GDPR Inquiry"

15. Complaints

If you believe we have not complied with GDPR, you have the right to lodge a complaint with your local data protection authority.