Privacy Notice

1. Controller and contact

MB "Rei exitus" is the controller for account, product, support, and portfolio data processed to provide Buffered. Privacy requests can be sent to hello@buffered.app.

2. Data we process

• Account data: email address, authentication tokens in hashed form, session and security records.
• Notification data: alert preferences and delivery records for optional product emails you enable.
• Portfolio data: holdings, cash, options, transactions, imports, settings, limits, notes, and calculated risk outputs.
• Broker connection data: account reference and encrypted read-only IBKR Flex credentials.
• Billing data: Stripe customer/subscription identifiers, plan, status, invoices, and entitlement state. Full card details are handled by Stripe, not stored by this service. Account email and limited trial, subscription, and payment-event details are sent through our email provider to the operator to administer billing; these operational notices do not include portfolio records.
• Optional marketing analytics: with consent on /product, Google Analytics receives a browser identifier, device/browser information, and the fixed product-page address. Google also processes the network IP address when receiving these requests. Only predefined Reddit or LinkedIn campaign labels may be included. We do not send account emails, login tokens, portfolio or financial data, arbitrary query strings, fragments, or referring-page addresses to analytics.
• Technical data: IP address used for rate limiting, request/security logs, route-level error references, and aggregate browser performance measurements supplied to hosting infrastructure.
• Support data: your account email, selected message type and product area, title, message, and reference when you use Feedback & support. These are sent through our email provider to our support inbox. Portfolio records, screenshots, and broker credentials are not attached automatically. We also process information you provide when exercising a legal right.

3. Sources

Data comes from you, your configured read-only broker report, Stripe billing events, authentication and hosting systems, and market-data providers used to refresh instrument context. The service does not obtain authority to place broker orders.

4. Purposes and legal bases

• Contract: create your account, provide subscribed features, process imports, send enabled service alerts, support billing, and respond to service requests.
• Legitimate interests: secure the service, prevent abuse, diagnose failures, and improve reliability without overriding your rights.
• Legal obligation: retain records required for accounting, tax, fraud prevention, disputes, or regulatory requests.
• Consent: only where a specific optional processing activity expressly asks for consent. Consent can be withdrawn prospectively.

5. Recipients and processors

Data is shared only as needed with configured service providers, including hosting, PostgreSQL/database, passwordless and service-alert email, Stripe billing, market-data, and support infrastructure. If AI explanation review is enabled, only structured calculated context required for that review is sent to the configured AI provider; AI cannot unblock deterministic risk rules. Providers may process data under their own legal obligations.

With your optional analytics consent, Google Ireland Limited provides Google Analytics. Google may process this technical usage data on infrastructure outside the EEA, including in the United States. Advertising personalization and Google signals are disabled.

6. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers use an adequacy decision, standard contractual clauses, or another lawful transfer mechanism. Contact the privacy address for information about safeguards applicable to the configured production providers.

7. Retention

Portfolio and account data is retained while the account is active and then deleted or anonymized when no longer needed, subject to backups and legal retention duties. Login links expire after their stated period; revoked and expired session/security records are retained only as needed for security. Billing and transaction records may be kept for statutory accounting, tax, dispute, and fraud-prevention periods. Operational billing notification records are included in account exports and removed from the application on account deletion. Delivered operator emails are retained only while needed for billing administration and relevant legal duties. Support correspondence is retained while needed to resolve the request and relevant follow-up, subject to those legal duties. Google Analytics event-level data retention is set to two months; aggregate reports may remain longer. Analytics cookies and the stored consent choice expire within six months.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. Requests are handled after reasonable identity verification and normally answered within the legally required period. Signed-in users can export personal data or submit a deletion request from the Account and Data page. You may also complain to your local data protection authority.

9. Automated analysis

The service calculates deterministic portfolio-risk statuses and may provide optional AI explanations. These analytics do not make legal or similarly significant decisions about you, do not execute trades, and do not determine access to credit, insurance, employment, or public services.

10. Cookies and local storage

The product uses an essential session cookie for secure sign-in. Operational error and performance diagnostics do not create an advertising profile or a separate browser tracking identifier. Optional Google Analytics runs only on the public product page after you choose Accept analytics; rejecting it sends no Google Analytics requests. It uses first-party _ga and _ga_* cookies to distinguish visits. We store your consent choice in local storage for up to six months so we can respect it. Analytics does not run on sign-in, support, billing, or account/portfolio pages.

Open Analytics settings on the product page to change your choice or withdraw consent. Withdrawal removes Google Analytics cookies and reloads the page to stop collection. It does not affect earlier lawful processing. If your browser cannot save consent, analytics stays off. No advertising consent is requested or granted.

11. Security and changes

Security measures include hashed authentication secrets, encrypted broker credentials, account-scoped data, access controls, and signed billing webhooks. No system is risk-free. Material notice changes will be published here with an updated date and communicated when required.