Legal · Privacy Policy

Your investment data is private.

We built Invest Board for serious investors. Your data is yours — we will never monetize it, share it, or use it for any purpose other than providing you the service.

Encrypted & secure

All your data is encrypted at rest and in transit using industry-standard encryption.

Never sold or shared

Your portfolio, watchlist, thesis notes, and investment decisions are never sold, never used for advertising, and never disclosed to anyone. Infrastructure providers process data under contract to deliver the service, and for no other purpose.

No ads, no tracking

We do not run ads, use tracking pixels, or share data with advertising networks. Your investment activity stays private.

Your data, your control

You can export or delete your data at any time.

Definitions.

Data Subject: Any living individual who is the subject of Personal Data.
Personal Data: Data about a living individual who can be identified from those data.
Privacy Act: Refers to relevant privacy legislation applicable to Invest Board's operations.
GDPR: General Data Protection Regulation of the European Union.
User: Individual using Invest Board's services, corresponding to the Data Subject.

Information collection and use.

Types of data collected include, but are not limited to, email address, name, usage data, and financial portfolio data.

Usage of Personal Data for contact, newsletters, marketing, and promotional materials. Option for users to opt-out.

Collection of Usage Data including IP address, browser type, visit times, and pages visited.

Use of data.

Data used for service maintenance, customer support, analysis, and improvement.

Communication regarding updates, offers, and relevant information, with opt-out options.

Retention and transfer of data.

Retention of Personal Data as necessary for legal and service-related purposes.

Transfer of data may occur, with adequate security measures in place.

Service providers who process your data.

Delivering the service requires infrastructure run by other companies. They act as processors under contract: they may only use your data to provide their service to us, never for their own purposes, never for advertising, and never for resale.

Hosting and storage: Amazon Web Services runs our servers and databases, where your data is encrypted at rest and in transit.
AI analysis: when you use the Co-Pilot or run an analysis, the relevant text, which can include your thesis and journal notes, is sent to AI model providers to generate the response. It is processing, not disclosure: the text is used to answer you, under provider terms that bar its use for training their models.
Payments: Stripe processes subscriptions. We never see or store your card details.
Sign-in: Google provides authentication. We receive your name and email address, nothing else.

Disclosure of data.

No sharing of personally identifiable information for marketing purposes without explicit consent.

Possible disclosure for legal requirements or law enforcement.

Security of data.

Efforts to secure data, acknowledging the limitations of online security.

Procedures in place for notifying users in case of a security breach.

Your rights.

Users can access, amend, or delete their Personal Data within their account settings.

Procedures for data portability and handling data-related requests.

Links to other sites.

Disclaimer for third-party site links and their separate privacy policies.

Children's privacy.

Service not directed at children under 13 years of age.

Changes to privacy policy.

Notification of policy changes on the website or via email.