Privacy Policy
Last updated: 20 October 2026
This Privacy Policy explains how Investiming collects, uses and protects personal data of users who interact with the website investiming.com and related services (the "Service").
Investiming is currently in a pre-commercial phase. The Service is provided free of charge until paid access launches. Full legal identification of the data controller, including registered address and tax identification number, will be added before the launch of paid access. Until then, all data subject requests can be addressed to the contact email below.
1. Data controller
Name: Sebastián Taramona Fernández
Email for privacy matters: privacy@investiming.com
Status: Pre-commercial sole responsible
A data protection officer (DPO) is not required given the current scale and nature of the processing carried out.
2. Personal data we collect
Account data
- Email address (required for account creation).
- Password (stored as a salted hash, never in plain text).
- How you found Investiming (optional answer at registration) and, if present, the referral tag of the link you arrived through (for example, ?ref=x).
Technical data
- IP address.
- Browser type, operating system, language preferences.
- Pages visited and timestamps of interaction with the Service.
Communication identifiers
- Telegram user ID (only if you link your account to receive alerts via the private Telegram channel).
Cookies
- Essential session cookies required for authentication and basic Service functionality.
- Third-party cookies from Google reCAPTCHA (spam and fraud prevention on the login, registration, and contact forms) and TradingView (interactive charting on the demo and dashboard pages).
We do not use analytics or marketing cookies. We do not collect special categories of data (health, biometric, political opinions, etc.). See Section 8 for full details on third-party cookies.
3. Purposes of processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account | Performance of contract |
| Sending alerts to the channels you joined | Performance of contract |
| Service-related communications | Performance of contract |
| Security, fraud prevention and abuse detection | Legitimate interest |
| Measuring which channels bring new users (aggregated counts of visits through referral links, and the optional "how did you find us" answer) | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
We do not send commercial marketing communications. If this changes, it will require your explicit consent.
4. Data retention
| Category | Retention period |
|---|---|
| Active account data | While your account remains active |
| Account data after deletion | Removed within 30 days, except where legal retention applies |
| Access logs (IP, timestamps) | 12 months |
| Financial records (when paid access launches) | 6 years (Spanish tax and accounting law) |
You may request earlier deletion at any time. See Section 7.
5. Third parties and data processors
The Service relies on the following processors. Each acts under contractual obligations to protect your data:
MongoDB Atlas — database hosting. Region: GCP Belgium (europe-west1). Cluster managed under MongoDB's GDPR-compliant data processing agreement. Data remains within the European Union.
Resend — transactional email delivery (account verification, password reset, contact form, account deletion confirmation). Located in the United States. Data transfers covered by Standard Contractual Clauses (SCC) approved by the European Commission.
ImprovMX — inbound email forwarding for addresses such as privacy@investiming.com. Located in France. Processes email metadata strictly for the purpose of forwarding to the controller's inbox.
Telegram — messaging platform used for the private alerts channel and account-linked messages. Data sent through Telegram is subject to Telegram's own privacy policy (telegram.org/privacy).
Render — website hosting infrastructure.
When paid access launches, Stripe will be added as a payment processor (PCI DSS compliant, with its own privacy policy). This Privacy Policy will be updated accordingly.
6. International data transfers
Some processors listed above operate outside the European Economic Area (EEA), particularly Resend (United States) and Telegram (multiple jurisdictions). Transfers to these processors are protected by:
- Standard Contractual Clauses (SCC) approved by the European Commission.
- The processor's own GDPR compliance program.
You can request more information about specific safeguards by emailing privacy@investiming.com.
7. Your rights under GDPR and LOPDGDD
You have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data ("right to be forgotten").
- Restriction: limit how we process your data.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: at any time, where processing is based on consent.
How to exercise your rights: send a request to privacy@investiming.com. We will respond within 30 days. We may ask for proof of identity to prevent unauthorized requests.
You may also delete your account at any time from your account dashboard. Deletion removes your personal data within 30 days, except where legal retention obligations apply.
Right to lodge a complaint: if you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
8. Cookies
Investiming uses the following categories of cookies:
- Essential session cookies — first-party cookies required for authentication and core Service functionality.
- Google reCAPTCHA — loaded only on the login, registration, and contact pages, to help prevent spam and automated abuse of these forms. See Google's Privacy Policy for details on the cookies this service sets.
- TradingView — loaded only on the demo and dashboard pages, to provide the interactive price chart that the manual-mode tool requires. See TradingView's Privacy Policy for details on the cookies this service sets.
We do not use analytics, marketing, or tracking cookies of our own. If this changes in the future, this Privacy Policy will be updated in advance. Channel measurement uses no cookies or device storage: referral tags travel only in the link itself, and visits are counted on our server as daily totals without identifying the visitor.
You can manage or delete cookies through your browser settings. Blocking reCAPTCHA or TradingView cookies may prevent those specific features (form submission, chart display) from working correctly.
9. Security measures
We apply technical and organizational measures to protect your data:
- HTTPS encryption for all data in transit.
- Salted hashing of passwords (we never store passwords in plain text).
- Access controls restricting database access to authorized personnel only.
- Regular automated backups.
- Monitoring for unauthorized access attempts.
No system is fully invulnerable, but we work to maintain security proportional to the sensitivity of the data we handle.
10. Minimum age
The Service is intended for users aged 14 years and older, in accordance with Spanish data protection law (LOPDGDD).
If you are under 14, do not create an account. If we become aware that we have collected data from a user under this age, we will delete it.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified to registered users by email at least 30 days before they take effect. The current version is always available at investiming.com/privacy with the last updated date at the top. See also our Terms of Service for the terms governing use of the Service.
A specific update will occur when paid access launches: at that point, full legal identification of the data controller (including registered address and tax identification number) will be added, along with information regarding payment processing.
12. Contact
For any privacy-related question or request:
privacy@investiming.com
