Privacy Policy
Last updated: February 28, 2026
This privacy policy explains how Sijoittajatieto ("we", "us", "our") collects, uses, and protects your personal data when you use our platform.
1. Data Controller
Sijoittajatieto is the data controller for the personal data collected through this platform. You can contact us via our contact form.
2. Data We Collect
We collect the following personal data when you create an account and use our services:
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Account authentication and transactional emails | Contract — Art. 6(1)(b) GDPR |
| Display name | Personalisation of your experience | Contract — Art. 6(1)(b) GDPR |
| Watchlist items | Core service: stock tracking | Contract — Art. 6(1)(b) GDPR |
| Price alerts | Core service: alert notifications | Contract — Art. 6(1)(b) GDPR |
| Portfolio holdings | Core service: portfolio tracking | Contract — Art. 6(1)(b) GDPR |
| IP address / request logs | Security and abuse prevention | Legitimate interest — Art. 6(1)(f) GDPR |
3. Third-Party Services
We use the following sub-processors to deliver our service:
- Supabase (Supabase Inc., USA) — database and authentication. Data is stored in the EU (West Europe region). Supabase is GDPR-compliant and provides a DPA.
- Resend (Resend Inc., USA) — transactional email delivery. Used to send confirmation emails and price alert notifications.
- Vercel (Vercel Inc., USA) — application hosting and serverless functions. EU data transfer covered by Standard Contractual Clauses.
4. Data Retention
We retain your account data (email, display name, watchlist, alerts, portfolio) for as long as your account is active. You can request deletion at any time by contacting us. Server request logs are retained for up to 90 days for security purposes.
5. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of your personal data
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to lodge a complaint — with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu, tietosuoja.fi)
6. Cookies
We use strictly necessary cookies to maintain your login session. With your consent, we may use analytics cookies in the future. For full details, see our Cookie Policy.
Cookie Policy →7. Contact
For any questions about this privacy policy or to exercise your rights, please use our contact form.
Contact form →