Privacy Policy

Who we are

The Investing Buffalo members area is operated by [COMPANY NAME], a company registered in England and Wales (number [COMPANY NUMBER]), registered office [REGISTERED OFFICE]. We are the data controller for the personal data described here, and we are registered with the Information Commissioner’s Office under [ICO REGISTRATION NUMBER].

For anything about your data, email [PRIVACY EMAIL].

What we collect, and why

We have tried to collect as little as possible. Specifically, we hold:

• Your email address and display name, to run your account and sign you in. Our lawful basis is performance of our contract with you.
• The figures you enter into the calculators, and the scenarios you save, because storing them is the service you are paying for. Lawful basis: contract.
• Your subscription status and payment records. Lawful basis: contract, and legal obligation for the tax and company records we are required to keep.
• Sign-in and security events, including IP address and browser, to protect your account from being taken over. Lawful basis: our legitimate interests in keeping accounts secure. We have carried out and documented a balancing assessment.
• Marketing email preferences, only if you opt in. Lawful basis: your consent, which you can withdraw at any time from your settings page.

What we never collect

We think this matters as much as the list above:

• Your card details never reach us. Payments are handled by Stripe on their own pages. We store only an identifier and your subscription status.
• Your password never reaches us. Authentication is handled by Clerk.
• We do not connect to your bank or investment accounts. There is no Open Banking and no portfolio sync. Every figure in the calculators is one you typed, and may be entirely hypothetical.
• We do not collect your date of birth, National Insurance number, home address, or bank details. If you fill in Your figures we hold the year you were born and nothing finer, because the forecasts need your age and never your birthday.

Who we share it with

We do not sell your data, share it for anyone else’s marketing, or use it to train machine learning models. We use a small number of service providers, each under a written data processing agreement: Clerk (authentication), Neon (database), Vercel (hosting), Stripe (payments), Resend (email) and Sentry (error monitoring).

We also load the site’s typefaces from Adobe Fonts, so that this members area looks like the rest of Investing Buffalo. Your browser fetches those fonts directly from Adobe, which means Adobe receives your IP address and browser type. It receives nothing else — not your email address, not your account, and none of the figures you save.

Your account data is stored in the United Kingdom. Some of these providers process data in the United States; where they do, the transfer is covered by the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses.

How long we keep it

Your account and saved figures are kept until you delete your account. Security logs are kept for 12 months. Payment and invoice records are kept for six years, because company and tax law requires it — this is the one thing that survives account deletion, and we would rather say so plainly than surprise you.

A free account with no sign-in for 24 months is deleted, after we email you a warning first.

Deleting your account

You can delete your account yourself at any time, from your settings page. Doing so removes your account record and every figure you have saved, and deletes your login.

One honest caveat: our database keeps automatic backups for a rolling six-hour window, so deletion completes within six hours rather than instantly. Backups are never used to restore an individual deleted account.

Your rights

Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, and to receive it in a portable format. Two of these are buttons rather than requests: your settings page has Export my data, which produces a file containing everything we hold about you, and Delete my account.

For anything else, email [PRIVACY EMAIL] and we will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

We set only the cookies strictly necessary to keep you signed in. Our analytics do not use cookies and do not identify you, which is why you have not been asked to accept anything. See our cookie policy.

Changes

Each version of this policy is numbered and dated. If we change it in a way that affects you, we will ask you to review and accept the new version when you next sign in.