AmoreCapitale
CompaniesPricing
ESEN

Legal

Privacy policy

Last updated:

The privacy policy is the document that explains which personal data AmoreCapitale handles and why.

On this page

The controller of your data is AmoreCapitale. For any privacy question, including exercising your rights, write to info@amorecapitale.com.

You can use AmoreCapitale without creating an account. Each processing activity is described with its data, purpose, legal basis and retention period:

  • Browsing and security. Data: IP address, browser type, date and time of each request. Purpose: to deliver the site, keep it working and protect it. Basis: legitimate interest in offering a secure site. Retention: the period set by our hosting provider under the plan we use, for the operation and security of the service.
  • Request limits. Data: an identifier derived from your IP with a hash function, which changes every day, together with usage counters. We do not store the IP. Purpose: to prevent abuse of the search and of company loading. Basis: legitimate interest in protecting the service and its costs. Retention: deleted periodically after 2 days.
  • Language and currency. Data: the approximate country of your connection, given by the hosting provider, and your browser language. Purpose: to open the site in a suitable language and show the price in the right currency. Basis: legitimate interest in adapting the site. Retention: not stored; if you choose a language, the cookie described in the cookie policy is stored.
  • Searches. Data: the text you type in the search box. Purpose: to show you suggestions. Basis: legitimate interest in providing the search. Retention: we do not store it. Do not type personal data into the search box.
  • Account. Data: the name, e-mail address and profile picture Google gives us, and an internal identifier. We do not receive your Google password. Purpose: to identify you. Basis: performance of the contract. Retention: until you delete the account.
  • Profile and preferences. Data: the name you display, your language, the picture you chose (a preset avatar or your Google picture; if you uploaded a photo in the past, it is kept until you change it or delete your account), your e-mail preferences and your plan. Purpose: to personalise your account. Basis: performance of the contract. Retention: until you delete the account.
  • Activity in your account. Data: your favourite companies and when you saved them, the company pages you open while signed in (first and latest visit), the latest version of each company’s data you have reviewed, and the alerts we show you. Purpose: to keep your favourites, point out changes and, with Premium, check the companies you follow every day. Basis: performance of the contract. Retention: until you delete the account.
  • Acceptance of terms. Data: the version accepted, the date, the language and where you accepted it. Purpose: to evidence the contract. Basis: performance of the contract and legitimate interest in being able to prove it. Retention: until you delete the account; acceptance when subscribing to Premium is also recorded in the payment data at Stripe, for the billing data period.
  • Premium subscription and billing. Data: your e-mail address and internal identifier, which we give to Stripe; customer and subscription identifiers, status, price, currency and billing and cancellation dates. Payment takes place on Stripe’s pages: we do not receive or store your card or bank details. Purpose: to manage subscribing, charges and your access. Basis: performance of the contract and compliance with legal obligations. Retention: our copy, until you delete the account; payment and billing data are kept at Stripe for the periods required by commercial and tax law, generally up to 6 years.
  • Withdrawal. Data: your name, your e-mail address and the date of the request. Purpose: to process and evidence it. Basis: compliance with a legal obligation. Retention: kept even if you delete the account, for as long as needed to deal with possible claims, generally up to 6 years.
  • Weekly summary (Premium only, and only if you turn it on). Data: your e-mail address, the week’s alerts about your favourite companies and a record of each summary (the week, the alerts included, the delivery status and the identifier given by the e-mail provider). Purpose: to send it to you. Basis: performance of the contract. Retention: the record, until you delete the account.
  • Promotional communications (only if you consent). Data: your e-mail address, your language and the date and version of your consent. Purpose: to send you AmoreCapitale news and offers. Basis: your consent, which is not needed to use the service or to subscribe to Premium. Retention: until you withdraw it or delete the account.
  • Usage measurement (only if you accept analytics cookies). Data: the pages you visit (without the address parameters, except advertising campaign ones) and some actions: confirmed searches (without the text you type), the company you open or choose (its ticker), creating an account, saving a favourite, Premium entry points and starting payment. They do not include your name, e-mail address, user identifier or payment data. Purpose: to understand in aggregate how the site is used and where visits come from. Basis: your consent. Retention: the period configured in Google Analytics for this measurement.
  • Measurement with HeyCatch (only if you accept analytics cookies). Data: the pages you visit, clicks, where the visit came from, a browser identifier and, if you are signed in, your internal identifier and plan, as well as the fact that you created an account or subscribed to Premium. It does not include your name, e-mail address or payment data, and it does not record your screen. Purpose: to understand how the site is used and which channels bring visitors and customers. Basis: your consent. Retention: the period HeyCatch applies to this data.
  • Our own aggregated measurement, without cookies. Data: when a page is shown, your browser sends us its path, without parameters, and some actions without their content (search sent, company chosen, click to sign in or subscribe, favourite saved, portfolio created). The server obtains the approximate country of the connection and adds one to daily counters. We do not keep your IP or any identifier of you, your session or your device, nor what you type. Purpose: anonymous audience statistics for this site, only to run it. They are not combined with other data or passed to Google or other third parties. Basis: legitimate interest in running and improving the site. Retention: the counters are deleted after 25 months. You can object in the Cookie Policy, section 6.
  • Sign-ups by country. Data: when an account is created, the approximate country of the connection adds one to a daily counter, apart from your account and not added to your profile. Purpose: to know in aggregate where sign-ups come from. Basis: legitimate interest in running the service. Retention: 25 months.
  • Customers by billing country. Data: the country on Stripe invoices, counted in aggregate when the statistics are consulted and not stored separately. Purpose: to know how customers are distributed. Basis: legitimate interest in running the business.
  • Payment process records. Data: that a subscription was started or confirmed and from which part of the site the plans page was reached, without your name, e-mail address or identifier. Purpose: to check that subscribing works. Basis: legitimate interest. They occur even if you reject analytics cookies. Retention: that of the server logs.
  • Contact. Data: your e-mail address and whatever you include in the message. Purpose: to reply to you. Basis: your request and the legitimate interest in answering enquiries. Retention: as long as needed to deal with it and, afterwards, the time needed to address possible liabilities.
  • Cookie preference. Data: your choice, its date and the policy version, stored in your own browser. Basis: compliance with the obligation to obtain and respect your consent. Retention: 24 months or until the cookie policy changes.

Some financial explanations are generated with OpenAI models. We only send data about listed companies, never data about you: not your account, your favourites or your activity.

We do not sell your data or make automated decisions that produce legal effects on you or similarly affect you. Alerts are calculated automatically from data about the companies you follow, without assessing you as a person.

We do not sell or transfer your data. These providers help deliver the service, each in its own role:

  • Vercel: hosting of the site; it receives the technical data of each request and the server logs.
  • Supabase: database, authentication and file storage; it stores your account, profile, activity and subscription data. It also serves company logos, so it receives the IP of whoever loads them, with or without an account.
  • Google: identifies you when you sign in and gives us your name, e-mail address and picture. If you choose your Google picture, your browser loads it from Google’s servers.
  • Google Analytics, only if you accept analytics cookies: measures site usage in aggregate with the data described, the IP address and technical browser data. We do not enable Google Signals or ad personalisation.
  • HeyCatch, only if you accept analytics cookies: measures site usage and where visits come from with the data described.
  • Stripe: processes payments and manages subscriptions, under its own privacy policy. “Manage subscription” takes you to its customer portal.
  • Resend: sends the weekly summary, promotional communications and withdrawal confirmations; it receives your e-mail address and the content of the message.
  • OpenAI: generates explanations from company data; it receives no data about you.

Messages you send us are handled through the e-mail service we use to receive them. We may disclose data to the authorities where there is a legal obligation.

Some providers are established in the United States or may process data outside the European Economic Area. In particular, the site’s functions currently run in the United States. You can see the safeguards each provider applies in its privacy documentation or ask us for this information at info@amorecapitale.com.

You can request access to your data, its rectification or erasure, restriction of processing, objection to it and data portability by writing to info@amorecapitale.com. To deal with your request we may ask for the information needed to verify your identity.

From your account you can change your profile and preferences or delete the account. When you delete it, your profile, photos, favourites, history, alerts, the record of your summaries and acceptances and the subscription data AmoreCapitale holds are erased. You cannot delete it while you have a subscription that can still charge you: you must cancel it first. Deleting the account does not erase the data Stripe must keep or cancel amounts due.

You can turn off the weekly summary and withdraw your promotional consent in your account settings or with the link in each e-mail. You can withdraw your analytics consent under “Cookie settings”, at the bottom of every page; we stop sending measurement data and delete the Google Analytics cookies from your browser; HeyCatch stops measuring. Withdrawing a consent does not affect earlier processing.

If you believe the processing does not comply with the law, you can lodge a complaint with the competent supervisory authority. In Spain this is the Agencia Española de Protección de Datos (www.aepd.es).

Account and payment data are needed to create an account or subscribe to Premium: without them we cannot provide those features. Analytics cookies, the weekly summary and promotional communications are optional.

We apply reasonable measures to protect information, such as encrypted connections and access for each user to their own data only. No system is completely infallible, so we cannot guarantee absolute security.

Anyone can browse the site without registering. To create an account you must be at least 14; below that age the law requires the consent of your parents or guardians and we do not allow registration. Premium can only be subscribed to by an adult. If you believe a child under 14 has created an account, write to us so we can delete it.

If we add new data processing, we will update this policy before launching it. The version in force and its date are always those published on this page.