Privacy Policy

Introduction

Safe Dividend Tracker ("we", "us", or "our") operates the website at safedividendtracker.com and the associated web application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use the Service.

Information We Collect

1. Information you provide directly

• Account registration: first name, last name, email address, and a hashed password.
• Profile updates: display name and notification preferences.
• Portfolio data: ticker symbols, share counts, purchase prices, and notes you enter manually.
• Payment information: processed exclusively by Stripe. We never store your card number, CVC, or full billing address on our servers.
• Support communications: messages you send to our support email.

2. Information collected automatically

• Log data: IP address, browser type, operating system, referring URL, pages viewed, and timestamps.
• Device identifiers: browser fingerprint components used solely for fraud prevention.
• Usage data: feature interactions, session duration, and navigation paths — collected in aggregate and not linked to your identity.
• Authentication tokens: short-lived JWTs stored in your browser's localStorage for session management.

3. Information from third-party services

• Brokerage data (SnapTrade): when you connect a brokerage account, SnapTrade provides us with read-only position, balance, and transaction data via OAuth. Your brokerage login credentials are never shared with us.
• Market & dividend data (Financial Modeling Prep): we retrieve publicly available dividend history, stock prices, and company profiles. No personal data is exchanged.
• Payment events (Stripe): we receive webhook events confirming subscription status, plan tier, and renewal dates.

How We Use Your Data

We use the information we collect to:

• Create and maintain your account and authenticate your sessions.
• Power the Service: calculate portfolio values, dividend income, DRIP projections, and alert conditions.
• Send transactional emails: account confirmation, password resets, payment receipts, and subscription notifications.
• Send optional email digests: weekly or monthly income summaries, if you opt in.
• Improve the Service: analyse aggregate usage patterns to identify bugs, prioritise features, and optimise performance.
• Enforce our Terms of Service and prevent fraud or abuse.
• Comply with applicable legal obligations.

Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We share data only in the following limited circumstances:

Service providers (sub-processors)

Legal requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g. a court order or government agency), or where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Business transfers

If Safe Dividend Tracker is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. Specific retention periods:

• Active accounts: all data retained while your account is active.
• Cancelled accounts: account data retained for 60 days after cancellation to allow data export, then permanently deleted.
• Email logs: retained for 90 days for deliverability diagnostics.
• Financial transaction records: retained for 7 years as required by applicable financial record-keeping laws.
• Server access logs: retained for 30 days, then automatically purged.

You may request earlier deletion of your personal data at any time by contacting us at privacy@safedividendtracker.com.

Security

We take the security of your data seriously and implement industry-standard safeguards:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS-only).
• Passwords are hashed using bcrypt with a cost factor of 12 — we never store plaintext passwords.
• Authentication uses short-lived JSON Web Tokens (JWT) with server-side expiry validation.
• Database credentials are stored in environment variables, never in source code.
• Brokerage connections via SnapTrade use OAuth tokens with read-only scope — no write access to your accounts.
• We conduct periodic security reviews and apply patches promptly.

Cookies & Tracking

What we use

We use a minimal set of browser storage mechanisms:

• localStorage — stores your authentication token and user preferences (theme, default view). Cleared on logout.
• sessionStorage — not used.
• Cookies — we set one session cookie for CSRF protection. No advertising cookies are set.

Third-party scripts

We do not load Google Analytics, Facebook Pixel, or any other third-party tracking scripts. The only third-party JavaScript loaded is Stripe.js (for payment processing), which is loaded directly from stripe.com.

Your choices

You can clear your localStorage and cookies at any time through your browser settings. Note that clearing authentication tokens will sign you out of the Service.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise any of these rights, email us at privacy@safedividendtracker.com. We will respond within 30 days. We may need to verify your identity before processing your request.

GDPR (European users): If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your national supervisory authority.

CCPA (California residents): We do not sell personal information within the meaning of the California Consumer Privacy Act. California residents may submit requests under the CCPA to the email above.

Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@safedividendtracker.com.

Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective date" at the top of this page.
• Send an email notification to all registered users at least 14 days before the changes take effect.
• Display a prominent notice in the app for 30 days following the change.

Your continued use of the Service after the effective date constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account before they take effect.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out:

We aim to respond to all privacy-related inquiries within 5 business days, and to all access, deletion, or correction requests within 30 calendar days.