PRIVACY POLICY
Last updated: July 3, 2026
Welcome to Valuesider. This privacy policy explains how we collect, use, store, and protect your personal information when you use our investment fund screening and portfolio tracking platform. By using Valuesider, you agree to the collection and use of information in accordance with this policy.
1. INFORMATION WE COLLECT
1.1 Account information
When you register for an account, we collect your name, email address, and password (stored securely using industry-standard encryption). Your email address must be verified before you can access the platform. Unverified accounts are automatically deleted after 2 days.
1.2 Authentication and security data
To protect your account, we may collect:
• Multi-factor authentication (MFA) data, including time-based one-time password (TOTP) secrets and recovery codes (encrypted)
• Social login information when you choose to authenticate via Google, LinkedIn, or X (formerly Twitter), including your provider ID, name, email, and profile picture
• OAuth access tokens and refresh tokens (encrypted) when you link social accounts
• Session data, login timestamps, and authentication credentials
1.3 Profile and preference data
We store your profile picture (avatar) on secure cloud storage, UI preferences (such as ad display settings), and notification preferences. You have full control over these settings in your account dashboard.
1.4 Subscription and billing information
When you subscribe to our Premium or Elite plans, billing is handled by Paddle, our Merchant of Record, which processes all orders on our behalf. Paddle collects and stores your payment information, billing name, and email address. We receive subscription status, plan type, and transaction records but do not directly handle credit card information.
1.5 Application usage data
As an investment research platform, we collect and store:
• Your saved portfolio tracking data and fund screening preferences
• Filter presets and custom search configurations you create
• Fund alerts and watchlists you set up
• Fund requests you submit for funds not yet in our database
• Support tickets, messages, and file attachments when you contact our support team
1.6 Technical and analytics data
We automatically collect certain technical information including IP addresses (anonymized in analytics), browser type, device information, operating system, and pages visited. This helps us improve the platform and understand how users interact with our service.
2. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies to provide and improve our service. Cookies are small data files stored on your device that help us remember your preferences and authenticate your sessions.
2.1 Essential cookies (no consent required)
These cookies are necessary for the platform to function:
• Session cookies to keep you logged in
• CSRF tokens to protect against security threats
• "Remember me" cookies (valid for 365 days) if you choose to stay logged in
• Cloudflare security cookies for DDoS protection and bot detection
2.2 Analytics cookies (consent required)
With your consent, we use Google Analytics 4 to understand how visitors use our platform. We have enabled IP anonymization to protect your privacy. You can manage your cookie preferences at any time through our cookie consent manager, accessible in the privacy policy page.
2.3 Optional tracking (consent required)
With your consent, we may use:
• YouTube cookies when you view embedded videos
• Widget cookies for interactive charts and data visualizations
• Advertisement cookies for relevant ads
You can withdraw consent at any time by adjusting your cookie settings.
3. HOW WE USE YOUR INFORMATION
We use your personal information to:
• Provide and maintain the Valuesider platform
• Process your subscription and manage billing through Paddle
• Send you notifications based on your preferences (email, in-app, or both)
• Respond to your support requests and resolve technical issues
• Improve our service through analytics and usage statistics
• Protect against fraud, unauthorized access, and security threats
• Comply with legal obligations and enforce our Terms of Service
• Communicate important updates about the service or your account
4. HOW WE SHARE YOUR INFORMATION
4.1 Service providers and processors
We share your information with trusted third-party service providers who help us operate the platform:
• Paddle (Merchant of Record — billing and payment processing)
• Amazon Web Services/AWS S3 (secure file storage for avatars and attachments)
• Google Analytics (website analytics with IP anonymization)
• Email service providers (transactional and notification emails)
• Redis hosting (session and cache management)
• Social authentication providers (Google, LinkedIn, X) for OAuth login
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.2 Legal requirements
We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety, or that of our users.
4.3 Business transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change.
5. DATA SECURITY
We take data security seriously and implement industry-standard measures to protect your information:
• Passwords are hashed using strong encryption algorithms
• MFA secrets, recovery codes, and OAuth tokens are encrypted at rest
• Session data is encrypted and stored securely in Redis
• File storage uses AWS S3 with temporary signed URLs (15-minute expiration) for private content
• Regular security audits and monitoring
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
6. DATA RETENTION
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specific retention practices include:
• Active accounts: Data retained while your account exists
• Unverified accounts: Automatically deleted after 2 days
• Deleted accounts: Data removed in accordance with our deletion policy and legal obligations
• Support tickets: Soft-deleted and retained for a reasonable period for quality assurance
• Legal and accounting records: Retained as required by law
You can request deletion of your account and associated data at any time through your account settings or by contacting support.
7. YOUR RIGHTS AND CHOICES
7.1 Access and control
You have the right to:
• Access your personal information through your account dashboard
• Update or correct your account information at any time
• Link or unlink social authentication accounts
• Delete saved filters, presets, and preferences
• Request a copy of your data
• Request account deletion
7.2 Notification preferences
We provide granular control over notifications. You can:
• Choose delivery methods (email, in-app, or both)
• Set frequency preferences (immediate, daily, weekly)
• Configure preferences by notification category (general, alerts, tickets)
• Unsubscribe from specific notification types
• Use one-click unsubscribe links in all emails
Manage your notification preferences in your account settings.
7.3 Cookie preferences
You can manage cookie consent and opt out of analytics tracking through the cookie consent manager on our privacy policy page. You can also reset your cookie preferences at any time.
8. THIRD-PARTY SERVICES
Our platform integrates with third-party services. Each has its own privacy policy:
• Paddle (payments — Merchant of Record): paddle.com/legal/privacy
• Amazon Web Services: aws.amazon.com/privacy
• Google Analytics: policies.google.com/privacy
• Cloudflare: cloudflare.com/privacypolicy
We recommend reviewing their privacy policies to understand how they handle your data.
9. INTERNATIONAL DATA TRANSFERS
Valuesider processes and stores data in various jurisdictions. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws.
10. GDPR COMPLIANCE (EU USERS)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR).
10.1 Legal basis for processing
We process your personal data based on:
• Contract performance: To provide our services and fulfill our agreement with you
• Legitimate interests: To improve our service, ensure security, and conduct analytics
• Consent: For cookies, marketing communications, and optional features
• Legal obligations: To comply with applicable laws and regulations
10.2 Your rights under GDPR
You have the right to:
• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability (receive your data in a structured, machine-readable format)
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with your local supervisory authority
To exercise these rights, please contact us using the support form below.
10.3 Data protection officer
For GDPR-related inquiries, you may contact our data protection team through our support form. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
10.4 International data transfers
When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or adequacy decisions for certain jurisdictions.
11. US STATE PRIVACY RIGHTS (CCPA/CPRA AND SIMILAR LAWS)
If you are a resident of California or another US state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, or Utah), you may have additional rights regarding your personal information.
11.1 Your rights
Subject to applicable law, you have the right to:
• Know what categories of personal information we collect and how we use them
• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Opt out of the "sale" or "sharing" of your personal information
• Non-discrimination: we will not deny you services or charge you different prices for exercising your privacy rights
11.2 Sale and sharing of personal information
We do not sell your personal information for money. However, our use of analytics cookies (such as Google Analytics) may be considered "sharing" or a "sale" under some state laws. You can opt out at any time by declining or resetting analytics cookies through our cookie consent manager (use the "Reset cookies" link on this page or in the footer).
11.3 Exercising your rights
To exercise any of these rights, contact us through our support form: Support and clearly indicate that your request relates to US state privacy rights. We will verify your request and respond within the timeframe required by applicable law.
12. CHILDREN'S PRIVACY
Valuesider is an investment research platform intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use this platform or provide any personal information. If we discover that we have collected information from someone under 18, we will delete it immediately. If you believe we may have information from someone under 18, please contact us.
13. CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date at the top. We encourage you to review this privacy policy periodically. Your continued use of Valuesider after any changes constitutes your acceptance of the updated policy.
14. CONTACT US
If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal information, please contact us through our support form: Support
For data protection and privacy-specific inquiries, including requests to exercise your rights under GDPR or other data protection laws, please use the same support form and clearly indicate that your inquiry relates to privacy or data protection.
You are also advised to review our Terms of Service and Disclaimer.