Privacy Policy

1. Who We Are

Datajul LLC ("we", "the Company") operates the Finnversion platform at finnversion.datajul.com. This Policy describes how we collect, use, and protect your personal information.

2. Data We Collect

Data you provide:

• Email — to create and manage your account. Legal basis: performance of the contract.
• Password — stored as an irreversible hash (bcrypt); never in plaintext.
• Profile details — optional name, organization and biography, if you choose to fill them in on your profile page.

Data generated by your use of the Service:

• Tickers you analyze and favorite — to show your history and favorites. This records which companies you research.
• Run history — a ledger of each analysis run, the ticker, and the credit charged or refunded. Kept for billing accuracy, support and dispute resolution.
• Consent records — which version of these documents you accepted, when, and from which IP address and browser. Kept as evidence that consent was given.
• Session cookie — signed, expires in 7 days.
• Technical logs — IP, user agent, timestamps, for security and diagnostics.

If you subscribe:

• Billing identifiers — the customer and subscription references issued by our payment processor, your plan, billing interval and renewal date.
• We never receive your card details. Payment details are entered on Stripe's own checkout page and are held by Stripe, not by us.

We do not collect: card or bank details, sensitive data (health, race, orientation), or data from minors under 18. The Service is not directed at minors.

3. How We Use Your Data

• Authenticate your access and manage your account.
• Display your analysis history and favorites.
• Send essential transactional communications.
• Detect and prevent fraud or abuse.
• Improve the platform through aggregated, anonymized analysis.

We do not sell, rent, or commercialize your personal data.

4. Sharing with Third Parties

We rely on third-party providers to operate the Service. Each receives only what it needs for the purpose it serves. The full list — provider, purpose, data received and region — is published and kept current here:

View our sub-processors →

In summary, these fall into the following categories:

• Infrastructure: our hosting provider (Hetzner, Germany), which holds your account data at rest.
• Payments: Stripe, which receives your email and plan in order to bill you.
• AI model providers: which receive the ticker you request and the public financial data gathered for it, in order to generate the analysis. See section 5 below.
• Diagnostics: our tracing provider, which records the prompts and intermediate steps of analysis runs so failures can be investigated.
• Market data sources: which receive ticker queries only, and nothing about you.

Beyond those providers, your data is disclosed only:

• Legal compliance: if required by law or a valid court order.
• Rights protection: to protect the rights, property, or safety of Datajul LLC or its users.

We do not sell, rent or share your personal data for advertising.

5. Artificial Intelligence and Automated Processing

Finnversion is built on large language models. When you request an analysis, the following happens:

• The ticker symbol you enter, together with public financial data gathered for that company, is sent to third-party AI model providers listed on our sub-processors page. These providers are located in the United States.
• The prompts and intermediate steps of each run are also sent to our diagnostic tracing provider and retained there, so that failed or low-quality runs can be investigated.
• Your account details are not sent to these providers. However, because each run is linked to your account in your own history, you should treat the record of what you research as processed in the United States.

The output is generated automatically. Recommendations, scores, valuations and price targets are produced by software without human review. They are informational only, are not personalized investment advice, may contain errors, and must not be relied on as the sole basis for a financial decision. See our Terms of Use.

We do not use automated processing to make decisions about you — nothing about your account, pricing or access is decided by a model. The automated output concerns publicly traded companies, not you.

We do not use your personal data to train AI models. What reaches a model provider is the ticker you asked about and the public financial data assembled for it — not your account details. How each provider may use that request content is governed by its own API terms; the providers we use are listed on our sub-processors page.

6. Data Retention

• Account data (email, password hash, profile, favorites, analysis history) — retained while your account exists. Deleting your account removes all of it immediately.
• Run and billing history — retained while your account exists, and removed with it. Our payment processor keeps its own transaction records independently, as it is required to for tax and accounting purposes.
• Consent records — retained while your account exists, as evidence of the agreement they record.
• Technical logs — retained for security and diagnostics, then discarded.
• Diagnostic traces of analysis runs — retained by our tracing provider, as described in section 5.
• Generated theses — cached by ticker symbol, not by account. They contain nothing about you and are not linked to you, so they are not removed when you delete your account.

7. Your Rights (CCPA / GDPR)

Under applicable law (CCPA for California residents; GDPR for EU residents), you have the right to:

• Access and portability — receive a copy of your data in a structured, machine-readable format.
• Correction — correct inaccurate data.
• Deletion — delete your data (the "right to be forgotten").
• Objection — object to processing for certain purposes.

You can exercise the first three yourself, immediately, without asking us:

• Download your data — a JSON export of everything your account holds.
• Edit your profile — correct your name, organization or biography at any time.
• Delete your account — removes your profile, favorites, analysis history, consent records and billing history, and cancels any active subscription. This is immediate and cannot be undone.

For anything else, or if you would rather we did it for you, contact info@datajul.com. We will respond within 30 days.

8. Security

We implement encryption in transit (HTTPS/TLS), bcrypt password hashing, and restricted database access. No system is 100% secure; please use unique, strong passwords.

9. Cookies

We use only:

• it_session — strictly necessary session cookie, expires in 7 days.
• it-theme (localStorage) — theme preference, not transmitted to the server.

We do not use third-party or advertising tracking cookies.

10. International Transfers

Your account data is stored in the European Union — on servers operated by Hetzner in Germany. That covers your email, password hash, profile, favorites, analysis history, consent records and billing records.

Some processing takes place in the United States. As described in sections 4 and 5, running an analysis sends the ticker you requested and the public financial data gathered for it to AI model providers and to our diagnostic tracing provider, all of which are located in the US. Our payment processor is also US-based and receives your email address when you subscribe. The sub-processors page lists each provider and its region.

These transfers rely on the safeguards set out in each provider's data processing terms.

11. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes by email or through a prominent notice on the platform.

12. Contact

Privacy inquiries: info@datajul.com

Terms of Use → ← Back