개인정보 처리방침
최종 업데이트: 2026년 9월 23일
이 문서는 영어로만 제공됩니다. 영어 원문이 적용되는 버전입니다.
This policy explains what personal data DIDAS HOLDINGS LLC collects, why, who it is shared with, and what you can ask us to do with it. We collect as little as the Service needs, and we do not sell personal data.
What we collect
| Data | When | Why |
|---|---|---|
| Email address and name | When you create an account | To sign you in and contact you about your account |
| Password (stored only as a one-way hash) | If you register with email and password | To sign you in |
| Name, email and profile image from Google | If you sign in with Google | To create and identify your account |
| Watchlists, portfolios, positions and preferences | When you create them | To provide those features |
| Companies you have viewed | While you are signed in | To show your research history, which you can clear |
| Subscription status and a Stripe customer reference | If you subscribe | To manage your plan. Card details are handled by Stripe and never reach us |
| Aggregate page-view statistics | When you visit | To understand which pages are used. Collected without cookies and not tied to your identity |
| Server logs (IP address, browser, time, page) | On every request | To keep the Service secure and working. Kept for a short period |
Legal basis
Where data-protection law requires a legal basis, we rely on performing our contract with you (running your account and subscription), our legitimate interest in operating a secure and reliable service (logs and aggregate statistics), and legal obligation (keeping payment records).
Who we share it with
Only with the service providers the Service runs on, each for its own purpose:
- Google — if you choose to sign in with Google.
- Stripe — to take payments and manage subscriptions.
- Resend — to send account emails such as sign-in links and password resets.
- Our hosting provider — which stores the database and runs the servers.
We may disclose data where the law requires it. We do not sell personal data or share it for advertising.
International transfers
Some of these providers process data in the United States and other countries. Where the law requires it, transfers rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Account data is kept until you delete your account. Payment records are kept for as long as tax and accounting law requires. Records of administrative actions taken on an account are kept for security and audit purposes with your identity detached.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to complain to your data-protection authority.
You can delete your account and all its data yourself from your account settings. For anything else, write to optimusdigitalservices@gmail.com. We will answer within one month.
Security
Passwords are hashed, connections are encrypted, and session cookies cannot be read by scripts. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
Children
The Service is not directed at children, and we do not knowingly collect data from anyone under 16.
Changes
We will update this policy when what we collect or who we share it with changes. The date at the top shows the latest version.