Privacy Policy

The short version: DividendFlow works without any account. We do not sell your data. We do not share personal information with advertisers. The only data we collect is your email if you voluntarily subscribe, and anonymous usage analytics to improve the product.

1. Who We Are (Data Controller)

Dividend Flow OÜ (“we”, “us”, “our”) is a financial education platform accessible at dividendflow.org. We are registered in Estonia (EU) and operate as a Data Controller under GDPR. We provide free dividend calculators, stock screeners, and investment research tools for individual investors.

Contact: hello@dividendflow.org · 6 Sepapaja tn, Tallinn 11415, Estonia

2. Legal Basis for Processing (GDPR Article 13)

We process personal data only where we have a legal basis to do so:

3. Information We Collect

Information you provide voluntarily:

Email address — only if you use our email capture form (e.g., “Get your DRIP report” or “Subscribe to the Dividend Digest”). We store this securely in Upstash Redis. We use it to send the report or newsletter you requested. You can unsubscribe at any time via the link in every email or at dividendflow.org/unsubscribe.

Information collected automatically:

Usage analytics — with your consent where required, we collect anonymous page view data via Google Analytics: which pages were visited, approximate country, and device type. We do not collect your name, IP address in identifiable form, or financial account details.

Server logs — our hosting provider Vercel (Vercel Inc., San Francisco CA) logs standard HTTP request data including IP addresses for security and abuse prevention. These logs are retained per Vercel's standard policy and are not accessible to DividendFlow for advertising purposes.

4. Sensitive Financial Data (2026 US State Law Updates)

Under the 2026 privacy laws of Rhode Island, Kentucky, and Indiana — and the GLBA (Gramm-Leach-Bliley Act) updates effective 2026 — financial interests and investment behavior may qualify as sensitive data.

DividendFlow does not collect or store your brokerage accounts, portfolio holdings, or transaction data. Calculator inputs (investment amount, chosen tickers) are processed locally in your browser and are never sent to our servers. The “saved calculator” feature (optional share link) stores only the calculation parameters you explicitly choose to share, with no connection to your identity.

5. What We Do Not Collect

We explicitly do not collect: brokerage account credentials or portfolio holdings, social security or tax identification numbers, credit card or payment information, trading history or transaction data, precise GPS location, biometric data, or any government-issued identification. We do not sell, rent, or trade personal data to any third party for marketing purposes.

6. Cookies and Tracking

We use cookies only where necessary or with your consent. Analytics cookies (Google Analytics) are blocked until you explicitly accept them via the cookie banner. Essential cookies (session state) are strictly necessary for site functionality and do not require consent.

Managing cookies: You can change or withdraw your consent at any time using our Cookie Preference Center. You can also opt out of Google Analytics using the Google Analytics Opt-out Add-on.

For full details on every cookie we use, see our Cookie Policy.

7. How We Use Your Information

Email addresses are used solely to send the content you requested (DRIP report, newsletter) and to improve email deliverability. We do not use emails for advertising targeting, we do not sell email lists, and we do not share emails with third parties except our email delivery provider Resend (resend.com) which processes emails on our behalf under a data processing agreement. Anonymous analytics data is used to understand which tools are most helpful and to prioritize product improvements.

8. Third-Party Services

We use the following services. Each has its own privacy policy:

9. Your Rights (GDPR, CCPA/CPRA, and 2026 US State Laws)

EU/EEA/UK residents have rights under GDPR: access, rectification, erasure, restriction, portability, and the right to object. California, Colorado, Connecticut, Virginia, Indiana, Kentucky, Rhode Island residents have rights under applicable state laws including the right to opt out of sale/sharing of personal data.

Do Not Sell or Share My Personal Information (US): You can opt out via our Do Not Sell/Share form. We also automatically honor the Global Privacy Control (GPC) browser signal.

To exercise any right, email hello@dividendflow.org. We respond within 30 days (GDPR) / 45 days (CCPA and US state laws). In the event of a data breach, we notify affected users within 72 hours per GDPR requirements.

10. Data Security

All data is transmitted over HTTPS/TLS. Email addresses in Upstash Redis are protected by token-based authentication accessible only from our server. We do not store payment information. Server-side rate limiting prevents bulk extraction.

11. Changes to This Policy

We may update this Privacy Policy when we add new features or when applicable law changes. Material changes will be communicated to subscribers via email before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.