Privacy policy

1. Data controller

InvestPortfolioBuilder, tax ID Draft pending legal review. Contact: gozbusiness@outlook.es.

2. What data we collect

Simulator answers (age, horizon, risk answers) and the resulting model allocation, stored without your name, email or account.

Assistant messages you write, sent to the AI provider to produce an answer. We do not store the conversation.

A one-way hash of your IP address and a daily counter, used only to apply the daily message limit.

Preferences saved in your browser: language and cookie choice.

If you accept analytics or advertising cookies: data collected by those providers as described in the cookie policy.

3. Purposes

Run the simulator and show results; answer assistant questions; prevent abuse through usage limits; improve the service with aggregated statistics; show advertising, only if you consent.

4. Legal basis

Providing the service you request (Art. 6.1.b GDPR); legitimate interest in security and abuse prevention (Art. 6.1.f); your consent for analytics and advertising (Art. 6.1.a), which you can withdraw at any time.

5. Providers involved

Hosting and database: Lovable (Lovable Cloud).

Artificial intelligence: Groq, Inc. (receives the text of assistant questions and the market figures needed to answer).

Market data: Twelve Data (receives no personal data).

Analytics: Cloudflare Web Analytics (Cloudflare, Inc.), only with consent. It does not use cookies and shows aggregated statistics.

Advertising: Google (AdSense), only with consent.

Some providers may process data outside the EEA under Standard Contractual Clauses or equivalent safeguards.

6. Retention

Saved simulations (no identifiable data): 12 months; afterwards they are deleted or anonymously aggregated.

Chat usage counters (technical identifier): 30 days.

Contact messages and privacy requests: as long as needed to handle them, then up to 12 months.

Cookie preferences: 12 months.

Server technical logs: as set by the hosting provider.

Analytics: aggregated data, according to Cloudflare's policy.

7. Your rights

You can request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to gozbusiness@outlook.es. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).