Privacy Policy

Controller

The data controller is SOLTYS Louis, individual entrepreneur (EI), 70 chemin du bois, 62440, Harnes, FRANCE, contactable at contact@kardive.com. If a data protection officer or dedicated privacy contact is appointed, use: contact@kardive.com. Complete this section before launch.

Data collected

Kardive can process account information, username, email, password hash for email accounts, email verification status, social sign-in identifiers, subscription status, billing identifiers, user settings, saved scenarios, watchlist items, alerts, portfolio entries, exports, support messages, security logs and technical usage data.

• Account and authentication data
• Product data created by the user
• Billing status via Stripe
• Security and usage logs

Purposes

Personal data is processed to create and secure accounts, provide the application, calculate and save ROI workflows, enforce plan limits, send transactional emails, manage subscriptions, provide support, detect abuse, improve reliability and comply with legal obligations.

Legal bases

Depending on the processing, Kardive relies on contract performance, legitimate interest, legal obligation and consent. Consent is used where required, for example for optional marketing communications or non-essential tracking cookies if they are enabled in the future.

• Contract: account and paid features
• Legitimate interest: security and service improvement
• Consent: marketing and optional cookies
• Legal obligation: billing and compliance records

Recipients and processors

Data can be shared with service providers strictly needed to operate Kardive, such as hosting, database, email delivery, authentication, Stripe billing, monitoring and support tools. Card market providers are used for card and price data and should not receive unnecessary personal account data.

International transfers

Some providers may process data outside the European Economic Area. Where applicable, Kardive should rely on an adequacy decision, standard contractual clauses or another valid transfer mechanism. Complete this section with the final provider list before launch.

Retention

Account data is kept while the account exists. Billing and accounting records can be retained for the legal period required. Security logs are kept for a limited period appropriate to fraud and abuse prevention. Deleted account data is removed or anonymized unless retention is required by law or legitimate dispute prevention.

User rights

Users may request access, rectification, deletion, restriction, objection and portability where applicable. Users may withdraw consent for marketing or optional cookies. Users in France may also lodge a complaint with CNIL. Requests can be sent to [privacy email].

Security

Kardive uses access controls, authentication protections, ownership checks, subscription guards, rate limits and operational safeguards to protect accounts. No system is perfectly secure, so users should use strong passwords and protect their email account.

Marketing emails

Newsletter and promotional emails are optional. Users must actively opt in during account creation or later in settings; the choice is not enabled by default, including for social sign-in. Users can disable newsletter emails at any time from settings or through the unsubscribe link included in newsletter emails. Transactional emails needed for account, security, billing or alert delivery may still be sent when required to provide the service.