Privacy Policy
Last updated 10 October 2026
DividendMapper ("we", "us") provides dividend portfolio tools for UK and US investors. This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR. We are the data controller. For any privacy question, email hello@dividendmapper.com.
What we collect
Account details. Your email address. We use it to sign you in (we use passwordless magic links and one-time codes, not passwords), to send you service emails such as receipts and account notices, and to send you product updates about new features and Pro. You can opt out of product updates when you sign up, from the link at the bottom of any of them, or by emailing us. Opting out never affects sign-in or account emails.
Portfolio data. The holdings, amounts, and account types you choose to enter. You decide what to add, and you can delete any of it at any time.
Subscription and payment data. If you upgrade to Pro, our payment processor handles your card details. We never see or store full card numbers. We keep a record of your subscription status and a Stripe customer reference.
Usage and diagnostics. Basic analytics about how the app is used, and error reports when something breaks, so we can fix problems and improve the product.
Advertising measurement, only if you allow it. If you reached us from a Reddit, Google or Meta ad and tick the box when you sign up, we tell that platform when you sign up or add your first holding. It receives a scrambled (SHA-256 hashed) copy of your email address and the ad's click id, never anything about your portfolio. This shows the platform which ads bring people who use DividendMapper, so we spend less on ads that do not. You can change your answer on the Account page at any time, and from then on we send nothing more.
Who processes your data
We use a small set of trusted providers, each acting on our instructions:
- Supabase for our database and authentication, which stores your account and portfolio data.
- Stripe for payment processing and subscription billing.
- Resend for email delivery, covering sign-in links, receipts, account notices, and product updates.
- PostHog for product analytics.
- Sentry for error monitoring.
- Vercel for application hosting.
- Funnel Copilot, our own measurement tool, which reads hashed account records to see which pages and campaigns lead to signups, and sends the advertising measurement above.
- Reddit, Google and Meta receive the hashed details described above, and only if you allowed advertising measurement or advertising pixels. Each may use them only to match them to its ads, under its advertising terms.
Some providers may process data outside the UK. Where they do, they rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent.
Why we can use your data
We rely on three legal bases. To provide the service you asked for (performing our contract with you): running your account, storing your portfolio, and billing Pro subscriptions. And our legitimate interests: keeping the app secure, fixing errors, understanding usage so we can improve it, and telling existing users about features and Pro. We send marketing email to existing customers under the soft opt-in in regulation 22 of the Privacy and Electronic Communications Regulations. You can refuse it when we collect your address, and in every email we send. Advertising measurement and advertising pixels rely on your consent, which you can withdraw at any time.
How long we keep it
We keep your account and portfolio data for as long as your account is open. When you delete your account, we delete your profile, holdings, and subscription records. Some limited records, such as payment records that Stripe must retain for tax and accounting, may be kept by our providers as required by law.
Your rights
Under UK GDPR you can ask us to access the data we hold about you, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can delete your account, and all the data tied to it, yourself from the Account page at any time. To exercise any other right, email hello@dividendmapper.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Cookies and analytics
We use essential cookies to keep you signed in and to remember your cookie choice. Analytics (PostHog) measures which pages and features are used, on this site only. It is on unless you switch it off, which you can do from Cookie settings at the bottom of every page. Advertising pixels (currently Reddit's) load only if you allow them in Cookie settings; they tell the ad platform when someone who came from its ad signs up. We do not sell your data.
Changes
We may update this policy as the product changes. The "last updated" date above always shows the current version.