Scope and accountability
This policy applies to Dividend Yield’s public website, authenticated portfolio tools, and related support. Dividend Yield is responsible for personal information under its control and limits collection, use, disclosure, and retention to purposes a reasonable person would consider appropriate.
Questions, requests, or complaints can be sent to the Privacy Contact at privacy@dividendyield.net.
Information we collect
Account information
We store the information needed to create and manage an account, such as name, email address, password hash, role, and account status. If you use Google sign-in, we may receive your name, email address, profile image, and Google account identifier. We do not receive your Google password.
Portfolio information
We store information you choose to enter or import, including portfolios, accounts, securities, quantities, prices, cost information, transactions, dividends, cash balances, currencies, and CSV import details.
Access and device information
When you successfully sign in, we record the IP address, an internal keyed hash of the IP address, approximate country, region and city supplied by our hosting provider, browser and operating system details, device type, user agent, and sign-in time.
Analytics and support
Google Analytics 4 may collect identifiers and information about your device, browser, approximate location, pages, and interactions. If you contact us, we collect the information contained in your request and the records needed to respond.
How we use information
- Provide, secure, and maintain your account and portfolio dashboard.
- Calculate dividend income, projections, performance, and CAD or USD totals.
- Process brokerage CSV files that you choose to import.
- Authenticate users, detect misuse, investigate security events, and keep audit records.
- Diagnose errors, answer support requests, analyze aggregate usage, and improve the service.
- Review account access, subscription status, and payment failures through restricted administrative tools.
- Meet legal, regulatory, accounting, and fraud-prevention obligations.
Cookies and similar technologies
Authentication cookies keep you signed in and protect account sessions. Analytics technologies help us understand use of the site. Browser or device controls may let you limit cookies, but blocking essential cookies can prevent sign-in and other account features from working.
Service providers and disclosures
We do not sell personal information. We use service providers for hosting, database storage, authentication, analytics, and payment support. These currently include Vercel, Supabase, Google, and, where payment features apply, Stripe. They process information under their own terms and may use facilities outside Canada.
We may also disclose information when required by law, to enforce our terms, to protect users or the service, or in connection with a business reorganization where lawful safeguards apply.
Safeguards
We use administrative and technical measures intended to protect personal information, including authenticated access, role checks, restricted administrative tools, audit records, encrypted transport, database access controls, and password hashing. No online system can guarantee absolute security.
Retention
We retain account and portfolio information while an account is active and for as long as reasonably needed for the purposes described above. Security logs, audit records, support records, and payment records may be kept longer where needed for fraud prevention, dispute resolution, legal compliance, and system integrity. Information is deleted or de-identified when it is no longer reasonably required, subject to backups and legal obligations.
Your choices and rights
You may ask whether we hold personal information about you and request access to, correction of, or deletion of that information, subject to lawful exceptions. We may need to verify your identity before acting. You may revoke Dividend Yield’s Google access through your Google Account, although that does not automatically delete information already stored by Dividend Yield.
You may withdraw consent to optional processing, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent to processing needed to operate an account may require the account to be closed.
Children
The service is not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian who believes a child has provided information should contact us.
Changes and questions
We may update this policy as the service and legal requirements change. Material changes will be identified by the date above and, where appropriate, additional notice. Contact privacy@dividendyield.net with a privacy question or complaint.