Privacy policy
Last updated: August 2026 · Applies to bullbenchmark.com and the BullBenchmark application
BullBenchmark exists to show you what your investments are doing. That requires handling data about your portfolio, and we hold ourselves to a simple standard: we collect the minimum, we sell nothing, and you can leave with everything or delete everything at any moment. This page explains the details in plain language, as the GDPR requires and as we would want it explained to us.
Who is responsible
BullBenchmark ("we") is the controller for the personal data described here. You can reach us at privacy@bullbenchmark.com for any question or request on this page.
What we collect, and why
Account data. Your email address, sign-in method (email link or Google), account dates and subscription status. We need these to operate your account and to bill you if you subscribe. Legal basis: performance of our contract with you.
Portfolio data. The transaction files you upload and the positions, dividends and results we compute from them. This is the product; without it there is nothing to show you. We process it only to render your own dashboard. Legal basis: performance of contract. We never sell, share or advertise against your portfolio data, and no other user can see it.
Technical data. Server logs with IP addresses (kept briefly, for security and abuse prevention) and, on the marketing site only, anonymized analytics. When you create an account we store a salted hash of your IP address for a short period to prevent bulk account creation. Legal basis: our legitimate interest in keeping the service safe. The hash cannot be reversed to your address.
Payment data. Payments run entirely through Stripe. We never see or store your card number. We receive only your subscription status and invoices reference.
Where your data lives
Your data is stored in a managed PostgreSQL database hosted within the European Union, encrypted in transit (TLS) and at rest. Uploaded files are parsed and discarded; what we keep is the structured transaction history, not the raw file. Our processors are Railway (hosting), Vercel (website), Cloudflare (network), Stripe (payments), Resend (email delivery) and Google (sign-in, if you choose it). Each processes data only on our instructions under a data processing agreement.
How long we keep things
Your portfolio data: for as long as you have an account. Server logs: up to 30 days. If you delete your account, everything is erased immediately and permanently, with one narrow exception: we keep an anonymous, irreversible hash of your email address for 12 months, together with the date your free trial started. This exists solely to prevent the free trial from being reused through delete-and-rejoin, it contains no readable personal data, and it disappears automatically after a year.
Your rights
You can exercise every GDPR right directly in the product: access and portability through the one-click export under Account settings, erasure through the Delete my account button, and objection to marketing through the email preferences toggle (transactional messages such as sign-in links continue, everything else stops). For rectification or anything else, email privacy@bullbenchmark.com and we respond within 30 days. You also have the right to complain to your supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
What we do not do
We do not sell personal data. We do not build advertising profiles. We do not use your portfolio for anything other than showing it to you. We do not ask for, receive or store broker passwords; the product is deliberately built so that we cannot access your brokerage account under any circumstances.
Changes
If we change this policy in any meaningful way, we announce it by email (if you have opted in) and on this page before it takes effect.