Privacy Policy

1. About Us

DataDrivenInvestor (“DDI”, “we”, “us”, or “our”) is operated by Data Driven Investor Pte Ltd, a company incorporated in Singapore (UEN: 201841646E), with its registered office at 101 Telok Ayer Street #03-04, Singapore 068574.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit datadriveninvestor.comand any related subdomains or applications (collectively, the “Platform”).

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: name, username, profile photo
• Contact data: email address
• Profile data: bio, social media links, areas of expertise, country
• Usage data: pages visited, articles read, time spent, referral source
• Technical data: IP address, browser type, device type, operating system
• Communications data: messages sent via our contact form or support email
• Financial data: if you transact on the Platform, payment-related data is processed by our third-party payment providers (Stripe). We do not store raw card data.

3. How We Use Your Data

We use your personal data for the following purposes:

• To operate and maintain the Platform
• To create and manage your account
• To send you newsletters, platform updates, and editorial content you have subscribed to
• To process contributor applications and manage writer accounts
• To process payments and manage DDIN credit transactions
• To improve our services through analytics
• To comply with legal obligations applicable in Singapore and other jurisdictions

4. Legal Basis for Processing

Where applicable under the Singapore Personal Data Protection Act 2012 (PDPA) and other relevant laws, we process your personal data on the basis of:

• Your consent (e.g. newsletter subscription, account creation)
• Performance of a contract (e.g. writer agreements, payment processing)
• Legitimate interests (e.g. platform security, fraud prevention, analytics)
• Legal obligation (e.g. record-keeping requirements)

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Supabase (database), Clerk (authentication), Vercel (hosting), Resend (email delivery), Stripe (payments), Cloudflare (CDN and security) — each bound by appropriate data processing agreements
• Legal authorities: where required by Singapore law or a valid legal process

6. Google API Data Usage

Our application allows authorized users to connect their Google account to synchronize application data with Google Sheets and Google Drive. Access to Google data is granted only after the user explicitly authorizes the application through Google’s OAuth consent process.

Google user data we access:

• Google account email address for account identification and authorization.
• Google Sheets data and spreadsheet metadata for spreadsheets selected or created by the user.
• Google Drive file and folder metadata necessary to access, create, update, and synchronize files within folders selected or connected by the user.

How we use Google user data:

• To create, read, update, and synchronize spreadsheet data between our application and Google Sheets.
• To allow users to export and synchronize application files with a specific Google Drive folder selected by the user.
• To keep application files and Google Drive files synchronized according to user-configured settings.
• To maintain synchronization settings and provide Google integration features requested by the user.

Google user data sharing:

• We do not sell Google user data.
• Google user data is not shared with third parties except with service providers required to operate our platform or when required by applicable law.

Data storage and protection:

• OAuth access and refresh tokens are encrypted and stored securely.
• Access to Google user data is restricted to authorized application services and personnel with a legitimate operational need.
• We implement reasonable technical and organizational safeguards to protect user data from unauthorized access, disclosure, alteration, or destruction.

Data retention and deletion:

• Google-related data is retained only as long as necessary to provide the requested integration features.
• Users may disconnect their Google account at any time, which prevents future access to Google data by the application.
• Users may request deletion of stored Google-related data by contacting support@datadriveninvestor.com.
• Upon request, we will delete stored Google-related data unless retention is required by law.

Limited Use disclosure:

Our application’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. Account data is retained for the duration of your account. Newsletter subscriber data is retained until you unsubscribe. You may request deletion at any time (see Section 9).

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand Platform usage in aggregate. You can control cookie preferences through your browser settings. We do not serve advertising cookies or sell data to advertisers.

9. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time (where processing is based on consent)
• Opt out of marketing communications at any time via the unsubscribe link in any email

To exercise these rights, contact us at support@datadriveninvestor.com.

10. International Transfers

Our infrastructure providers may process data outside Singapore. We take reasonable steps to ensure that any cross-border transfers comply with the PDPA and that adequate protections are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

For privacy-related enquiries, please contact Data Driven Investor Pte Ltd at: