Privacy Policy

1. About Us

DataDrivenInvestor (“DDI”, “we”, “us”, or “our”) is operated by Data Driven Investor Pte Ltd, a company incorporated in Singapore (UEN: 201841646E), with its registered office at 101 Telok Ayer Street #03-04, Singapore 068574.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit datadriveninvestor.comand any related subdomains or applications (collectively, the “Platform”).

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: name, username, profile photo
• Contact data: email address
• Profile data: bio, social media links, areas of expertise, country
• Usage data: pages visited, articles read, time spent, referral source
• Technical data: IP address, browser type, device type, operating system
• Communications data: messages sent via our contact form or support email
• Financial data: if you transact on the Platform, payment-related data is processed by our third-party payment providers (Stripe). We do not store raw card data.

3. How We Use Your Data

We use your personal data for the following purposes:

• To operate and maintain the Platform
• To create and manage your account
• To send you newsletters, platform updates, and editorial content you have subscribed to
• To process contributor applications and manage writer accounts
• To process payments and manage DDIN credit transactions
• To improve our services through analytics
• To comply with legal obligations applicable in Singapore and other jurisdictions

4. Legal Basis for Processing

Where applicable under the Singapore Personal Data Protection Act 2012 (PDPA) and other relevant laws, we process your personal data on the basis of:

• Your consent (e.g. newsletter subscription, account creation)
• Performance of a contract (e.g. writer agreements, payment processing)
• Legitimate interests (e.g. platform security, fraud prevention, analytics)
• Legal obligation (e.g. record-keeping requirements)

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Supabase (database), Clerk (authentication), Vercel (hosting), Resend (email delivery), Stripe (payments), Cloudflare (CDN and security) — each bound by appropriate data processing agreements
• Legal authorities: where required by Singapore law or a valid legal process

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. Account data is retained for the duration of your account. Newsletter subscriber data is retained until you unsubscribe. You may request deletion at any time (see Section 8).

7. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand Platform usage in aggregate. You can control cookie preferences through your browser settings. We do not serve advertising cookies or sell data to advertisers.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time (where processing is based on consent)
• Opt out of marketing communications at any time via the unsubscribe link in any email

To exercise these rights, contact us at support@datadriveninvestor.com.

9. International Transfers

Our infrastructure providers may process data outside Singapore. We take reasonable steps to ensure that any cross-border transfers comply with the PDPA and that adequate protections are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related enquiries, please contact Data Driven Investor Pte Ltd at: