Privacy policy
Summary
- This website uses no cookies, analytics or tracking.
- Your notes, recordings and transcripts belong to you and your team. We never sell them, never use them for advertising and never use them to train AI models.
- Audio recordings are deleted three months after they are made. Transcripts are kept until you delete them.
- You can mark any note or recording private, so only you can see it.
- You can ask us at any time to see, correct, export or delete your data.
Who we are
Investor Diary is a note-taking and research memory app for investment teams. It is a personal, non-commercial project, built and run by Todor Ristov in Amsterdam, the Netherlands. In this policy “we” and “us” means him. There is no company behind it, nothing is sold, and there are no paid plans.
Under the GDPR, he is responsible (the “controller”) for the personal data described here.
For questions about privacy, write to hello@investordiary.nl.
This website
investordiary.nl does not use cookies, analytics, advertising or tracking scripts. Fonts are served from our own site, so no third party learns that you visited.
The site is delivered and protected by Cloudflare. To do that, Cloudflare processes technical data such as your IP address, browser type and the pages you request, and may keep this in security logs for a short period. We rely on our legitimate interest in running a secure, working website (GDPR article 6(1)(f)).
When you email us
If you email hello@investordiary.nl, we receive your name, email address, and anything you choose to tell us. We use this only to reply and to keep a record of our conversation.
Legal basis: taking the steps you asked for (article 6(1)(b)), and our legitimate interest in answering questions (article 6(1)(f)). Emails sent to hello@investordiary.nl are forwarded by Cloudflare to a Google mailbox. We keep this correspondence for up to 24 months after our last contact, unless you ask us to delete it sooner.
The Investor Diary app
What we process
- Account data: your name, email address, team and sign-in details.
- Your content: notes, meeting preparation, comments, to-dos, attachments, company profiles and the beliefs you teach the app, and the tickers and people linked to them.
- Recordings and transcripts: audio you record or upload, and the transcripts, speaker labels, summaries and insights made from it. These can contain the voices, names and statements of other people in the meeting.
- Questions you ask: text and voice questions in chat or talk mode, and the answers.
- Technical data: device and browser type, IP address, and logs of errors and sign-ins, used to keep the service working and secure.
Why we process it
- To provide the app you asked to use: storing and organising notes, transcribing recordings, answering questions and sharing with your team (article 6(1)(b)).
- To keep the app secure, fix problems and prevent misuse (article 6(1)(f)).
Who in your team sees what
Notes and recordings you share are visible to the members of your team. A note or recording marked private is visible only to you. We do not look at your content, except when you ask us to help with a problem or when the law requires it.
Recordings
- Audio is deleted automatically three months after it is recorded. You can download it before then. The transcript stays.
- You can mark a recording private, so only you can see it and its transcript.
- You are responsible for telling the people you record, and for getting their consent where the law or your company's policies require it. Many organisations, and some countries, require all participants to agree before a meeting is recorded.
- If someone you recorded asks to have their data removed, you can delete or edit the transcript, or contact us and we will help.
AI processing
Investor Diary uses AI to transcribe recordings, separate and name speakers, classify and summarise notes, collect to-dos, and answer your questions from your own and your team's notes.
- This processing runs on our own server in the Netherlands. Your notes, recordings and questions are not sent to outside AI services such as OpenAI, Anthropic or Google.
- Your content is never used to train AI models, ours or anyone else's.
- To show the latest company news, the app searches the web through Google and Tavily. Only the search query, such as a company name or ticker, is sent to them. Your notes are not.
- Answers are generated automatically and can be wrong. Check the linked sources before relying on them. No decisions with legal or similarly significant effects are made about you automatically.
How long we keep data
| Data | How long |
|---|---|
| Audio recordings | 3 months after recording, then deleted |
| Notes, transcripts, summaries, to-dos | Until you or your organisation delete them, or the account ends |
| Account data | As long as the account exists |
| Everything above after the account ends | Deleted within 30 days |
| Technical and security logs | Up to 90 days |
| Emails sent to us | Up to 24 months after our last contact |
There are no backups yet. Daily backups, stored on our own equipment in the Netherlands, will be added later; this policy will then say how long they are kept.
Transfers outside the EU
App content is stored in the Netherlands. Some providers, such as Cloudflare, Google and Tavily, are based in the United States. Where data goes outside the European Economic Area, we rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Security
Data is encrypted on its way between your device and our server. The app is protected by sign-in, team permissions and private notes, and the server is reachable only through Cloudflare. If a data breach affects you, we will tell you and the Dutch Data Protection Authority where the law requires it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data;
- correct data that is wrong;
- delete your data;
- limit how we use it, or object to processing based on our legitimate interest;
- give you your data in a machine-readable format so you can move it elsewhere.
Email hello@investordiary.nl. We reply within one month. If a request concerns notes shared in a team, we may need to involve the team member who wrote them.
You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Investor Diary is meant for investment professionals and is not intended for anyone under 18.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use data you have already given us, we will tell users by email before it takes effect.