Privacy policy

Who is responsible

The data controller is the publisher of motivtoi.finance (see the legal notice). Contact: club@motivtoi.io.

What we record

Your account: your Google account identifier, email address, display name and profile picture link, as provided by Google sign-in; the date your account was created and your last sign-in.

Your access: your role, your access status (pending, active, suspended) and, if granted, the reason and end date of a free access.

Your application: the investment thesis you upload (PDF, 10 MB at most, with its original file name), its reading status, our comment and the dates of upload and reply.

Your settings: portfolio currency, display preferences, the starting level of the reference index.

Your portfolio: positions, purchases and sales you enter (asset, date, number of shares, price, amount paid, exchange rate of the date, realised gain), your watchlist, the nightly valuation of your portfolio and your history of performance against the index.

Technical records: the time of your recent requests to our server, used over a one-hour window to limit abuse. If a technical error affects your account during the nightly calculation, its report contains your account identifier (never your email address) and the technical reason. Google, our hosting provider, processes connection data such as your IP address to deliver the service and keep it secure.

Administration log: each action taken by the administrator on an account (access granted or suspended, thesis reading, deletion, settings) is recorded with its date, its author and the account concerned.

Former members of the previous Motiv'toi app: the data exported from that app (email address, name, currency, preferences, positions, watchlist, performance history; never a PIN) is kept on our server so that it can be attached to your new account (see « How long we keep it »).

What we do not record

No password (sign-in is through Google only), no bank card or bank account details, no PIN. No advertising cookies and no audience measurement tools.

Why we use it

To provide the service you asked for: your account, your access, the reading of your thesis, the valuation of your portfolio and your performance history (performance of a contract).

To secure the service and keep a record of administration actions (legitimate interest).

We do not sell your data and we do not use it for advertising. Apart from the providers listed below, we do not share it with anyone.

Who can see it

You, through the app.

The administrator: the app shows the administrator the account information listed under « Your account », « Your access » and « Your application », and global counters. The app does not show portfolio contents to the administrator. As the operator of the service, the administrator has technical access to stored data and uses it only for maintenance, security, or at your request.

Our hosting provider, Google (Firebase, Google Cloud), processes the data on our behalf. Our market data provider receives, from our server, only asset symbols and the search terms typed in the app's search; never your identity or your account data.

Where it is stored

The database, the thesis files and the daily backups are stored on Google Cloud servers in the European Union (Belgium, region europe-west1). Your sign-in account (Google identifier, email address, name, profile picture link) is managed by Firebase Authentication, a Google service that processes it in the United States, under Google's data processing terms (Google takes part in the EU-U.S. Data Privacy Framework). Data is encrypted in transit (HTTPS) and at rest by Google.

On your device: the app keeps your sign-in session and a copy of your data in your browser storage, so that it opens quickly and can show your latest data without a connection. This copy is erased when you log out from the app.

How long we keep it

Your account, settings, portfolio and history: until you delete your account. The purchases and sales of a position: until you delete that position or your account.

Your thesis: until you delete your account. A thesis that is deleted or replaced may remain restorable for up to 30 days, then disappears.

Request times: one hour. Nightly calculation reports: 30 days. Our server logs at Google: 30 days.

Administration log: 3 years, including after the deletion of the account concerned (proof of the actions taken).

Data from the previous app: erased 30 days after it is attached to your account; if it is never attached, at the end of the beta.

Daily backups of the database: 30 days.

Deleting your account

You can delete your account at any time from Profile → Delete my account. Your sign-in account, settings, portfolio and history are erased from the database immediately, and your thesis file is deleted.

Your thesis and the backups that contain your data are permanently erased within 30 days.

What remains, until the end of its retention period (see above): the administration log entries that concern your account, including the record of its deletion; data from the previous app attached to your account, until its erasure 30 days after attachment; nightly calculation reports that mention your account identifier.

Your rights

You can access your data and download a copy at any time (Profile → Export my data), correct it, have it erased, object to or restrict its use, and ask for it in a portable format.

To exercise these rights, write to club@motivtoi.io. You can also lodge a complaint with your data protection authority (in France, the CNIL, www.cnil.fr).

Changes

This policy may change, in particular when paid subscriptions open. The version date above shows the latest update; we will inform you of any significant change before it applies.