1. WHO IS RESPONSIBLE
DelveDigi Ventures s.r.o., Slovakia, is the controller of personal data for the website and community processing described here.
Registered office: Komárov 34, 086 11 Komárov, Slovakia
Privacy and support contact: contact@moneyreacher.com
We have not appointed a data protection officer. Please send any privacy question to the contact address above.
An independent Merchant of Record may separately control personal data for selling, collecting payments, tax, fraud prevention and statutory records. Its identity, role and privacy information will be provided before checkout. Our own responsibilities remain with us.
2. INFORMATION WE PROCESS
Account and access information: email address, authentication identifiers, an optional password (stored only as a salted one-way hash, never in readable form and never included in data exports), account settings, plan access, short-lived checkout/session state and security records. After confirmed payment, a secure return can sign a new buyer in to the newly created account without establishing that the email address is verified. Existing-account verification, ordinary login and recovery use one-time email codes where needed; members who set a password can also sign in with it. Signed-in purchases stay bound to the authenticated account. Support staff do not need your code or password.
Purchase-notice and eligibility records: the notice text/version, Terms version, selected plan and time recorded with your order. The same Terms-agreement notice applies to both plans. It records Terms acceptance, not a separate age assertion or verified proof of age; eligibility rules are stated in the Terms. We do not routinely ask for your age range, birth date or identity documents, or collect a separate parental-permission declaration. We may receive age-related information through your own disclosures or reports to support/moderation and use only what is necessary to assess and apply our eligibility rules. Such reports are reviewed rather than automatically treated as proof.
Saved work: shortlisted ideas, collections, comparisons, Fit Finder answers/results and Cost & Profit Planner inputs and outputs. The assessment matches supported preferences to catalogue information; do not put sensitive personal information into free-text fields unnecessarily.
Community information: your chosen profile details, posts, replies, linked ideas, uploaded images, contact requests, accepted private messages, project briefs, checklist items, room memberships, moderation reports and relevant actions. Optional profile information is optional, and contact details are private by default unless you choose to share them.
Purchase-related information: the chosen plan, checkout email, secure purchase reference, required purchase confirmations, provider order/customer identifiers, payment status, dates, discounts, entitlement history and refund or dispute information supplied by the seller. Full payment-card details are handled through the selected payment provider rather than stored by this website.
Support and privacy correspondence: your messages, contact details and information needed to investigate or respond. Do not send unnecessary sensitive documents or full financial credentials.
Technical information: IP address, browser/device information, timestamps, security and error logs, relevant usage events and, if you arrived through a creator's link, that link's referral code. The cookies and similar technologies we use are listed in section 8.
We receive data from you, your interactions with the service, other members where they message or report you, and the selected service/payment providers where needed for their functions. We do not buy unrelated personal profiles for the Fit Finder.
3. WHY WE USE IT AND THE LEGAL BASIS
Providing your account, catalogue access, saved work, requested assessment, calculator and collaboration functions: processing objectively necessary to perform a valid service contract or take steps you request before entering one. Without required account or authentication information, we cannot provide the affected functionality.
Protecting accounts, preventing misuse, investigating errors, handling community reports and maintaining service reliability: our legitimate interests in a secure and functioning service, balanced against your rights. Where a legal obligation requires an action, that obligation is the basis for the required portion.
Handling support, complaints and legal claims: performance of the contract where connected to the service, legitimate interests in resolving disputes, and legal obligations where applicable.
Maintaining required transaction and legal records: the applicable legal obligations, with only the information and retention necessary for them.
We do not use optional cookies or tracking technologies. Optional marketing messages require the applicable permission and include an easy way to stop them. Accepting Terms, paying or receiving necessary account emails does not automatically opt you into marketing. We do not send marketing emails, newsletters or promotional onboarding emails to members known to be under 18. Necessary service, security and transaction messages remain distinct. Essential account, purchase and legal-record processing uses the non-consent bases described above, only to the extent those bases apply.
Service announcements and security notices necessary for the account are distinct from optional marketing. You may control optional notifications in account settings.
4. WHO CAN SEE INFORMATION
Your shortlist, assessment answers/results and financial plans are private by default. Other members do not receive them merely because they share a community wall with you. If you export and share material, you control that separate disclosure.
Community posts and profiles are shown to the member audience indicated by the service. Private messages and invitation-only project spaces are available to authorized participants. A participant may copy something they can access, so consider what you share. Losing Premium does not make your saved work public.
Authorized operators may access information for support, security, lawful requests and moderation where necessary. Access to private material is restricted and audited. The owner initially handles moderation.
We use contracted providers for hosting, databases/authentication/storage/live delivery, transactional email and support email, subject to appropriate role allocation and safeguards. Our providers are:
- Google Cloud EMEA Limited (Ireland), for Google Cloud: website hosting, database, file storage, scheduled tasks, secure storage of our technical keys and technical request logs. Privacy information: https://cloud.google.com/terms/cloud-privacy-notice
- Google Cloud EMEA Limited (Ireland), for Google Workspace: our mailbox, which sends service emails (such as sign-in codes, confirmations and reminders) and receives support email. Privacy information: https://policies.google.com/privacy
Google acts as our processor under its Cloud Data Processing Addendum (https://cloud.google.com/terms/data-processing-addendum). We disclose information to professional advisers or competent authorities when necessary and lawful.
When affiliate tracking is active, limited referral and transaction information may be processed by the selected Merchant of Record or its authorized affiliate service. Affiliates see only their authorized campaign information; they do not receive your private conversations, assessment answers or financial plans. Our website passes a creator's referral code to the seller at checkout only from the link you arrived through during the same visit; the code is not stored on your device. The exact provider, data and any consent requirements must be disclosed before this processing starts.
No private user content is used for an AI chatbot or paid AI-generation feature under the current product design.
5. INTERNATIONAL PROCESSING
Our company is established in Slovakia. The location of customers does not mean every provider stores all information in that same country. Our website, its database and its file storage run in Google Cloud's region in Belgium (europe-west1, inside the European Union). Technical request logs and our Google Workspace mailbox may be stored in Google data centres inside or outside the European Economic Area. Google may also access information from outside the EEA, for example from the United States, to operate, secure and support its services. Those transfers are covered by the European Commission's standard contractual clauses included in Google's Cloud Data Processing Addendum and, for Google LLC in the United States, by the EU–US Data Privacy Framework.
Where information leaves the European Economic Area, we use an applicable adequacy decision or other lawful safeguards, such as properly implemented standard contractual clauses where appropriate. A US provider name alone is not proof that a particular transfer is covered by an adequacy mechanism. You may contact us for information about the safeguards relevant to your data.
6. HOW LONG WE KEEP INFORMATION
Uncompleted checkout records are kept only for the limited period needed to complete or recover the requested purchase and address abuse, then deleted or minimized under the published retention schedule. They are not a waitlist or marketing list.
We retain account and entitlement information while needed to provide the service, including non-expiring Basic access. The end of Premium alone does not trigger deletion of Basic records or shared project work.
If we learn that an account holder is under 13, we stop account access and further nonessential processing, close the account and promptly delete their personal data. Only specific records that the law requires us to retain remain, with restricted access and for the required period. This exception takes precedence over normal account/saved-work retention. We apply deletion to our service and relevant processors and prevent deleted information from being restored to active use through backups.
Saved Premium assessments/plans remain private under the disclosed retention arrangements for possible reactivation. Shared room content is handled with regard to teammates' continued access and valid deletion/anonymization requests. Privacy rights remain available even when Premium tools are locked.
Support, moderation and security information is retained only for the time needed for the relevant purpose and legitimate dispute/security needs. Legally required financial records are kept for the period imposed on the relevant controller. Backups are protected and expire under their configured cycle.
How long we keep each kind of information:
- Account, access and saved work (shortlists, collections, assessments and plans): while your account exists. When you delete your account, your profile and saved work are deleted straight away.
- Purchase, subscription and Terms-acceptance records: kept with restricted access after an account is deleted, for as long as we need them to meet legal obligations and to establish, exercise or defend legal claims.
- Checkouts that were never paid: deleted 30 days after they were started.
- Community posts and replies: until you delete them or your account; the text is then replaced with "[deleted]". Content removed by a moderator is hidden and kept with restricted access while it is needed to handle challenges, reports and legal obligations.
- Private messages and project-room messages: kept while the conversation or room exists, so the other participants keep their shared work. When you delete your account, your messages are no longer shown under your name.
- Support messages, withdrawal notices, reports and moderation decisions: while needed to handle the matter, and afterwards for as long as legal claims about it can be made.
- One-time sign-in codes: valid for 10 minutes and deleted after one day. Sign-in sessions: up to 30 days or until you sign out, deleted one day after they end.
- Abuse-prevention records (coded, never stored as plain email or IP addresses): 2 days.
- Live community update copies: up to about one hour.
- Visitor statistics: about 13 months.
- Technical request logs at our hosting provider, which include IP addresses: 30 days.
- Copies of service emails in our sending mailbox: deleted at least every 12 months.
- Database backups: made daily and kept for 7 days, then replaced automatically. Information deleted from the service can remain in these backups until they expire; backups are used only to recover from a failure, and deleted information is not restored to active use.
7. YOUR CHOICES AND RIGHTS
Depending on the applicable law and circumstances, you can request access, correction, deletion, restriction, a portable copy or object to processing. You can withdraw consent for future consent-based processing without invalidating prior lawful processing. We may need proportionate information to confirm identity and explain any lawful reason why a request cannot be fulfilled in full.
Contact contact@moneyreacher.com for privacy requests. GDPR requests are ordinarily answered within one month; any permitted extension will be explained within that period. Using these rights does not require an active Premium subscription. We do not charge merely because someone requests their data, except where the law specifically permits a charge.
You may complain to the Personal Data Protection Office of the Slovak Republic or another competent supervisory authority. The Slovak authority's current contact information is available at https://dataprotection.gov.sk/en/contact/.
The Idea Fit Finder ranks catalogue ideas from your answers and supported catalogue information. You may change your answers and ignore the results. It does not make an automated decision with legal or similarly significant effects on you. If a future feature changes that position, its assessment and notice must be updated before use.
We do not sell personal information and do not share it for targeted (cross-context behavioural) advertising. If you live in a US state with its own privacy law, you can use the rights described in this section by contacting contact@moneyreacher.com.
8. COOKIES AND SIMILAR TECHNOLOGIES
Strictly necessary technologies support requested functions such as signing in, securing an account, completing checkout and remembering ideas you chose to compare. They are limited to what those functions need.
Visitor statistics: we count visits with our own cookie-free statistics, run on our own servers with no third-party analytics provider. Nothing is stored on or read from your device. For each page view we record the page, the referring website or campaign tag (for example TikTok), the device type (phone, tablet or computer) and, where our hosting provider supplies it, the country. We do not store IP addresses. To count a visitor once per day, your IP address and browser details are combined with a random value that is kept only in server memory and replaced every day, producing a code that cannot identify you or link your visits across days. Visits by signed-in staff are not counted. The legal basis is our legitimate interest in understanding and improving the website (Art. 6(1)(f) GDPR). The records are kept for about 13 months and then deleted. If your browser sends a Global Privacy Control or Do Not Track signal, no statistics are collected.
We do not use optional cookies or similar technologies (no analytics, advertising or tracking cookies), so we do not show a cookie banner. If you arrive through a creator's link, its referral code is kept only in the open page while you browse and is passed to the seller when you start checkout; it is not stored on your device. The seller's checkout pages are operated by the seller, which is responsible for the cookies used there and for any related notices. If we ever add optional technologies, they will stay off until you agree.
Marketing permission, acceptance of contract terms and any legally valid request for immediate service are separate choices. We record the relevant version and choice where required.
9. SECURITY AND CHANGES
We use appropriate access controls and operational safeguards, but do not promise that any online system is perfectly secure. Report a suspected account or privacy problem to support. We assess incidents and provide legally required notifications.
We will update this notice when actual practices change and provide additional notice or obtain permission where required. A policy update does not retrospectively authorize new uses of information. The current effective date and material changes will be clear.