Privacy Policy
How we handle your personal data, and your rights.
Last updated: 14 October 2026.
1. Who is responsible for your data?
The data controller under Regulation (EU) 2016/679 ("GDPR") is the operator of AfricanDividends.com ("we"). You can reach us through the contact page.
2. Data we process
- Account: email address, encrypted password (if you set one), language, sign-up date, plan.
- Use of the service: the companies on your watchlist, your newsletter and alert choices.
- Newsletter: email address, date and source of your consent.
- Messages: the content of your message and the email address you give in the contact form.
- Payment: if you subscribe to Premium, payment is handled by Stripe; we receive the subscription status, not your card number.
- Technical data: IP address and server logs processed by our hosting providers to keep the site secure and running.
3. Why we process it, and on what legal basis
- To run your account and watchlist and provide the service: performance of a contract (Art. 6(1)(b) GDPR).
- To send the newsletter and the monthly alert: your consent (Art. 6(1)(a)), which you can withdraw at any time. To send ex-date alerts about the companies you follow: performance of the service you asked for (Art. 6(1)(b)); you can switch them off at any time in My account.
- To answer your messages, secure the site and prevent abuse: legitimate interests (Art. 6(1)(f)).
- Invoicing and accounting and tax obligations: legal obligation (Art. 6(1)(c)).
4. Recipients and processors
We do not sell your data. We use providers that process data on our behalf: hosting and delivery of the site (Netlify), database and authentication (Supabase), email delivery, and payments (Stripe). Some may process data outside the European Economic Area; in that case transfers rely on appropriate safeguards (an adequacy decision or the European Commission's standard contractual clauses).
5. Cookies and local storage
We use no advertising cookies and no third-party analytics. The site stores in your browser only what it needs: your sign-in session and a few preferences (for example, dismissing a banner). Fonts are loaded from Google Fonts, which sends your IP address to Google.
6. How long we keep it
We keep your account data while your account is open and delete it within a reasonable time after you close it, unless the law requires us to keep it (for example accounting records). Contact messages are kept as long as needed to deal with them, and no longer than 3 years.
7. Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time (withdrawal does not affect earlier processing). You can switch off the newsletter and alerts on your account page, or write to us through the contact page. You can also lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority of your country of residence.
8. Children
The service is intended for people aged 16 and over.
9. Security
Connections are encrypted (HTTPS) and access to data is restricted by security rules at database level. No system is perfectly secure, so we encourage you to use a unique password or the magic-link sign-in.
10. Changes
We may update this policy. The date of the last update is at the top of the page; for important changes we will tell you.