Your financial data deserves clear boundaries.

1. Who we are

Biteyield is an independent personal project operated by Ricardo Filipe Santos Silva, based in Portugal. For the purposes of applicable data-protection law, Ricardo Filipe Santos Silva is the controller of personal data processed through biteyield.com and app.biteyield.com.

Privacy enquiries and data-rights requests can be sent to [email protected].

2. Data we collect

We may collect account details such as name, email and authentication status; portfolio data you upload or enter manually; broker, transaction, holding, dividend and valuation information; technical data such as device, browser, IP address and security logs; and messages you send through contact or support channels. If you choose to complete the optional onboarding questionnaire, we also store your selected goals, investing experience, product categories, broker platforms, approximate amount ranges, knowledge and hypothetical risk-behaviour answers, optional short descriptions entered under “Other”, and resulting module suggestions. We do not ask for exact account balances in that questionnaire.

3. How we use data

We use data to create and secure your account, provide portfolio analytics, process uploaded broker files, calculate performance and exposure, refresh market data, respond to support requests, improve reliability and comply with legal obligations. Optional questionnaire answers are used to suggest Biteyield modules and to produce aggregate onboarding statistics for the administrator; they are not sent as analytics-event properties, used to select investments for you, or used for automated decisions with legal or similarly significant effects. You can decline the questionnaire, review your suggestions, revise your answers, or erase them in Profile & settings.

4. Legal bases

Depending on the context, we process data to perform the service contract, comply with legal obligations, protect legitimate interests such as security and product reliability, or based on your consent where required.

5. Data sharing and subprocessors

We use a limited set of named providers to operate Biteyield. We do not sell your personal portfolio data. We may disclose data if required by law or to protect the platform and users.

Yahoo Finance, Finnhub and Nasdaq are external market-information sources. Biteyield sends instrument identifiers or public-market queries to those services; it does not intentionally send your account identity or uploaded broker files to them.

6. Security

Biteyield is designed with authenticated access, user-specific data separation and restricted administrative access. No online service can be guaranteed to be perfectly secure, but we use reasonable technical and organisational safeguards.

7. Retention

Account, profile and portfolio data are retained while your account is active. Optional questionnaire answers and module suggestions are retained until you erase them in Profile & settings or delete your account. After a self-service deletion request, live account data is scheduled for deletion within 30 days and encrypted backup copies age out within 90 days. Security and access logs are retained for up to 90 days. Rejected or abandoned access requests are retained for up to 90 days. Records of privacy choices and rights requests are retained for up to 24 months so that we can demonstrate and honour those choices. A longer period applies only where law, fraud prevention, dispute resolution or an active security investigation requires it.

8. Your rights and account controls

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request portability or withdraw consent. Authenticated users can request a machine-readable data export and account deletion from Profile & settings. You can also contact [email protected]. You may have the right to complain to the Portuguese data protection authority or another competent authority.

9. International transfers

Some providers may process data in other countries. Where required, we rely on appropriate safeguards such as contractual protections.

10. Cookies and website analytics

Biteyield uses a necessary preference cookie shared across biteyield.com and app.biteyield.com to remember your privacy choice. Google Analytics and Microsoft Clarity remain blocked unless you approve Analytics in the cookie panel. You can withdraw consent at any time through Cookie preferences; doing so sends denied consent signals and removes Biteyield's first-party analytics cookies.

If approved, Google Analytics may use cookies such as _ga to measure page use on the public website and authenticated application. Biteyield configures advertising storage and personalisation as denied and does not send uploaded broker files or portfolio contents to Google Analytics. Microsoft Clarity runs only on the public website and may use cookies such as _clck and _clsk to collect technical and interaction data such as device and browser information, page views, clicks, scrolling and masked session recordings.

Learn more in the Google Privacy Policy and Microsoft Privacy Statement.

11. Security reporting

Security concerns can be reported to [email protected]. Reporting guidance is available on the Security page and in security.txt.

12. Changes

We may update this policy as the product evolves. Material changes will be reflected on this page and, where appropriate, communicated to users.