LEGAL

Privacy Policy

Last updated: 15 May 2026

Your privacy matters. This policy explains what personal data ValuJack collects, why we collect it, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Swedish data-protection law.

1. Data Controller

The data controller for personal data collected through ValuJack is:

• DAFAB 57134, Sweden — sole proprietorship
• Contact: contact@valujack.com

2. What Personal Data We Collect

ValuJack is designed to collect as little personal data as possible. Depending on how you use the service, we may collect:

Category	Examples	When
Contact details	Name, email, message content	When you use the contact form
Account & subscription	Email, subscription status, billing identifiers	When you start a Pro trial or subscription
Payment data	Card last 4 digits, payment status (no full card data stored by us)	When you pay for Pro
Technical data	IP address, browser type, device type, pages visited, referring URL	Automatically, when you visit the site
Usage data	Cards viewed, interactions, session duration	When you use the app (if analytics enabled)

We do not collect: financial account numbers, government identifiers, health data, location-tracking data, or special categories of personal data within the meaning of GDPR Article 9.

3. Why We Collect This Data (Legal Basis)

Under GDPR, we must have a lawful basis for processing your data. We rely on:

• Performance of a contract (Art. 6(1)(b)) — to provide and bill the Pro subscription
• Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the service, and to communicate with you about your enquiries
• Consent (Art. 6(1)(a)) — for any non-essential cookies, analytics, or marketing communications, where applicable
• Legal obligation (Art. 6(1)(c)) — to comply with tax, accounting, and anti-fraud rules

4. Third-Party Services (Data Processors)

We use the following third-party services to operate ValuJack. Each processes data on our behalf or as an independent controller. Where transfers leave the EU/EEA, we rely on the relevant Standard Contractual Clauses or adequacy decisions.

Service	Purpose	Data shared
Vercel	Web hosting	Technical/access logs, IP address
Formspree	Contact form delivery	Name, email, message you submit
Yahoo Finance	Live market data display	No personal data shared
[PAYMENT_PROVIDER]	Payment processing for Pro subscriptions	Email, billing details, payment method (handled directly by provider; ValuJack does not store full card data)
Google Analytics 4	Usage analytics (only after cookie consent)	Anonymised IP address, pages visited, interactions (e.g. card flips, button clicks). No personally identifiable information.

5. How Long We Keep Your Data

• Contact form submissions: kept for as long as necessary to respond, then archived for up to 24 months
• Subscription records: kept for the duration of your subscription plus 7 years for accounting/tax obligations (Swedish Bokföringslagen)
• Technical/access logs: typically 30–90 days, then deleted or anonymised
• Marketing data: only as long as you remain subscribed; you may unsubscribe at any time

6. Cookies & Similar Technologies

ValuJack uses two categories of technologies:

• Essential storage — limited use of localStorage to remember your cookie preference and basic app state. No tracking, no third parties. Always active.
• Analytics cookies (Google Analytics 4) — used only after you accept them via the cookie banner that appears on first visit. These help us understand which features are used, how the app performs, and where to improve. IP addresses are anonymised. You can decline at any time, and no analytics cookies will be set.

If you previously accepted analytics cookies and wish to withdraw consent, clear your browser's site data for valujack.com — the banner will reappear on your next visit, where you can decline.

7. Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights with respect to your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion in certain cases
• Right to restrict processing — in certain cases, pause our use of your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time
• Right to lodge a complaint — with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or your local supervisory authority

To exercise any of these rights, email us at contact@valujack.com. We will respond within 30 days (extendable to 90 days for complex requests).

8. International Data Transfers

Some of the third-party services listed above are based outside the EU/EEA (notably in the United States). Where personal data is transferred outside the EU/EEA, we ensure adequate protection through:

• European Commission adequacy decisions (where applicable)
• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU–US Data Privacy Framework, for transfers to certified US recipients

9. Security

We implement reasonable technical and organisational measures to protect personal data, including HTTPS encryption in transit, restricted access to administrative systems, and reliance on reputable third-party processors with appropriate security certifications. However, no system is perfectly secure, and we cannot guarantee absolute security.

10. Children's Privacy

ValuJack is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top. Where required by law, we will notify you of significant changes by email or in-app notice.

12. Contact

For privacy-related queries, including requests to exercise your GDPR rights: contact@valujack.com

Supervisory authority in Sweden: Integritetsskyddsmyndigheten (IMY) — imy.se