Privacy Notice

Who we are

Rafael Rocha Pardal, an individual based in Portugal, operates Learn to Invest and is the data controller for the personal data described here, meaning we decide how and why it is processed.

Data we collect and why

• Learning plan answers (your goals, experience level and questions) — to generate and deliver your plan (contract performance) and, in aggregated form, to understand which goals are most common and improve the Service (legitimate interests).
• Your generated plan and saved edits — stored so you can return to your plan via its private link or your customer account (contract performance).
• Technical and usage data (IP address, device and browser information, pages visited) — to run, secure and improve the Service and prevent fraud (legitimate interests).
• Customer account data (email, account identifier and sign-in verification information) — to create your account, verify your email and let you access plans purchased with that email (contract performance), and protect account access (legitimate interests). Customers sign in using a secure email link or code; no customer profile name, avatar or preferences are required.
• Purchase access records (the checkout email received from Paddle, transaction identifier, payment status and whether a purchase is a test or live payment) — to match paid plans to the correct customer account and deliver the purchase (contract performance), and prevent unauthorised access (legitimate interests). We do not receive or store full payment-card details.
• Administrator account data (email, account identifier and login credentials) — to authenticate the site owner and restrict access to private statistics (legitimate interests in securely operating the Service).
• Support messages — to answer your questions (legitimate interests).

Please don't include sensitive personal information in your answers.

Who we share data with

• Paddle, our Merchant of Record, for the sale of the product, payments, tax compliance and invoicing. Paddle collects payment details directly under its own privacy policy.
• Service providers who host the site and database and provide the AI model used to generate plans, acting on our instructions.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

International transfers

Some providers may process data outside the EEA. Where this happens, we rely on safeguards such as European Commission adequacy decisions or Standard Contractual Clauses.

How long we keep data

We keep plan answers and plans for up to 24 months after purchase so you can access your plan, and technical logs for a shorter period. Afterwards, data is deleted or anonymised. Aggregated statistics contain no directly identifying information.

Account and purchase-access data are retained while needed to provide access to your saved plans, handle support and protect the Service. When no longer needed, they are deleted or anonymised, except where applicable legal obligations require retention. You may request deletion using the contact process below.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing, and withdraw consent where processing is based on consent. You may complain to the Portuguese supervisory authority, the CNPD (cnpd.pt), or your local authority. We respond to requests within one month.

Security

We use appropriate technical and organisational measures, including encrypted connections, access controls and restricting data access to what is necessary.

Cookies

Account access uses essential browser storage to keep customers and administrators signed in and remember the saved-plan link on a device. Paddle's checkout may set its own essential cookies to process payments. The site also records usage data as described above. You can sign out and clear cookies and site storage in your browser settings; doing so may require you to sign in again.

Contact

To exercise your rights or ask about privacy, contact Rafael Rocha Pardal using the contact details on your receipt.