Privacy and your financial information

How Equity.me stores your shared dossier, protects private notes and handles payment records. Equity.me is operated by Wayfaring B.V.

What the application collects and shares

Who is responsible for Equity.me

Equity.me is operated by Wayfaring B.V., Eenhoornstraat 5, 2271 GL Voorburg, Netherlands. Dutch Chamber of Commerce (KvK) registration: 89696441.

You can send a privacy request to help@equity.me or to Wayfaring B.V. at this postal address, marked “Equity.me privacy”. Include enough information to identify your account and request, but do not send passwords or unnecessary financial documents.

Calculator inputs and temporary drafts

The calculator runs within the page. Choosing to carry a scenario into an inventory stores the inputs in session storage for the current browser tab. You can import that draft for 30 minutes. Saving or discarding it removes the temporary copy; an expired draft is rejected and removed when opened.

Unless you choose the optional research submission, calculator inputs are not sent to the research database. After sign-in, creating the inventory sends the reviewed figures to the application as unconfirmed records. Financial amounts are not put in the page URL.

Shared records and private notes

Saved dossiers contain entries, estimates, proposals, confirmations, comments, costs, photos, supporting PDFs and shared activity history. Members can access their dossier’s shared records.

Private notes are stored separately and returned only to their author. They are excluded from the shared PDF and CSV. Invitation links are bound to an email address and expire after seven days.

Why we process personal information

We use account details, shared records and service messages to provide the dossier service you request under our contract with you. Our legitimate interests include protecting accounts, preventing payment abuse, resolving support issues and delivering an invitation requested by an existing participant.

Optional product-news emails require your consent. Optional research contributions also require a separate choice; refusing does not prevent you from using the tool. We retain accounting records to meet legal obligations. We do not use your financial records for advertising or mortgage leads.

Invitations and access reminders

When the dossier creator sends an invitation, we provide Resend with the recipient address, the inviter’s email address and an email-bound invitation link. The link expires after seven days. Only the intended recipient can accept it, and the creator can revoke it. Do not forward the link to someone else.

We send service reminders to participants with verified email sign-in as the paid access period approaches its end, around 30 days, seven days and one day beforehand. Each message goes to its recipient separately and contains the expiry date and a sign-in link, without financial figures, documents or private notes. The dossier creator can extend access; either partner can download the report while access is active.

These messages are separate from optional product news. We keep delivery status, provider message references and one-way hashes of recipient addresses and message content to prevent duplicate sends and investigate failures. These hashes are operational personal data, not anonymous research. Invitation delivery receipts are removed after 30 days; expiry receipts are removed with their dossier or when the participant leaves. We do not store email bodies or raw invitation links in these receipts.

Account and optional profile information

ChatGPT sign-in supplies a site-specific identifier, email address and display name. Email sign-in uses Supabase to verify email ownership through a one-time link or code. You can optionally set a password. Resend delivers sign-in, account confirmation and password-reset messages. Authentication cookies keep you signed in; they are separate from optional research. Passwords are sent to the authentication provider and are not stored in dossier records or research counts. Optional profile answers can include organisation, role, location, referral source, stage, priorities, timeframe, language, professional caseload, feedback, age range and gender. They are private to the account owner.

Product news consent is optional and off by default. It can be withdrawn on the account page. Account emails are transactional. Product-news consent is not required for registration, sign-in or password recovery.

Public website analytics

We use Simple Analytics to measure visits to our public pages. It provides website statistics without analytics cookies. We have not enabled custom events or form-input tracking. Calculator figures are not included in analytics events.

The analytics script is not installed on registration, sign-in, payment, account or dossier pages. This public-page measurement is separate from the optional research contributions described below.

Optional research contributions

Calculators offer a separate, optional research choice. When you contribute, the browser converts values into broad ranges before sending them. We store independent counts by currency, calculator type, metric and range, not raw amounts, a full scenario, an account identifier or a browsing history. Submitting is voluntary and is not required to use a calculator or buy a dossier.

Report statistics require both partners to approve the same dossier version. We group category totals, property values, mortgage balances, debts, paid costs, agreement counts and the proposed share. Names, item descriptions, comments, private notes, documents and exact figures are excluded. We keep approval and one-submission controls with the dossier; these controls are deleted with it. Test dossiers are excluded.

Grouped counts may be retained indefinitely and used to prepare future articles. They cannot be removed individually after submission. Before submission, a partner can withdraw their approval. This does not change deletion rights for the separate account and dossier records. Research summaries hide cells with fewer than 20 contributions. Contributions are self-selected, and calculator scenarios may be hypothetical or repeated; they do not represent all separating couples. Hosting providers still process ordinary request metadata to deliver and protect the site.

Payments through Stripe

At checkout, we send Stripe your checkout email and a purchase reference. Card details are entered on Stripe’s hosted checkout, not in the dossier. Equity.me stores payment references, purchase status, the terms version and access dates to grant access and handle support. Dossier values, private notes and attachments are not sent to Stripe.

Dossier deletion does not delete payment records. We retain the billing information needed for accounting, refunds and payment disputes. Basic accounting records for Wayfaring B.V. must generally be kept for at least seven years; some tax records or unresolved claims can require longer retention. This does not extend the storage period of your asset inventory or uploaded documents. Contact help@equity.me about a billing-data request.

Lead generation and service providers

The application has no advertising trackers, mortgage lead form or broker referral integration. It does not sell financial information or email addresses as leads. Hosting and authentication providers process information required to deliver the service.

Sites hosts the application using Cloudflare Workers, D1 for dossier records and R2 for uploaded files. Supabase provides email sign-in and account verification. Resend delivers sign-in emails, participant invitations and expiry reminders. Stripe processes payments. These services receive the information needed for their respective functions, not unrestricted access through your dossier membership.

Your dossier is deleted after its access period

A paid consumer dossier includes 12 months from the first payment. The creator can buy another 12 months for $39 before the expiry date shown in Dossier settings. An extension starts at the current expiry date. It is never charged automatically.

When access ends, the dossier is scheduled for deletion from the application. A daily cleanup removes its items, comments, proposals, confirmations, costs, private notes, invitations, activity history and uploaded files. An unresolved extension payment or storage failure can delay deletion while it is checked.

Payment references and account records are separate. Deleting a dossier does not delete your account, required billing records or anonymous research counts already contributed. Files you downloaded remain with you. Deletion from the application is separate from erasure of provider backups. The hosting limits described below also apply.

Exporting, leaving and deleting

The account page offers profile export and deletion. Before deleting account data, delete dossiers you own or leave those owned by someone else. Leaving removes your access and private notes; shared contributions can remain for the other participants, and partner confirmations are cleared for review.

A dossier’s creator can delete it and its uploaded files. Deletion cannot recall copies already exported by participants and does not establish the hosting provider’s backup retention period. For questions about these controls, use the Equity.me support.

Your privacy rights

Where the GDPR applies, you may request access to your personal data, correction or deletion, and, where applicable, restriction, portability or object to processing. These rights have conditions and exceptions. Optional product-news consent can be withdrawn in your account without affecting the lawfulness of earlier processing.

You may lodge a complaint with the Dutch Autoriteit Persoonsgegevens or another competent data protection authority. The account controls are not the only way to make a request; you can also write to Wayfaring B.V. at the address above.

Hosting backups and international processing

The Supabase authentication project is configured in Frankfurt and the Resend sending domain in Ireland. These settings do not establish that all hosting, support access or payment processing takes place in the EU. We have not yet verified the Sites hosting service’s exact backup-erasure timetable or completed the record of its international-transfer safeguards. We do not promise EU-only processing or immediate erasure of every provider backup.