Privacy Policy (GPT Invest)

GPT Invest (“we”, “our”, “us”) operates the GPT Invest website and related services (the “Service”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and your rights under the GDPR and other applicable laws.

1) Who we are (Data Controller)

For the purposes of data protection laws (including the GDPR), GPT Invest is the data controller of the personal data described in this Policy.

Contact: support@gptinvest.ai

2) What data we collect

We keep data collection intentionally minimal. We collect only:

A) Email address (subscription only)

Email address — only if you subscribe to receive updates/digests/newsletters. We do not collect names, phone numbers, addresses, payment data, identity verification data, or financial account information.

B) Analytics data (Google Analytics)

We use Google Analytics to understand site usage. Google Analytics typically collects technical and usage data such as:

• IP address (or a derived/approximate location),
• device and browser information,
• pages viewed, time on site, referring pages, clicks and interactions,
• cookies and online identifiers used for analytics measurement.

This data is generally used in aggregated form to measure traffic and improve the Service.

3) How we use your data

Email address

We use your email address to: send the content you subscribed to (e.g., updates/digests); manage subscription preferences; comply with legal obligations (e.g., proving consent where required).

Google Analytics data

We use analytics data to: understand how visitors use the site (traffic, popular pages, basic performance); improve content, UX, and reliability; detect technical issues and abnormal traffic patterns.

We do not sell your personal data and do not use it for third-party advertising.

4) Legal bases for processing (GDPR)

We process personal data under the following legal bases:

• Consent — for sending email subscriptions/marketing communications and (where required) for analytics cookies/Google Analytics.
• Legitimate interests — for basic service improvement and security (only where allowed, and balanced against your rights).

Where we rely on consent, you can withdraw it at any time (see Section 8).

5) Cookies and similar technologies

We do not use cookies for personalization or advertising.

However, Google Analytics may set cookies (or similar identifiers) to measure usage and produce analytics reports. Depending on your jurisdiction, we may ask for consent via a cookie banner before enabling analytics. You can also: block or delete cookies via your browser settings; use Google’s opt-out mechanisms for Analytics (e.g., the Google Analytics opt-out browser add-on, where available).

6) Sharing and recipients

We share data only with service providers that help us run the Service, including: Google Analytics (Google) — analytics measurement. We do not share personal data with advertisers. Service providers may act as processors (handling data on our instructions) or as independent controllers depending on the product and configuration.

7) International data transfers

Google may process analytics data on servers outside your country (including outside the EEA/UK, such as the United States). Where required, transfers are protected by appropriate safeguards (for example, Standard Contractual Clauses or other lawful transfer mechanisms).

8) Data retention

We retain data only as long as needed:

Email address: kept while you remain subscribed, and removed or suppressed after you unsubscribe or request deletion, unless we must retain minimal records to comply with law (e.g., to document opt-out).

Google Analytics data: retained according to our Google Analytics retention settings and business needs (analytics platforms often allow configurable retention periods).

9) Your rights (GDPR)

If you are in the EEA/UK (and in many other jurisdictions), you may have the right to:

• access your personal data,
• correct inaccurate data,
• request deletion (“right to be forgotten”),
• restrict or object to certain processing,
• withdraw consent at any time (where processing is based on consent),
• data portability (where applicable),
• lodge a complaint with your local data protection authority.

To exercise your rights, contact: support@gptinvest.ai

10) Security

We use reasonable technical and organizational measures to protect data, such as HTTPS encryption and access controls. No method of transmission or storage is 100% secure, but we work to reduce risk.

11) Children

The Service is not intended for individuals under 18. We do not knowingly collect data from minors.

12) Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date will reflect the effective date. If changes are material, we may provide additional notice (e.g., on the website).

13) Contact

For questions or privacy requests: support@gptinvest.ai