Legal
Privacy Policy
Effective date: 1 April 2026
1. Who We Are
Qapital Research ("we", "us", "our") operates the research platform at app.qapital.co. We are based in the Netherlands and are the data controller for all personal data processed in connection with the Platform.
Questions about this policy or your personal data can be directed to research@qapital.nl.
2. Data We Collect
We collect the following categories of personal data:
Account data
Name (optional) and email address, provided when you register or subscribe.
Subscription and billing data
Subscription tier, billing cycle, and payment status. Payment card details are processed exclusively by Mollie B.V. and are never stored by us.
Usage data
Pages visited, features used, and session metadata collected via Google Analytics (anonymised IP). This helps us understand how the Platform is used and improve it.
Communications
Any messages you send to us via email, including support requests.
3. Legal Basis for Processing
We process your personal data on the following legal bases under the GDPR:
- Contract performance -- processing your account and subscription data to provide the service you have subscribed to.
- Legitimate interests -- analytics data used to improve the Platform, provided this does not override your rights.
- Legal obligation -- retaining billing records as required by Dutch tax law (7 years).
4. How We Use Your Data
Your personal data is used to:
- Create and manage your account
- Process subscription payments and manage access levels
- Send transactional emails (subscription confirmation, payment receipts)
- Respond to support or research enquiries
- Improve the Platform using aggregated, anonymised usage data
We do not use your data for advertising, profiling for marketing purposes, or any automated decision-making that has a legal or similarly significant effect on you.
5. Third Parties
We share personal data with the following third-party processors, strictly for the purposes described:
| Processor | Purpose | Location |
|---|---|---|
| Mollie B.V. | Payment processing and subscription billing | Netherlands (EU) |
| Google Analytics | Anonymised usage analytics | EU (data residency) |
| Substack Inc. | Newsletter delivery (separate subscription) | United States |
| Hetzner Online GmbH | Platform hosting and infrastructure | Germany (EU) |
We do not sell your personal data to any third party, ever.
6. Data Retention
Account data is retained for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law.
Billing records are retained for 7 years in accordance with Dutch tax regulations (Article 52 AWR). Analytics data is retained for 14 months in Google Analytics before automatic deletion.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access -- request a copy of the personal data we hold about you.
- Rectification -- request correction of inaccurate data.
- Erasure -- request deletion of your data, subject to legal retention requirements.
- Portability -- request your data in a structured, machine-readable format.
- Restriction -- request that we restrict processing of your data in certain circumstances.
- Objection -- object to processing based on legitimate interests.
To exercise any of these rights, email us at research@qapital.nl. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. For material changes, we will notify registered users by email.