Privacy policy
Last updated: July 2026
This covers both the public site you are reading and the tracker itself. Short version: the site collects nothing unless you allow analytics, and everything you put into the tracker stays scoped to your own account.
1. Who processes your data
MM Software Solutions is the data controller, registered at 2500 Lier, Belgium, enterprise number BE 1001.062.863. Questions about your data go to mohamed@mmsoftwaresolutions.be.
2. What this website collects
Nothing by default. There is no contact form, no login and no tracking pixel on the public pages. If you accept analytics in the cookie banner, Google Analytics records which pages you view, your approximate location at country level and the kind of device you use, with IP anonymisation on. Decline and no analytics script is loaded at all.
3. What the tracker collects
An email address and a password to create your account. The password is hashed by our authentication provider and is never visible to us. Everything else is what you type in: your platforms, your income and growth assets, principals, target yields, currencies, dates, expected and actual payouts, repayments and asset events. We do not connect to banks or investment platforms, so nothing arrives on its own.
4. Why we may process it
Account data and the records you enter are processed to provide the service you asked for, so the legal basis is performance of a contract. Analytics runs on your consent, which you can withdraw at any time. Server and security logs rest on our legitimate interest in keeping the service running and abuse-free.
5. Cookies and local storage
The public site stores one entry in your browser's local storage: your cookie choice, so the banner does not ask again. The tracker sets strictly necessary session cookies to keep you signed in; without them you would be logged out on every page. Analytics cookies are only ever set after you accept them. Change your choice at any time through the “Cookie settings” link at the bottom of every page.
6. Who else is involved
Supabase provides the database and authentication, and processes your data on our instructions. Our hosting provider keeps short-lived technical logs. Google Analytics runs only with your consent. Exchange rates come from the European Central Bank through the Frankfurter API, requested by our own server without any of your data attached. We do not sell data, we do not run advertising, and there are no shared portfolios — one account sees one account's rows, enforced at the database level.
7. How long we keep it
Your records stay for as long as your account exists. Deleting the account removes every row attached to it: platforms, assets, payouts, repayments and events all cascade. Self-service deletion is not built yet, so email us and we will action it. Technical logs rotate automatically.
8. Your rights
You can ask for access, correction, deletion, restriction or a portable copy of your data, object to processing, and withdraw consent. Write to mohamed@mmsoftwaresolutions.be. If you are not happy with how we handle it, you can complain to the Belgian Data Protection Authority at gegevensbeschermingsautoriteit.be.
9. Changes
This policy may be updated. The current version is always the one on this page, with the date above.