Privacy policy

Last updated: 9 July 2026

In short: Koersa collects only what it needs to run - your email, a hashed password, and the trades you enter or import. We never sell your data, show no ads, and set no tracking cookies. You can export everything or delete your account, portfolio history included, at any time.

1. Data controller

Koersa is operated by Adrien Hecq, based in Belgium and acting as an individual. As the data controller, he decides how and why your personal data is processed.

For any question about your data: privacy@koersa.be.

2. What data we process

Koersa only collects what the service needs to work:

  • Your account email address, used to sign in and for service-related communication.
  • Your password, stored only in hashed form. It is never stored or transmitted in clear text.
  • The name of your workspace or organisation.
  • Portfolio transactions you record manually or import from exchange CSV files: asset, buy or sell, quantity, price, fee, date, source exchange and the exchange's transaction id.
  • Your language preference, kept in your session.
  • A waitlist email address, only if you ask to be notified when paid features become available.
  • Password-reset tokens, stored hashed and expiring after 1 hour.
  • Technical server logs, including IP addresses, kept short-term for security purposes.

3. Purposes and legal bases

  • Providing the service, including the tax computations: performance of the contract (article 6.1.b GDPR).
  • Security and abuse prevention: legitimate interest (article 6.1.f GDPR).
  • Waitlist emails: consent (article 6.1.a GDPR), which you can withdraw at any time.

Koersa shows no advertising, does not sell your data and uses no tracking or analytics cookies. If analytics is ever added, it will be a cookieless solution hosted in the European Union.

4. Processors and recipients

We work with a small number of providers:

  • Hosting: Hetzner Online GmbH (Germany, EU).
  • Transactional email: Brevo (France, EU).
  • Payments: Stripe, once payments go live. Your card data goes directly to Stripe and never touches Koersa's servers.

Market-data lookups (CoinGecko, European Central Bank) happen server-side: those services receive no personal data about you.

5. Transfers outside the EU and automated decisions

No transfer of personal data outside the European Union is intended. Koersa does not profile you and takes no automated decisions about you.

6. Retention

Your account and portfolio data is kept for as long as your account exists. Deleting your account permanently erases everything, including the portfolio history. You can download a full JSON export of your data at any time through the "Data export" feature in the app.

7. Your rights

You have the rights of access, rectification, erasure, portability, restriction of processing and objection. To exercise them, write to privacy@koersa.be.

If you believe your rights are not being respected, you can lodge a complaint with the Belgian Data Protection Authority: www.gegevensbeschermingsautoriteit.be / www.autoriteprotectiondonnees.be.

8. Contact

Questions about this policy or your data: privacy@koersa.be. For anything else: contact@koersa.be.