Skip to content
rejo
Request access
☰
How it worksProductIndustriesInsightsSecuritySign in
Privacy

Privacy notice

This notice explains how personal data is processed on investrejo.com and app.investrejo.com under the EU General Data Protection Regulation (GDPR).

1. Controller

Rejo, Inhaber Dogukan Gundogan, Thomas-Dehler-Straße 21, 81737 München, Germany. E-mail: privacy@investrejo.com.

2. Visiting this website

When you open a page, our server processes your IP address, the requested page, time, referrer and browser type to deliver the page and keep it secure (Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website). Server logs are deleted after 14 days. We count page views with a cookie-free method on our own server: only the page path and referring site are recorded, without identifiers. This website sets no cookies and uses no third-party tracking.

3. Requesting access

If you request access, we process your name, work email, firm, role and (optionally) assets under management to review your request and contact you (Art. 6(1)(b) GDPR, steps prior to a contract). If your request is declined or not pursued, we delete the data after 12 months.

4. Using the app

For approved users we process account data (name, email, firm, role), sign-in events, the settings you choose (coverage, watchlists) and positions you enter in Book X-ray, to provide the service (Art. 6(1)(b) GDPR). Positions are visible only to your account. We keep account data while your account is active and delete it within 30 days of closure, except where we must retain it by law.

5. Processors

  • Hosting: Microsoft Azure (Microsoft Ireland Operations Ltd.), server located in Sweden (EU).
  • Email delivery: Resend (Plus Five Five, Inc.), used to send sign-in links and service emails. Transfers to the US are based on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
  • AI processing: research content (public documents about listed companies) is processed with a third-party language-model provider. Your positions and account data are not sent to it.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). To exercise them, email privacy@investrejo.com. You also have the right to lodge a complaint with a supervisory authority, for example the authority of your federal state.

7. Security

All connections are encrypted with TLS. See our security page for details.

Last updated: 23 October 2026.