Privacy
Your data, and what we do with it.
This page explains exactly what information we collect, why, for how long, and how you can have it all deleted. Last updated: 29 July 2026.
The key points in four points
- An analysis without a log leaves no trace. The values you enter are stored in your session for the duration of your visit, after which they are deleted. Nothing is stored in our databases.
- We never hold onto your payments. If you request email updates, we will retain the percentage breakdown — not the value of your portfolio.
- No connection to your bank. Baziloo does not link to any bank or brokerage accounts, nor does it hold any such login details.
- We do not sell or rent out your data. To no one, ever.
1. Who is responsible for your data?
The data controller is [Company name], [legal form], registered under number [SIRET/RCS], with its registered office at [full address], publisher of the baziloo.co website.
If you have any questions regarding your data: contact form or [contact email].
2. What we collect, and for how long
| Location | Data | Why | Legal basis | Conservation |
|---|---|---|---|---|
| Analysis without an account | The values and amounts you enter | Produce your report | Your enquiry | None — session-only; deleted when the session closes |
| Report received by email optional |
Your email address, the breakdown of your assets as a percentage, the date and the exact wording of your consent, a truncated hash of your IP address | Send you the report, followed by updates on its progress | Your consent | Breakdown: 90 days followed by automatic deletion. Address: deleted at the same time, unless you have separately agreed to be contacted again (3 years (since the last contact) |
| Account | Email address, password (encrypted, never visible), IP address at the time of registration and last login, country or region inferred from this IP address, title, surname and first name if you provide them | Set up and secure your access | Performance of the contract | As long as your account is in use. After 18 months If you haven’t logged in, we’ll notify you, and the account will be deleted at 24 months |
| Your portfolios | The values, quantities and amounts you record, along with their history | Analyse and monitor the portfolios you enter | Performance of the contract | As long as your account is in use. After 18 months If you haven’t logged in, we’ll notify you, and the account will be deleted at 24 months |
| SMS alerts optional |
Your telephone number and delivery history | To let you know about a change, and to avoid writing to you twice about the same thing | Your consent | Until you turn off the alerts or delete your account |
| Subscription and payment | Selected offer, dates, status. No bank details does not pass through Baziloo | Manage your access and our accounts | Contract and legal obligation | 10 years for accounting records |
| Contact message | The message you have sent us, and your email address | To reply to you | Legitimate interest | Three years since the last exchange |
We also track the number of requests per visitor, in order to prevent abuse of our free tools. This count is based on a truncated cryptographic fingerprint the IP address: it cannot be used to trace the address, and is never stored in plain text.
3. The free analysis, in detail
When you use theanalysis without taking into account, the values you enter are sent to our server to be calculated, then stored in your session for the duration of your visit — this is what enables us to display the report and explain it. They are not stored in any database and are deleted when you close your browser.
If you request to receive this report by email, a confirmation message will be sent to you. Without your confirmation click, nothing will be saved : the request will be deleted within seven days.
4. Email follow-up: a detailed guide
If you tick the relevant box, we will retain the breakdown of your assets by percentage so that we can recalculate it and let you know what has changed. We do not need your investment amounts or the value of your portfolio: all our calculations are based on relative weights. We therefore do not ask for this information, nor do we store it.
This monitoring lasts 60 days. The allocation is then automatically removed after 90 days, without you having to do anything. Each email contains a link to stop tracking and a link to delete your data immediately; both can be done with a single click and without logging in.
The box labelled ‘Receive news from Baziloo’ is separate and optional : You can receive your report without agreeing to be contacted again.
5. Who has access to your data
No one, apart from us and the technical service providers strictly necessary for the operation of the service:
| Service provider | Role | What he receives |
|---|---|---|
| Hostinger | Website and database hosting | All hosted data |
| Cloudflare | Website protection and distribution | Your IP addresses and technical enquiries |
| Brevo | Sending emails and text messages | Your email address or telephone number, and the content of the message |
| Anthropic | Drafting of explanations by AI | The figures in your portfolio, without your name or address |
| EODHD | Share prices and financial data | No personal data — just value codes |
| DeepL | Translation of news headlines | No personal data |
| NOWPayments | Collection of payments | Payment details, which Baziloo never sees |
Transfers outside the European Union. Some of these service providers, notably Anthropic and Cloudflare, are based in the United States or process data there. These transfers are based on the safeguards provided for under the GDPR (standard contractual clauses or an adequacy decision).
Our fonts are loaded from Google Fonts, which transmits your IP address to Google, without us setting any tracking cookies.
6. Cookies
| Surname | Purpose | Duration | Type |
|---|---|---|---|
| PHPSESSID | Keeps you logged in and protects forms | Session | Essential |
| baziloo_consent | Saves your cookie preferences on your device | 12 months | Essential |
| bz_pub | Get your free daily analyses, no account required. A randomly generated number that does not identify you | 30 days | Essential |
Essential cookies do not require your consent, but we are required to inform you about them. Baziloo does not currently use no audience measurement or advertising cookies. If this were to change, the relevant box would be displayed, but it would never be ticked by default.
7. Your rights
You may request the following at any time: theaccess to your data, their correction, theirs deletion, the limitation their treatment, their portability in a readable format, and you oppose to processing based on our legitimate interests. Where the processing is based on your consent, you may withdraw at any time, without this calling into question what has been done previously.
To exercise these rights, please contact us via the contact form or to [contact email]. We’ll reply within a month. If you have an account, you can also update your details and alert preferences directly in your account.
If you are not satisfied with our response, you may submit a complaint to the CNIL, the French data protection authority.
8. Safety
The website is accessed exclusively via HTTPS. Passwords are stored in an irreversibly encrypted format: we cannot read them, and neither can anyone else. The configuration files and the database are not accessible via the web. Forms are protected against fraudulent submissions, and links contained in our emails use random tokens rather than your email address.
9. Amendments
This policy may change as the service evolves. The date of the last update is shown at the top of the page. Should there be any significant changes to how your data is used, we will inform you.
Baziloo provides general information only and does not constitute personalised investment advice. See also our terms and conditions.