REIT Filings
Data

Privacy

Last updated Sep 26, 2026

REIT Filings is run by Cove Innovations, s.r.o., a company registered in Slovakia. We decide what happens to your personal data, and this page says what we keep, why, and for how long.

For anything about your data, write to hello@reitfilings.com.

What we keep

  • Your email address and the time you gave it, if you sign up for update emails.
  • Your email address and your password, if you create an account. We keep the password only in a scrambled form that can't be turned back into the password.
  • Whether your subscription is active, which plan you're on, when it renews or ends, and Stripe's reference numbers for you and your subscription, if you subscribe.

To stop repeated tries, we keep a scrambled form of the email or network (IP) address used, and delete it within 25 hours.

We don't see or keep your card details. You pay on Stripe's checkout page, and Link, Stripe's checkout service, takes the payment.

We count visits with Cloudflare Web Analytics, which sets no cookies and doesn't identify you. For each visit it records the page, the site that sent you, your country, device type, browser and operating system, and how quickly it loaded.

We don't use advertising tools, and we don't sell or share your data with anyone for marketing.

Why we keep it

  • To send the email you asked for. The legal basis is your consent, and you can withdraw it at any time.
  • To run your account and your subscription. The legal basis is our contract with you.
  • To keep invoices and payment records for as long as Slovak accounting law requires. The legal basis is that legal obligation.
  • To stop repeated tries and to count visits. The legal basis is our legitimate interest in keeping the site safe and working.

Cookies

When you sign in, we set one cookie that keeps you signed in. The site doesn't work for a signed-in visitor without it, so we don't ask for consent. We set no other cookies.

Who else handles it

  • Cloudflare hosts the site, stores our database, sends our emails and counts visits for us. It sees your IP address when you visit, to deliver pages and block attacks.
  • Stripe runs checkout and manages subscriptions for us. Through its Link service, Stripe is the seller of record for subscriptions: it takes the payment, works out and collects tax, sends receipts and invoices, and answers questions about payments and refunds. It collects your name, email, billing address and payment details at checkout and uses them under its own privacy policy, as well as on our behalf.

Both are based in the United States and may process data there. Both transfer data from the EU under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

  • Update emails: until you ask us to stop. Every email has a link to do that.
  • Your account: until you ask us to close it. We delete it within 30 days. An account whose email is never confirmed is deleted after 7 days.
  • Invoices and payment records: 10 years, as Slovak accounting law requires.

Your rights

You can ask to see the data we hold about you, correct it, delete it, limit what we do with it, object to it, or get a copy to take elsewhere. Write to us and we'll answer within a month.

You can also complain to the Slovak data protection authority, Úrad na ochranu osobných údajov Slovenskej republiky, or to the authority where you live.

Changes

If we change this page in a way that affects you, we'll email account holders before the change applies.