Privacy at BubbleTax: what happens to your IBKR data
Privacy, in concrete terms.
This page answers five questions with facts you can verify in the application and in the privacy policy: what we store, for how long, how you delete it, how you get your data and where the servers are.
The full privacy policy is the legally binding text. This page summarises it and adds the paths inside the application. Read the full privacy policy
What we store
We store only what is needed for your account, your calculation and billing. From your Flex Query export we read the tax-relevant fields: purchases and sales, dividends, interest, withholding tax, corporate actions, deposits and withdrawals, holdings.
- Account data
- E-mail address, registered passkeys, newsletter consent (given or not) and your licences per tax year. You see exactly this list under Settings, My Data.
- Your files and inputs
- The uploaded Flex Query exports in your file library and your manual inputs: acquisition data added for transfers between brokers, opening balances and manual fund classifications.
- Calculations and reports
- For each calculation a snapshot of the inputs used and the result with the generated reports (PDF, Excel). This lets you download a report again later without running a new export at Interactive Brokers.
- Payment and invoice data
- Payment runs through Stripe. Stripe holds name, billing address and amount; Stripe does not receive your tax data.
- Support requests
- If you write to us, the request with whatever you put into it is stored in our ticket system Freshdesk.
- Technical access data
- Server log files with browser type, operating system, referring page, time and IP address, as described in the privacy policy. For visitor statistics we use Plausible Analytics.
How long we store it
Every period here is defined in the application or in the privacy policy. Anything we cannot substantiate is not listed.
| What | How long | Why |
|---|---|---|
| Latest successful report per tax year and the version you last downloaded | As long as your account exists | So you can download the version for your tax office again at any time and changes remain traceable against the downloaded version |
| Older calculation versions as well as cancelled and failed processing runs | 30 days, then deleted automatically | Data minimisation; the associated input snapshots are deleted with them |
| Files and inputs in your library | Until you remove them or your account is deleted | They are the basis for every further calculation, including the next tax year |
| Your account | As long as you are registered, deleted afterwards | So you do not have to create a new account every year |
| Licence and invoice data, if you have purchased | For the statutory retention period (§ 14b UStG, § 147 AO) | Legal obligation; it is the exception to the right to erasure under Art. 17 GDPR |
| Newsletter subscription | Until you unsubscribe | Consent is valid until you withdraw it; the unsubscribe link is in every e-mail |
| Support requests | As long as processing and follow-up questions take, then deleted or anonymised | Documentation of the case; statutory retention obligations remain unaffected |
How you delete
Three levels, all inside the application, no e-mail to us required.
- Remove individual files or inputs
- Under Settings, My Data you see every file and every input in your library and can remove them one by one. This affects future calculations; reports already created in your history remain unchanged.
- Delete all files and reports
- In Settings, "Delete all files" irrevocably removes all uploaded exports, stored calculation snapshots and generated reports. Your account and your licences remain, so you can upload and calculate again later.
- Delete your account
- If you have not purchased anything, you delete your account yourself in Settings, immediately and irrevocably. If you have purchased a licence, you submit a deletion request under Art. 17 GDPR there: we verify your identity, delete account and data and confirm this by e-mail. Invoice data is retained because of the statutory retention obligation.
How you get your data
- Immediately in the application
- Under Settings, My Data we show you live what we store for your account: master data, licences, files, inputs, generated reports as well as purposes, recipients and retention periods. This is the right of access under Art. 15 GDPR, without a request and without waiting.
- As a copy
- On the same page you save the overview as a PDF via your browser's print dialog. You download your reports from your history.
- As a formal request
- If something is missing, for example log data, you submit a formal request under Art. 15 GDPR on the My Data page. We verify your identity and send you a complete statement by e-mail within one month.
You also have the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority.
Where the servers are
The calculation of your tax data runs on servers of Hetzner Online GmbH (Gunzenhausen, Bavaria) in their own data centres in Germany. According to the privacy policy, the personal data processed there stays exclusively within Germany. The website itself is hosted at IONOS.
All transfers are TLS-encrypted. A data processing agreement under Art. 28 GDPR is in place with every service provider that processes data for us.
Service providers and what they see
| Service provider | Purpose | What the service sees |
|---|---|---|
| Hetzner Online GmbH (Germany) | Servers for processing and calculation | Operates the data centres where the calculation runs |
| Neon, LLC (USA) | Database operation | The database with account, files and results; processor with a data processing agreement |
| PDFBolt (Poland) | Conversion of finished reports to PDF | The report content during rendering (tax figures and account ID), no name and no e-mail address |
| Stripe Payments Europe, Ltd. (Ireland) | Payment and invoices | Name, billing address, amount; no tax data |
| Freshworks (Freshdesk) | Support tickets | Only what you write into your request; hosted in a data centre in the EU |
| Plausible Insights OÜ (Estonia) | Website visitor statistics | Page views; no account data, no tax data |
| Grafana Labs (USA) | Operations monitoring | Technical operating data; processor with a data processing agreement |
During the calculation our servers look up securities master data by ISIN, for example the fund category for the partial exemption. No personal data is transmitted in the process.
Questions about privacy
Write to support@bubbletax.de or call us. The controller is BubbleTax GmbH, An den Klostergründen 15, 93073 Neutraubling, Germany.
Last updated: September 2026
See what you get.
Upload your Flex Query export and check the free preview. You only pay when you download the full report.
Start the free preview