Privacy at BubbleTax: what happens to your IBKR data

Privacy, in concrete terms.

This page answers five questions with facts you can verify in the application and in the privacy policy: what we store, for how long, how you delete it, how you get your data and where the servers are.

The full privacy policy is the legally binding text. This page summarises it and adds the paths inside the application. Read the full privacy policy

What we store

We store only what is needed for your account, your calculation and billing. From your Flex Query export we read the tax-relevant fields: purchases and sales, dividends, interest, withholding tax, corporate actions, deposits and withdrawals, holdings.

Account data
E-mail address, registered passkeys, newsletter consent (given or not) and your licences per tax year. You see exactly this list under Settings, My Data.
Your files and inputs
The uploaded Flex Query exports in your file library and your manual inputs: acquisition data added for transfers between brokers, opening balances and manual fund classifications.
Calculations and reports
For each calculation a snapshot of the inputs used and the result with the generated reports (PDF, Excel). This lets you download a report again later without running a new export at Interactive Brokers.
Payment and invoice data
Payment runs through Stripe. Stripe holds name, billing address and amount; Stripe does not receive your tax data.
Support requests
If you write to us, the request with whatever you put into it is stored in our ticket system Freshdesk.
Technical access data
Server log files with browser type, operating system, referring page, time and IP address, as described in the privacy policy. For visitor statistics we use Plausible Analytics.

How long we store it

Every period here is defined in the application or in the privacy policy. Anything we cannot substantiate is not listed.

WhatHow longWhy
Latest successful report per tax year and the version you last downloadedAs long as your account existsSo you can download the version for your tax office again at any time and changes remain traceable against the downloaded version
Older calculation versions as well as cancelled and failed processing runs30 days, then deleted automaticallyData minimisation; the associated input snapshots are deleted with them
Files and inputs in your libraryUntil you remove them or your account is deletedThey are the basis for every further calculation, including the next tax year
Your accountAs long as you are registered, deleted afterwardsSo you do not have to create a new account every year
Licence and invoice data, if you have purchasedFor the statutory retention period (§ 14b UStG, § 147 AO)Legal obligation; it is the exception to the right to erasure under Art. 17 GDPR
Newsletter subscriptionUntil you unsubscribeConsent is valid until you withdraw it; the unsubscribe link is in every e-mail
Support requestsAs long as processing and follow-up questions take, then deleted or anonymisedDocumentation of the case; statutory retention obligations remain unaffected

How you delete

Three levels, all inside the application, no e-mail to us required.

Remove individual files or inputs
Under Settings, My Data you see every file and every input in your library and can remove them one by one. This affects future calculations; reports already created in your history remain unchanged.
Delete all files and reports
In Settings, "Delete all files" irrevocably removes all uploaded exports, stored calculation snapshots and generated reports. Your account and your licences remain, so you can upload and calculate again later.
Delete your account
If you have not purchased anything, you delete your account yourself in Settings, immediately and irrevocably. If you have purchased a licence, you submit a deletion request under Art. 17 GDPR there: we verify your identity, delete account and data and confirm this by e-mail. Invoice data is retained because of the statutory retention obligation.

How you get your data

Immediately in the application
Under Settings, My Data we show you live what we store for your account: master data, licences, files, inputs, generated reports as well as purposes, recipients and retention periods. This is the right of access under Art. 15 GDPR, without a request and without waiting.
As a copy
On the same page you save the overview as a PDF via your browser's print dialog. You download your reports from your history.
As a formal request
If something is missing, for example log data, you submit a formal request under Art. 15 GDPR on the My Data page. We verify your identity and send you a complete statement by e-mail within one month.

You also have the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority.

Where the servers are

The calculation of your tax data runs on servers of Hetzner Online GmbH (Gunzenhausen, Bavaria) in their own data centres in Germany. According to the privacy policy, the personal data processed there stays exclusively within Germany. The website itself is hosted at IONOS.

All transfers are TLS-encrypted. A data processing agreement under Art. 28 GDPR is in place with every service provider that processes data for us.

Service providers and what they see

Service providerPurposeWhat the service sees
Hetzner Online GmbH (Germany)Servers for processing and calculationOperates the data centres where the calculation runs
Neon, LLC (USA)Database operationThe database with account, files and results; processor with a data processing agreement
PDFBolt (Poland)Conversion of finished reports to PDFThe report content during rendering (tax figures and account ID), no name and no e-mail address
Stripe Payments Europe, Ltd. (Ireland)Payment and invoicesName, billing address, amount; no tax data
Freshworks (Freshdesk)Support ticketsOnly what you write into your request; hosted in a data centre in the EU
Plausible Insights OÜ (Estonia)Website visitor statisticsPage views; no account data, no tax data
Grafana Labs (USA)Operations monitoringTechnical operating data; processor with a data processing agreement

During the calculation our servers look up securities master data by ISIN, for example the fund category for the partial exemption. No personal data is transmitted in the process.

Questions about privacy

Write to support@bubbletax.de or call us. The controller is BubbleTax GmbH, An den Klostergründen 15, 93073 Neutraubling, Germany.

Last updated: September 2026

See what you get.

Upload your Flex Query export and check the free preview. You only pay when you download the full report.

Start the free preview