Last updated 15 October 2026.
This policy explains how personal data is handled on billionairelist.com. It covers two groups of people: users of the service, and the public figures whose profiles appear on the site.
Who is responsible
The controller of personal data is the administrator of the billionairelist.com service. You can reach the administrator at [email protected] for any question about this policy or your data.
Data about users
What we collect
- Account data. Your email address and a hashed password. We never store your password in readable form.
- Subscription data. Your plan, billing period, payment status and the last four digits of your card. Full card details are handled by the payment processor and never reach our servers.
- Usage data. Saved lists, watchlists, alert settings, export history, API keys (stored as hashes) and API usage counts.
- Technical data. IP address, browser type, pages requested and timestamps, kept in server logs to run and secure the service.
- Messages. Correction requests and emails you send us.
Why we use it and on what basis
- To create and run your account and provide the plan you pay for (performance of a contract).
- To send sign-in codes, alerts you set up and messages about your subscription (performance of a contract).
- To keep the service secure, prevent abuse and fix errors (legitimate interest).
- To keep billing and tax records (legal obligation).
- To answer your messages and correction requests (legitimate interest).
We do not use your data for advertising, we do not sell it and we do not build advertising profiles.
Data about people on profiles
Profiles cover people who are public figures because of their wealth. We process only information that is already public: name, age or date of birth, citizenship, country and city of residence at a general level, company roles, published net worth estimates, key business events and public philanthropy. Each item is taken from public sources, such as published rankings, company filings, press reports and open public knowledge bases, and the sources are listed on the profile.
The basis is our legitimate interest, and the public interest, in providing accurate, sourced information about the concentration of wealth and the people who lead major companies. We do not publish home addresses, private contact details, health information or details about family members who are not public figures.
If you are a person shown on a profile, you have the rights described below, including the right to object. Send requests to [email protected].
Who receives data
We use service providers in these categories, each bound by a contract to process data only on our instructions:
- a hosting provider in the EU, which stores the service and its databases;
- a payment processor, which handles card payments and subscription billing;
- an email delivery provider, which sends sign-in codes, alerts and service messages.
We may disclose data where the law requires it. Where a provider processes data outside the European Economic Area, transfers rely on appropriate safeguards such as standard contractual clauses.
How long we keep data
Account and usage data are kept while your account is active and deleted or anonymised within 90 days after the account is closed. Billing records are kept for as long as tax law requires. Server logs are kept for up to 90 days. Correction requests are kept for as long as the related profile exists, as a record of changes.
Your rights
Depending on the law that applies to you, you have the right to access your data, to have it corrected, to have it deleted, to restrict processing, to data portability and to object to processing based on legitimate interest. You can also withdraw any consent you gave, without affecting earlier processing. To use these rights, write to [email protected]. We reply within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
Residents of California and other US states
We do not sell or share personal information for cross-context behavioural advertising. You can request access to or deletion of your personal information by writing to [email protected], and we do not discriminate against anyone who uses these rights.
Cookies
We use only essential cookies. Details are in the cookie policy.
Security
We protect data with encrypted connections, hashed passwords and API keys, restricted access to production systems and encrypted backups. The security page describes these measures.
Children
The service is not directed at children under 16, and we do not knowingly collect their data.
Changes to this policy
When we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell account holders by email before it takes effect.