Privacy policy
What we collect, why we collect it, how long we keep it, and what you can ask us to do with it. The short version: we collect what an investment account needs to work, and nothing we wouldn't want asked about ourselves.
1. What we collect
Information you give us — your name, email address, the payout details you supply for deposits and withdrawals, and anything you put in a message to support.
Information created by using the platform — login times, IP address and device type, deposits, withdrawals and package activity, and the records of any conversation with our team.
Verification documents — only where a transaction or the law requires them (for example identity checks before large withdrawals).
2. How we use it
- To run your account: register it, credit returns, process withdrawals.
- To keep it safe: spot unusual logins, block fraud, protect other investors.
- To meet the law: recordkeeping and reporting where regulations require it.
- To answer you: support replies and, if you've opted in, product news. Marketing email carries a one-click unsubscribe.
- To improve the platform: aggregated, de-identified statistics about how features are used.
3. Legal bases
Where data law names a basis (GDPR and similar frameworks), we rely on: performance of the contract (your account), legal obligation (financial recordkeeping), legitimate interests (security, fraud prevention, service improvement) and consent (marketing messages, which you can withdraw any time).
4. Cookies
We use strictly necessary cookies to keep you signed in and to protect forms against abuse. Optional analytics cookies help us understand which pages work — they run only if you allow them. You can clear or block cookies in your browser; blocking the necessary ones will stop the dashboard from staying signed in.
5. Who we share it with
We do not sell personal data. We share only what is needed, with:
- Payment processors and networks that deliver your deposits and withdrawals;
- Hosting, email and analytics providers acting on our instructions under contract;
- Regulators, courts or law enforcement — only when legally required.
Where data leaves your country, we use contractual safeguards (standard contractual clauses or equivalent) recognised by data-protection authorities.
6. How long we keep it
Account records live as long as your account is open, plus the retention period financial regulations require (typically up to seven years after it closes). Support conversations are kept for two years. Marketing consent records are kept until you withdraw it. Everything else is deleted or anonymised when it is no longer needed.
7. Security
Traffic is encrypted in transit, passwords are stored only as hashes, and dashboards are protected by session controls and rate limiting. Access inside the company is limited to staff whose job needs it, logged, and reviewed. No system is perfect — if we ever suffer a breach that affects your data, we will tell you and the relevant authority promptly.
8. Your rights
Depending on where you live, you can ask us to:
- Give you a copy of the data we hold about you;
- Correct anything inaccurate or out of date;
- Delete your data, where we have no legal reason to keep it;
- Pause or restrict how we use it;
- Hand it to another provider in a portable format;
- Stop marketing messages at any time.
We answer verified requests within 30 days. You can also complain to your local data-protection authority — we'd appreciate the chance to fix it first.
9. Talk to us
Privacy questions go to Aurevialtd