Privacy Policy
Version 0.1-draft · Effective from 2026-04-20
1. Data we collect
Account data (email, name, phone), KYC documents, device and session telemetry, financial activity, and support correspondence.
2. Why we collect it
To operate the platform, verify identity under AML / KYC rules, protect accounts from fraud, produce audit trails for financial regulators, and improve the service.
3. How we store it
Credentials and tokens are stored hashed. KYC documents are encrypted at rest. Access is scoped by least-privilege role.
4. Who we share it with
KYC providers, payment partners, and law enforcement when legally compelled. We do not sell personal data.
5. Retention
Financial records are retained per applicable AML / tax law (typically 5–10 years). You can request deletion of non-regulated data at any time.
6. Your rights
Access, rectification, restriction, portability, and erasure (subject to regulatory retention). Reach us via privacy@investbridge.example.