Privacy Policy

1. Information we collect

Account data: name, email, password hash, role, timestamps, IP address, user agent.

Verification data: legal name, date of birth, country, address, government ID type and number, ID document photos (stored in your email reply, not on our servers).

Financial data: deposits, withdrawals, investment activity, wallet balances, transaction references.

Technical data: IP address, device type, browser, session logs, audit logs.

2. How we use your information

• Operate the Platform and process your transactions
• Verify your identity as required by law
• Detect and prevent fraud, money laundering, and abuse
• Comply with legal, regulatory, and tax obligations
• Communicate about your account and Platform updates
• Improve our services and resolve issues

3. Legal bases for processing

Where required (e.g. under GDPR), we process your data under one or more of these legal bases: performance of a contract, compliance with legal obligations, legitimate interests (fraud prevention, security), and consent.

4. How we share your information

We do not sell your personal data. We share it only with:

• Service providers (hosting, email, database, rate limiting) who process on our behalf under contract
• Regulators, auditors, and law enforcement when legally required
• Successor entities in the event of a merger, acquisition, or restructuring

5. Data retention

We retain account and transaction records for as long as your account is active and for up to 7 years after closure to satisfy legal, tax, and regulatory obligations. Audit logs may be retained for longer where required.

6. Security

We use industry-standard security controls: encrypted transit (TLS), hashed passwords (Argon2id), 2FA for administrators, rate-limited endpoints, audit logging, and access controls. No system is completely secure; you also bear responsibility for protecting your credentials.

7. Your rights

Depending on your jurisdiction, you may have the right to: access, correct, delete, or export your personal data; object to or restrict certain processing; withdraw consent where consent is the basis; and lodge a complaint with a supervisory authority. To exercise these rights, contact privacy@aureliuscapitalwealth.com.

8. International transfers

Your data may be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards (standard contractual clauses or equivalent).

9. Children

The Platform is not intended for persons under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated in advance. Continued use of the Platform after changes take effect constitutes acceptance.

11. Contact

Questions about privacy: privacy@aureliuscapitalwealth.com.