Privacy Policy

Draft for review by counsel. Written to reflect what the portal actually does today.

1. What we collect

• Account details: name, email address, phone number, password (stored only as a one-way hash).
• Application details: date of birth, nationality, address, tax residence and identifier, investor type, capital range, source of funds, and the documents you upload for identity verification.
• Investment records: your investment, funding events, monthly returns, payments, withdrawals, top-ups, documents and requests.
• Security and usage records: sign-ins and failed attempts, the network address and browser used, consent records, and an audit trail of changes to your records.
• Messages: contact-form enquiries and support requests.

2. Why we use it

• To assess your application and verify your identity, as anti-money-laundering and know-your-customer rules require.
• To operate your investment: funding, returns, payments, statements, requests.
• To keep your account secure and to detect misuse.
• To send you the notices you need (application, funding, payments, security). You can switch off the optional emails in your account preferences; security messages are always sent.
• To meet our legal and record-keeping duties.

We do not sell personal information and we do not use it for advertising.

3. Who we share it with

• Service providers that host the Service, deliver email, and (when engaged) verify identity, under contracts that restrict their use of your data.
• Authorities, when the law requires it.
• Professional advisers (lawyers, accountants, auditors) bound by confidentiality.

4. How long we keep it

Financial records and the evidence behind them are kept for as long as the law requires (typically at least five years after the relationship ends). Unsubmitted applications are deleted after the period shown in your portal. Security logs are kept for one year.

5. Your rights

You can, from your account settings:

• See and export your personal information (a copy in a machine-readable file).
• Correct it (important details through a reviewed change request).
• Ask us to delete your account. We will delete what the law lets us delete and tell you what we must keep and for how long.
• Choose which optional emails you receive.

Residents of California and other states with privacy laws may have additional rights, including the right not to be discriminated against for exercising them. We honour these requests regardless of where you live. To exercise a right, use your account settings or the support form.

6. Security

Data travels encrypted. Identity documents are stored in a private bucket and opened only through short-lived links, every download logged. Access inside the company is limited by role, management uses two-factor authentication, and every change to a record is written to an audit trail. If a breach affects your data we will notify you and the authorities as the law requires.

7. Cookies

We use only the cookies needed to keep you signed in. See the Cookie Notice.

8. Children

The Service is not for anyone under 18 and we do not knowingly collect their information.

9. Changes

When this policy changes materially you will be asked to accept the new version at your next sign-in.

10. Contact

Eagle Altus Capital LLC, [postal address to be confirmed], United States. Use the support form in your portal or the contact form on the website.