Privacy Policy
Your privacy is our priority. Learn how we protect your personal information.
Last Updated: January 15, 2025 | GDPR & CCPA Compliant
INVESTON ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our investment platform and services.
This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws in the 21+ jurisdictions where we operate.
1 Information We Collect
Personal Identification Information
- • Full name, date of birth, and nationality
- • Government-issued identification (passport, driver's license, national ID)
- • Residential address and contact information (email, phone number)
- • Photographs for identity verification
- • Social security number or tax identification number (where required)
Financial Information
- • Bank account details and payment information
- • Cryptocurrency wallet addresses
- • Transaction history and investment records
- • Source of funds documentation
- • Tax documentation and financial statements
Technical Information
- • IP address, device identifiers, and browser information
- • Login credentials and authentication data
- • Cookies and tracking technologies data
- • Usage patterns and platform interaction data
- • Geolocation information
Communication Data
- • Customer support correspondence
- • Survey responses and feedback
- • Marketing preferences and communications
2 How We Use Your Information
We use your personal information for the following purposes:
Account Management
Create, verify, and maintain your account
KYC/AML Compliance
Verify identity and prevent fraud
Transaction Processing
Execute investments, deposits, and withdrawals
Customer Support
Respond to inquiries and resolve issues
Security & Fraud Prevention
Monitor suspicious activity and protect accounts
Legal Compliance
Meet regulatory and reporting obligations
Platform Improvement
Analyze usage and enhance user experience
Marketing Communications
Send updates and promotional materials (with consent)
3 Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on the following legal grounds:
Contractual Necessity
Processing necessary to provide our services and fulfill our obligations under the Terms of Service
Legal Obligation
Compliance with KYC/AML regulations, tax laws, and other legal requirements in our operating jurisdictions
Legitimate Interests
Fraud prevention, security monitoring, and platform improvement (balanced against your privacy rights)
Consent
Marketing communications and optional features (you may withdraw consent at any time)
4 How We Share Your Information
We may share your personal information with:
- Service Providers: Third-party vendors who assist with payment processing, identity verification, customer support, and platform infrastructure
- Regulatory Authorities: Government agencies, financial regulators, and law enforcement when required by law or court order
- Financial Institutions: Banks and payment processors to facilitate transactions
- Business Transfers: In the event of merger, acquisition, or asset sale (with appropriate safeguards)
- Professional Advisors: Legal counsel, auditors, and compliance consultants under confidentiality obligations
We do NOT sell your personal information to third parties for marketing purposes.
5 Data Security Measures
We implement industry-leading security measures to protect your personal information:
Encryption
256-bit SSL/TLS encryption for data transmission and AES-256 encryption for stored data
Access Controls
Multi-factor authentication, role-based access, and regular access audits
Network Security
Firewalls, intrusion detection systems, and DDoS protection
Regular Audits
Security assessments, penetration testing, and compliance audits
Data Minimization
Collect only necessary information and retain it for required periods only
Employee Training
Regular security awareness and data protection training for all staff
6 Your Privacy Rights
Depending on your location, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal information we hold about you
Right to Rectification
Correct inaccurate or incomplete personal information
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data (subject to legal retention requirements)
Right to Restrict Processing
Limit how we use your personal information in certain circumstances
Right to Data Portability
Receive your personal data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or for marketing purposes
Right to Withdraw Consent
Withdraw consent for processing where consent is the legal basis
Right to Lodge a Complaint
File a complaint with your local data protection authority
To Exercise Your Rights:
Contact our Data Protection Officer at privacy@investon.org
We will respond to your request within 30 days (or as required by applicable law).
7 International Data Transfers
As a multinational platform operating in 21+ jurisdictions, your personal information may be transferred to and processed in countries other than your country of residence.
We ensure appropriate safeguards are in place for international data transfers:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions recognizing equivalent data protection standards
- Binding Corporate Rules for intra-group transfers
- Specific consent where required by law
8 Data Retention Periods
We retain your personal information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, regulatory, tax, and accounting obligations (typically 7-10 years for financial records)
- Resolve disputes and enforce our agreements
- Prevent fraud and maintain security
After the retention period expires, we securely delete or anonymize your personal information unless longer retention is required by law.
9 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and analyze platform usage. Types of cookies we use:
Essential Cookies
Required for platform functionality, security, and authentication. Cannot be disabled.
Performance Cookies
Help us understand how visitors use our platform to improve performance.
Functional Cookies
Remember your preferences and settings for a personalized experience.
Marketing Cookies
Track visits across websites to deliver relevant advertisements (with consent).
You can manage cookie preferences through your browser settings or our cookie consent manager.
10 Children's Privacy
INVESTON's services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information and terminate the account.
If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@investon.org.
11 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or prominent platform notice
- Obtain your consent where required by law
We encourage you to review this Privacy Policy periodically.
12 Contact Us
For privacy-related inquiries, to exercise your rights, or to contact our Data Protection Officer:
Questions About Your Privacy?
Our Data Protection Officer is available to answer questions and help you exercise your privacy rights.