This Privacy Policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws. We are committed to protecting your personal data and respecting your privacy rights.
We use your personal information for the following purposes:
AI Capital does not sell personal data and does not disclose it for third-party advertising or cross-context behavioral advertising. Personal data is still collected to operate the app and is processed by the infrastructure and service providers needed to run it.
We may share your information only in the following limited circumstances:
Under GDPR, you have the following rights regarding your personal data:
Request copies of your data and receive it in a portable format
Correct inaccurate or incomplete personal data
Request deletion of your personal data
Limit how we process your personal data
We implement industry-standard security measures to protect your data:
While the account is open, product analytics events are kept until their database expiry (default 548 days) and operations logs that are not tied to one account expire on a short schedule (default 7 days). When you delete the account in the app, or confirm the deletion link we email, we delete or irreversibly de-identify portfolios, device push tokens, product analytics events tied to that account, and the other records linked to that user id. The original email is not kept on the deleted account. The request is not treated as finished if linked records for that account are still present. The closed account email is deleted+userId@aicapital.local. That value still contains the account id and is not fully anonymous. Payment rows may keep the amount, currency, status, provider, provider transaction id, and the same account id after payload fields are removed, for accounting, reconciliation, legal obligations, and payment disputes. The provider transaction id can re-identify the payer through the payment processor. Those rows are not used for marketing. There is no automatic expiry on them. Shared market data is not deleted. A repeated deletion request for the same account does not restore or expose another person's data.
We use essential cookies for platform functionality and analytics cookies to improve our services. You can manage cookie preferences in your browser settings. We do not use tracking cookies for advertising purposes.
Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions from the European Commission.
Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our platform. Your continued use of the service constitutes acceptance of the updated policy.
For privacy-related questions, data requests, or to exercise your rights, please contact us at:
Data Protection Officer: privacy@ai-capital.info
General Privacy Inquiries: legal@ai-capital.info
Last updated: January 2025