Privacy Policy
Last updated August 9, 2026. This policy is modeled for Investory and should be reviewed by counsel before regulated financial services launch.
Information we collect
- Information you provide, such as name, email, company, role, questions, and account preferences.
- Automatic information, such as device type, browser, referring page, approximate location, and cookie preferences.
- Product information, such as Plaid connection metadata, brokerage account identifiers, holdings, balances, cost basis, tax lots when available, investment transactions, strategy settings, decision receipts, activity logs, and support conversations when you use the app.
How we use information
- To operate the website and app, respond to inquiries, provide support, improve product quality, secure the service, and measure opted-in analytics.
- To evaluate early access requests, communicate product updates, and maintain compliance records where required.
Legal basis
- Contract, when data is needed to provide requested services.
- Consent, for analytics, marketing cookies, and optional communications.
- Legitimate interest, for security, fraud prevention, product improvement, and basic business operations.
Retention
- Contact inquiries are retained for up to 36 months unless a longer business relationship exists.
- Cookie preferences are stored locally until cleared or updated.
- Security and audit logs may be retained longer when needed for compliance, dispute resolution, or fraud prevention.
International transfers
- Investory may use vendors and cloud infrastructure in the United States and other jurisdictions. Where required, we use contractual and technical safeguards for cross-border processing.
GDPR and CCPA rights
- Depending on location, you may request access, correction, deletion, portability, restriction, objection, or opt out of sale or sharing of personal information.
- California residents can use the cookie preferences page to select Do Not Sell or Share My Personal Information.
Security
- We use encryption in transit, access controls, least-privilege permissions, logging, and vendor review processes. No internet service can guarantee absolute security.
Contact
- Privacy questions should be submitted through the contact form and routed to the Investory product team. Include Privacy Request in the message.