Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, email address, date of birth, home address, and Individual Taxpayer Identification Number (ITIN) or Social Security Number (SSN) during account creation and identity verification. We store only the last four digits of your ITIN/SSN — the full number is never persisted.

We also collect identity verification documents (government-issued ID, selfie, proof of address) which are stored securely in encrypted cloud storage and accessible only to authorized compliance staff.

2. How We Use Your Information

• To verify your identity and comply with Know Your Customer (KYC) and anti-money-laundering (AML) requirements.
• To open and maintain your brokerage account.
• To process transactions, deposits, and withdrawals.
• To send account-related notifications (trade confirmations, statements, required disclosures).
• To improve our platform, detect fraud, and ensure security.

3. Information Sharing

We do not sell your personal information. We may share information with:

• Regulatory authorities — as required by FINRA, SEC, FinCEN, or applicable law.
• Service providers — third parties who help us operate our platform (cloud infrastructure, identity verification, payment processing), bound by data processing agreements.
• Legal proceedings — in response to lawful requests from courts or law enforcement.

4. Data Security

We use industry-standard security measures including AES-256 encryption at rest, TLS in transit, HMAC-SHA256 hashing for sensitive identifiers, and strict access controls. No internet transmission is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account information for as long as your account is active and as required by applicable financial regulations (typically 5–7 years after account closure). Identity documents are retained as required for AML compliance.

6. Your Rights

Depending on your state of residence, you may have rights to access, correct, or delete your personal information, subject to legal retention requirements. To submit a request, contact us at privacy@immifinance.app.

7. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or an in-app notice at least 30 days before the change takes effect.

8. Contact

Questions? Email privacy@immifinance.app or write to ImmiFinance, Inc., Attn: Privacy, [Address].