Privacy Policy

1. Direct Information Collection: We collect personal information you voluntarily provide: full name, email address, phone number, date of birth, government-issued ID, Social Security number (where required), financial details (bank accounts, income sources, investment history), and any information shared during advisory sessions or support interactions.

2. Automatic Data Collection: When you use our platform, we automatically receive device information (type, operating system, browser version), IP address, geolocation data, time zone settings, usage patterns (pages viewed, clicks, time spent), and interaction with emails or push notifications.

3. How We Use Your Information: To provide financial services, process transactions, verify identity, prevent fraud, personalize dashboards, improve algorithms, comply with KYC/AML regulations, send service updates, respond to support requests, and conduct analytics to enhance user experience.

4. Legal Basis for Processing (GDPR): We rely on: contractual necessity (to fulfill service requests), legal obligations (tax reporting, anti-fraud compliance), legitimate interests (fraud prevention, platform improvement, direct marketing), and explicit consent (cookies, promotional emails). Withdraw consent anytime.

5. Data Security Measures: TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, SOC 2 Type II certified infrastructure, quarterly independent penetration testing, role-based access controls, multi-factor authentication, and continuous 24/7 security monitoring.

6. Cookie Policy: We use essential cookies (required for login and transactions), functional cookies (remembering preferences), analytics cookies (usage patterns via Google Analytics), and advertising cookies (retargeting where permitted). You may opt out via cookie settings.

7. Third-Party Data Sharing: Shared only with necessary partners: payment processors (Stripe, PayPal), identity verification services (Plaid, Alloy), banking partners, insurance underwriters, and regulatory authorities. All third parties sign data processing agreements meeting GDPR/CCPA standards.

8. International Data Transfers: Your data may be transferred to the United States, European Union, or other countries where partners operate. We ensure safeguards (Standard Contractual Clauses) are in place. By using our services, you consent to such transfers.

9. Data Retention Policy: We retain personal data for as long as your account is active, plus 7 years to comply with tax, anti-fraud, anti-money laundering, and regulatory requirements. After this period, data is anonymized for analytics or securely deleted.

10. Your Privacy Rights (CCPA/GDPR): You may request: access to your data (free copy annually), correction of inaccurate information, deletion of data (subject to legal holds), portability (machine-readable format), restriction of processing, and objection to automated decisions. We respond within 30 days.

11. Children's Privacy: Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we discover such data, we will delete it immediately. Parents may contact us to report concerns.

12. Do Not Track Signals: Our platform does not currently respond to browser "Do Not Track" signals due to evolving industry standards. However, we limit tracking as described in our cookie policy. You may use global privacy controls where available.

13. Automated Decision-Making: We use automated systems for credit scoring, fraud detection, risk assessment, and investment recommendations. You have the right to request human review of any automated decision that significantly affects you. Contact privacy@savecapitalfast.com for such requests.

14. Email and SMS Communications: Transactional messages (order confirmations, account alerts, security notifications) are required for service. Promotional messages (offers, newsletters) require your consent. You may unsubscribe via link in emails or reply STOP to SMS.

15. California Privacy Rights (CPRA): California residents may request information about data sharing for cross-context behavioral advertising. We do not share personal data for such purposes. You also have the right to limit use of sensitive personal information.

16. Nevada Privacy Rights: Nevada residents may opt out of the sale of covered information. We do not sell personal data. To submit an opt-out request, email privacy@savecapitalfast.com with "Nevada Opt-Out" in the subject line, including your name and Nevada mailing address.

17. Breach Notification Procedure: In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours of discovery. Notification will include the nature of the breach, affected data categories, and recommended protective actions.

18. Third-Party Links: Our platform may contain links to external websites (partner sites, regulatory bodies). We are not responsible for their privacy practices or security. Please review their policies before sharing any personal information.

19. Changes to This Privacy Policy: We may update this Privacy Policy periodically. Material changes will be emailed to registered users 30 days before the effective date. Your continued use after the effective date constitutes acceptance. The "Effective" date is always displayed below.

20. Contact Our Privacy Team: For questions, complaints, or to exercise your privacy rights: privacy@savecapitalfast.com or by mail: Save Capital Fast Privacy Office, 827 Glenview Drive Corpus Christi, TX 78401. You may also call +1 361-443-5535 . We aim to resolve all privacy issues within 30 days.

Effective: January 15, 2026