Privacy and Security Policy

1. Scope and accountability

This policy explains how AInvestor collects, uses, discloses, retains and safeguards personal information associated with its website, SaaS application, Beta program, Snapshot360, Gauge360, Brainier, Portfolio X-Ray and integrations.

The person responsible for privacy may be reached at beta@ainvestor.world. Official company coordinates will be maintained in the corporate profile and contractual communications.

2. Information collected

• Account: name, email, language, internal identifiers, plan and preferences.
• Authentication and security: hashed password, sessions, login events, technical logs and fraud indicators.
• Portfolios: authorized accounts, holdings, transactions, balances, currencies, costs, returns, imported files and simulated portfolios.
• Investor profile: objectives, horizon, experience, preferences and risk tolerance when you choose to provide them.
• Use: features viewed, Brainier requests, Beta feedback, communications and support.
• Billing: plan, status and payment references. Full card data is processed by the payment provider and is not intended to be retained by AInvestor.
• Technical data: browser, device, network address, necessary cookies, errors and performance data.

3. Sources and integrations

Information comes from you, files you import, brokers and providers you authorize—including Questrade when available—and financial-data providers. Third-party authorization may be revoked through mechanisms offered by that third party or AInvestor.

AInvestor will never ask you to email your brokerage password. When authentication is hosted by a partner, credentials remain with that partner according to its own processes.

4. Purposes

• Create, secure and administer the account.
• Import, synchronize, normalize and display portfolios.
• Produce explainable analyses, scores, alerts and educational content.
• Personalize educational framing where you consented to profile use.
• Provide Brainier and improve service quality, security and reliability.
• Manage the Beta, support, billing and essential communications.
• Prevent fraud, investigate incidents and meet legal obligations.

5. Providers and transfers

AInvestor may use cloud hosting, payment, email, cybersecurity, financial-data, connected-brokerage and artificial-intelligence providers. They receive only information reasonably necessary for their mandate and are subject to applicable contractual and legal duties.

Some processing may occur outside Quebec or Canada, where information may be subject to local law. AInvestor assesses risks and implements appropriate contractual, organizational and technical measures before disclosure outside Quebec.

AInvestor does not sell or rent personal information.

6. Retention and destruction

Information is retained only as long as necessary for stated purposes, account operation, fraud prevention, backups, and tax, contractual or legal obligations, then destroyed or anonymized under a retention schedule. Deletion may be limited where retention is legally required or necessary to establish a right.

7. Security

AInvestor applies safeguards proportionate to sensitivity: need-to-know access, hashed passwords, encrypted communications, session management, logging, protected backups, updates, monitoring and incident procedures. Partner access should be limited to what is required and, where possible, read-only.

No system is invulnerable. You must use a unique password, protect your devices, sign out of shared devices and promptly report unusual activity.

8. Privacy incidents

AInvestor assesses, contains and documents incidents. Where required, affected persons and competent authorities are notified. Required incident records are maintained.

9. Your rights and choices

Subject to law, you may request access or correction, withdraw optional consent, change preferences, disconnect an integration, request applicable deletion or portability, and submit a complaint. Withdrawal may prevent features that necessarily depend on the affected data.

Write to beta@ainvestor.world. Reasonable identity verification may be required.

10. Cookies and measurement

AInvestor uses cookies necessary for authentication, language, security, preserving your choices and operating the SaaS. They cannot be disabled from the banner because they are required to provide the requested service.

With your permission, AInvestor may measure sections viewed and approximate use time to improve the Beta, reliability and usability. This optional measurement is inactive before consent and is not used for advertising. No advertising cookie is currently active.

Your choice is retained for no more than 180 days and can be changed at any time. Withdrawal blocks new optional measurement and removes known optional cookies where technically possible.

11. Minors and changes

The service is intended for adults capable of entering into a contract. We do not knowingly seek information from minors.

The version and date appear above. Material changes will be communicated and may require renewed acceptance before continued SaaS use.