Privacy policy

Who this policy is about

This policy covers personal information collected from operators and prospective operators on the sharefund.app marketing site and during onboarding. The privacy of an operator's own investors is governed by the operator's own privacy policy on the operator's tenant site.

What we collect from operators

• Business and contact information you provide on the contact form or during onboarding.
• Email address, name, role, company.
• Communications with our team.
• Standard server logs (IP, user agent, page path) for security and product analytics.

How we use it

• To respond to your access request and run the onboarding.
• To send platform updates and operational notices.
• To detect abuse, fraud, and unauthorised access.
• To improve the product, in aggregate form only.

Sharing

We do not sell your data. We share with:

• Email and analytics providers strictly as needed to operate the marketing site and the platform.
• Law enforcement when legally compelled.

Retention

Operator account records are retained for the duration of the engagement and a reasonable period afterwards for legal recordkeeping. Marketing leads who never become operators are deleted on request.

Your rights

• Access, you can request a copy of your data.
• Correction, you can correct inaccurate information.
• Deletion, you can ask us to delete your data, subject to legal retention requirements.
• Marketing opt-out, you can unsubscribe from product news at any time.

Security

We use TLS for all traffic, encrypt sensitive data at rest, store passwords as modern hashes only, and require TOTP for internal staff access to the platform's admin systems.

Cookies

We use first-party session cookies on the marketing site to keep you signed in and to remember preferences. We do not use third-party advertising trackers or cross-site fingerprinting tools.

Changes

We may update this policy. Material changes will be communicated to the operator contact at least 30 days before taking effect.