Privacy Policy
This policy explains what personal data Alethena Investment collects, why, who receives it, and what rights you have. The controller is Equility AG, Dammstrasse 16, 6300 Zug, Switzerland (CHE-460.255.304).
1. Law that applies
As a Swiss controller we process personal data under the Swiss Federal Act on Data Protection (FADP). Where we offer services to people in the European Economic Area, the GDPR may also apply. Where both apply, we aim to meet the higher standard.
2. What we collect
| Category | Examples |
|---|---|
| Account | Full name, email address, phone number, country, timezone, hashed password, two-factor status. |
| Identity verification | Identity documents you upload, document type, verification status, and the reason recorded for any rejection. |
| Financial | Deposits, investment contracts, accruals, withdrawals, balances, and your full transaction ledger. Payout destinations (wallet addresses or bank/mobile-money details), held encrypted. |
| Technical & security | IP address, browser user-agent, session records, login attempts (including failed ones), and password-reset and email-verification tokens. |
| Relationships | Your referral code, who referred you, and the accounts you referred. |
| Audit | An immutable log of administrative actions affecting your account, including who acted, when, from which IP, and the before/after state. |
| Communications | Emails we send you, including daily signal codes and status notifications, and messages you send us. |
Identity documents are treated as sensitive. Access to a stored document by our staff is itself recorded in the audit log.
3. Why we process it, and on what basis
- ·To provide the service — running your account, contracts, signals, and payouts. Basis: performance of our contract with you.
- ·To meet legal obligations — identity verification, anti-money-laundering checks, sanctions screening, record-keeping. Basis: legal obligation.
- ·To secure the platform — detecting fraud, abuse, duplicate accounts, and unauthorised access. Basis: our legitimate interest in a secure service.
- ·To communicate — service and transactional messages. Basis: contract, or your consent for anything optional.
We do not sell your personal data, and we do not use it for advertising or profiling for marketing purposes.
4. Who receives it
- ·Hosting and infrastructure providers that operate our servers and database.
- ·Payment and settlement providers used to process deposits and payouts. Their handling of your data is governed by their own terms.
- ·Email delivery providers used to send verification, notification, and daily signal messages.
- ·Public blockchains. A crypto transaction is recorded on a public ledger that we cannot alter or erase. Wallet addresses and amounts are visible to anyone.
- ·Authorities, regulators and professional advisers where we are legally required or permitted to disclose.
- ·Content delivery networks. Our pages load fonts and stylesheets from Google Fonts and a Tailwind CDN. Requesting those files discloses your IP address to those providers.
5. International transfers
Some recipients above may be outside Switzerland or the EEA. Where we transfer personal data to a country without an equivalent level of protection, we rely on appropriate safeguards such as standard contractual clauses. Note that public-blockchain data is inherently global and permanent.
6. How long we keep it
We keep personal data for as long as your account is open, and afterwards for as long as we are required to for legal, accounting, anti-money-laundering, and dispute-resolution purposes. Anti-money-laundering law generally requires identification records and transaction records to be retained for a period of years after the relationship ends.
Two consequences are worth stating plainly. First, our transaction ledger and audit log are append-only by design: entries cannot be edited or deleted, so financial records persist even after account closure. Second, transactions written to a public blockchain cannot be deleted by anyone.
7. How we protect it
Passwords are hashed with Argon2id. Sensitive stored data, including payout destinations, is encrypted at rest. Uploaded documents are validated and stored under non-guessable identifiers. Access by staff is governed by role-based permissions and recorded in an audited log. Two-factor authentication is available and recommended. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights
Subject to legal limits, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, a copy in a portable format, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior processing.
Some requests cannot be fully met. We cannot delete records we are legally required to retain, we cannot alter append-only ledger or audit entries, and no one can remove data from a public blockchain. Where we cannot comply, we will tell you why.
To exercise a right, contact us through the contact page. We may need to verify your identity first. If you are unhappy with our response, you may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to your local supervisory authority if you are in the EEA.
9. Cookies
We use a small number of strictly necessary cookies. See our Cookie Policy.
10. Children
The platform is not for anyone under 18 and we do not knowingly collect their data. If you believe a minor has registered, tell us and we will investigate.
11. Changes and contact
We may update this policy; material changes will be notified to your registered email address or shown in your dashboard. Controller: Equility AG, Dammstrasse 16, 6300 Zug, Switzerland · CHE-460.255.304 · contact us.