Privacy Policy

1. Who We Are

Cresta Finzex ("we", "us", "our") operates an AI-driven data-analysis platform intended to support risk-calibrated, passive investment decision-making. For the purposes of applicable data protection law, Cresta Finzex acts as the data controller for personal data processed through this website and our services, unless otherwise stated. Contact details for privacy-related inquiries are available on our Contact page.

2. Scope of This Policy

This Policy applies to personal data we collect through our website, related subdomains, communications, and any associated services (collectively, the "Services"). It does not apply to third-party websites or services that may be linked from our Services, which are governed by their own privacy policies.

3. Information We Collect

We may collect the following categories of information:

• Identity and contact data — such as name, email address, and other details you provide when contacting us or registering interest in our Services.
• Technical and usage data — including IP address, browser type, device information, pages visited, and referring URLs, typically collected automatically through cookies or similar technologies.
• Communications data — content of messages, inquiries, or feedback you send to us via forms, email, or other channels.
• Account and usage information — where applicable, information generated through your interaction with any platform features, dashboards, or tools we may provide.

We do not knowingly collect sensitive personal data (such as health, biometric, or genetic data) unless specifically required and clearly disclosed at the point of collection.

4. How We Use Your Information

We process personal data for purposes that may include:

• Operating, maintaining, and improving our website and Services.
• Responding to inquiries, requests, and support needs.
• Sending administrative or service-related communications.
• Analyzing website usage to understand and improve user experience.
• Complying with applicable legal, regulatory, and contractual obligations.

5. Legal Basis for Processing

Where applicable law (such as the EU General Data Protection Regulation) requires a legal basis for processing, we rely on one or more of the following: your consent, the necessity of processing to perform a contract with you, our legitimate interests in operating and improving our Services, and compliance with legal obligations.

6. Cookies and Similar Technologies

Our website may use cookies and similar tracking technologies to operate core functionality, remember preferences, and analyze site traffic. You can control cookie preferences through your browser settings; disabling certain cookies may affect the functionality of parts of our Services. Where required by law, we will request your consent before deploying non-essential cookies.

7. Sharing and Disclosure of Information

We do not sell personal data. We may share personal data with:

• Service providers and vendors who assist with hosting, analytics, communications, or related operational functions, under appropriate confidentiality and data protection terms.
• Professional advisors, such as legal or financial consultants, where necessary.
• Regulatory or governmental authorities, where required by law or to protect our legal rights.
• Successors in the event of a merger, acquisition, or sale of business assets, subject to continued confidentiality obligations.

8. International Data Transfers

If personal data is transferred outside your country of residence, including outside the European Economic Area, we will take reasonable steps to ensure appropriate safeguards are in place consistent with applicable data protection law, such as standard contractual clauses or equivalent mechanisms.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including satisfying any legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the data and the purpose of processing.

10. Data Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, which may include the right to:

• Request access to the personal data we hold about you.
• Request correction or updating of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal exceptions.
• Object to or request restriction of certain processing activities.
• Request data portability, where technically feasible.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a relevant data protection supervisory authority.

To exercise any of these rights, please contact us through the details provided on our Contact page. We may need to verify your identity before responding to certain requests.

12. Children's Privacy

Our Services are not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.

13. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their respective privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised Policy on this page with an updated "Last updated" date. We encourage you to review this Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out via the details listed on our Contact page.

This document is a general template provided for informational purposes and does not constitute legal advice. Cresta Finzex recommends consulting a qualified legal professional to ensure this Policy meets all applicable regulatory requirements for your specific operations and jurisdictions.