Privacy Policy

1. Introduction

Sapphire Capital Advisory ("Sapphire", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wealth management platform and related services.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, and authentication credentials when you create an account.
• Financial Data: Account balances, transaction records, asset details, and other financial information you provide or that is retrieved through connected services (e.g., bank integrations via Plaid).
• Usage Data: Information about how you interact with our platform, including pages visited, features used, and session duration.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Documents: Files you upload to the platform, such as financial statements or supporting documents.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our wealth management services.
• Process financial transactions and maintain accurate records.
• Authenticate your identity and maintain account security.
• Send service-related notifications and communications.
• Generate reports, analytics, and financial insights at your request.
• Comply with legal obligations and regulatory requirements.

4. Data Storage and Security

Your data is stored on secure servers within the European Union (EU-West-1 region) to ensure compliance with GDPR and applicable data protection regulations. We employ industry-standard security measures including encryption at rest and in transit, HMAC-signed authentication tokens, rate limiting, and regular security assessments.

5. Third-Party Services

We integrate with selected third-party services to enhance our platform. These include banking data providers, payment processors, and cloud infrastructure providers. Each third-party service is evaluated for their privacy and security practices. We only share the minimum data necessary for each integration to function.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Financial records may be retained for longer periods to comply with regulatory requirements. You may request deletion of your account and associated data at any time, subject to legal retention obligations.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Rectify inaccurate or incomplete information.
• Request deletion of your personal data.
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent where processing is based on consent.

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences (e.g., sidebar state, theme preferences). We do not use third-party advertising or tracking cookies. Analytics, where used, are privacy-respecting and do not involve cross-site tracking.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@sapphirecapitaladvisory.com.