Privacy Policy for Heron AI

Heron AI is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered investment assistance and robo-advisory services. We operate in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant, and other privacy regulations.

1. Information We Collect

We collect various types of information to provide and improve our services.

• Personal Identification Information: Data that can be used to identify you directly or indirectly, such as your name, date of birth, financial details (income, assets, liabilities), investment goals, risk tolerance, and contact information. This is collected when you register for an account, use our financial planning tools, or communicate with us.
• Financial and Investment Data: Information necessary for AI-driven portfolio management, automated investment rebalancing, market trend analysis, and risk assessment, including transaction history, portfolio holdings, and investment preferences.
• Technical and Usage Data: Information automatically collected when you access and use our online platform, such as IP address, browser type, operating system, device identifiers, pages viewed, time spent on our service, and referring websites. This helps us understand how our services are used and improve functionality.
• Communication Data: Records of your communications with us, including inquiries and feedback.

2. How We Use Your Information

We use the collected information for various purposes:

• To Provide and Maintain Our Services: Delivering AI-driven portfolio management, personalized financial planning, automated investment rebalancing, and risk assessment strategies.
• To Personalize Your Experience: Tailoring educational resources and investment recommendations based on your profile and financial goals.
• For Analytical Purposes: Understanding market trends, user behavior, and improving our algorithms and service offerings.
• For Security and Fraud Prevention: Protecting our platform and users from fraudulent activities and ensuring compliance with financial regulations.
• To Communicate with You: Sending service updates, security alerts, and responding to your inquiries.
• To Fulfill Legal and Regulatory Obligations: Complying with anti-money laundering (AML) regulations, KYC (Know Your Customer) requirements, and other legal processes.

3. Legal Basis for Processing (GDPR)

For individuals within the European Economic Area (EEA), our legal basis for collecting and using the personal data described in this Privacy Policy depends on the data we collect and the specific context in which we collect it.

• Performance of a Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into such a contract (e.g., providing investment advice).
• Legal Obligation: Processing necessary for compliance with a legal or regulatory obligation to which Heron AI is subject (e.g., AML, KYC).
• Legitimate Interests: Processing necessary for the purposes of the legitimate interests pursued by Heron AI or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms (e.g., improving our services, preventing fraud).
• Consent: Where you have given explicit consent for specific processing activities.

4. Disclosure of Your Information

Heron AI does not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf, such as data hosting, payment processing, analytics, and customer support. These providers are obligated to protect your information and use it only for the purposes for which it was disclosed.
• Regulatory and Law Enforcement Authorities: When required by law or in response to valid requests by public authorities (e.g., a court order or government agency request).
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity.

5. Data Security

We implement robust technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. This includes encryption, access controls, regular security audits, and staff training. However, no method of transmission over the internet or electronic storage is 100% secure.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. The precise retention periods vary depending on the type of data and our legal obligations.

7. Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): Request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request that we limit the way we use your personal data.
• Right to Object to Processing: Object to our processing of your personal data under certain conditions.
• Right to Data Portability: Request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data.

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before fulfilling your request.

8. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. Heron AI will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date. We advise you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, please contact us:

Heron AI

1 Fusionopolis Way,

#10-08 Sandcrawler,

Singapore, Singapore, 138632