Privacy Policy

1. Introduction

FIMAC (also referred to as "Fimac Group", "Financial Investment Management Advisory & Consultants", "we", "our", "us", or "the Company") operates the FIMAC Platform (the "Platform", "Service", or "Website"). This Privacy Policy governs the manner in which we collect, use, maintain, and disclose information collected from users ("User", "you", or "your") of the Platform. This Privacy Policy applies to the Platform and all products and services offered by Fimac Group.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

• Create a buyer account (full name, email address, phone number, company name)
• Authenticate using third-party services such as Google OAuth (name, email address, profile image)
• Complete verification processes (proof of funds, identity documents)
• Sign a Non-Disclosure Agreement (NDA) through the Platform
• Contact us through any communication channel

2.2 Information Collected Automatically

When you access or use our Platform, we automatically collect certain technical information. For security and analytics purposes, this includes:

• Hashed IP Addresses: To protect user privacy while ensuring platform security and accurate usage tracking, your raw IP address is hashed using SHA-256 immediately upon receipt of a request. The raw IP address is never stored in plaintext within our databases.
• Approximate Geolocation Data: We resolve approximate geographical locations (such as city, region, and country) from these hashed IP records or incoming request headers. No precise GPS tracking or physical location mapping is performed.
• Browser type, version, and language preferences
• Operating system and device identifiers
• Pages visited, time spent, click patterns, and navigation paths
• Referring and exit URLs
• Date and time stamps of access
• Cookies and similar tracking technologies

2.3 Third-Party Authentication Data (Google OAuth)

When you elect to sign in or register using Google OAuth, you explicitly authorize us to access and store the following information from your Google account: your full name, email address, unique Google account identifier, and profile picture. We do not access, store, or have visibility into your Google password, contacts, calendar, drive files, or any other Google account data beyond what is explicitly authorized through the OAuth consent screen.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: You have given explicit consent for processing for specific purposes
• Contractual Necessity: Processing is necessary for the performance of our services
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided such interests do not override your fundamental rights
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations

4. How We Use Your Information

We use the collected information strictly for the following purposes:

• To create, maintain, and administer your buyer account
• To facilitate communication regarding investment opportunities
• To verify your identity and financial qualifications
• To enforce our Terms of Service and applicable agreements including NDAs
• To send important platform updates, security alerts, and service notifications
• To improve, personalize, and optimize the Platform experience
• To analyze usage patterns and generate aggregated, anonymized statistical data
• To detect, prevent, and address fraud, security incidents, and technical issues
• To comply with legal obligations, regulatory requirements, and law enforcement requests

5. Information Sharing and Disclosure

We do not sell, trade, rent, or otherwise commercially exploit your personal information to any third party under any circumstances. We may share information only in the following limited circumstances:

• Service Providers: We may share information with third-party service providers that assist in operating the Platform (e.g., hosting infrastructure, email delivery). These providers may have access to your information only to the extent necessary to perform their functions on our behalf
• Legal Requirements: When required by applicable law, regulation, subpoena, court order, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers: In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your information may be transferred as part of such transaction. By using the Platform, you acknowledge and consent to such transfer
• Platform Operations: When necessary for the operation, maintenance, and improvement of the Platform and our services

6. Data Security and Exclusion of Liability

We implement commercially reasonable and industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including TLS/SSL encryption for data transmission, cryptographic hashing of credentials, and role-based access controls.

NOTWITHSTANDING THE FOREGOING, YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT NO METHOD OF ELECTRONIC TRANSMISSION OR STORAGE IS 100% SECURE. FIMAC DOES NOT GUARANTEE, WARRANT, OR REPRESENT THAT YOUR INFORMATION WILL BE COMPLETELY SECURE FROM AUTHORIZED OR UNAUTHORIZED ACCESS, USE, ALTERATION, BREACH, OR DESTRUCTION BY THIRD PARTIES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY AND ITS DIRECTORS, OFFICERS, EMPLOYEES, AND AGENTS ARE COMPLETELY EXONERATED AND DISCLAIMED FROM ANY AND ALL LIABILITY FOR DAMAGES OF ANY KIND (INCLUDING DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL) ARISING FROM OR RELATING TO DATA BREACHES, SYSTEM FAILURES, OR UNAUTHORIZED INTERCEPTION OF DATA. ANY TRANSMISSION OF DATA TO OUR PLATFORM IS AT YOUR OWN SOLE RISK.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain authenticated sessions, remember user preferences, and analyze Platform usage. By using the Platform, you consent to our use of cookies as described herein. You may control cookie settings through your browser; however, disabling cookies may impair certain functionality of the Platform.

8. Your Choices

As a user of the Platform, you may:

• Rectification: Update or correct your account information at any time through your account settings
• Account Deletion: Request deletion of your account by contacting us. Please note that certain information may be retained as required by law or for legitimate business purposes (such as records of signed NDAs or completed transactions)
• Communication Preferences: Opt out of non-essential communications by contacting us

9. Data Retention

We retain your personal information for as long as your account remains active, as needed to provide our services, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will remove or anonymize your personal data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (such as maintaining records of signed NDAs or completed transactions).

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. By using the Platform, you consent to the transfer of your information to such countries. We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated or controlled by Fimac Group. This Privacy Policy does not apply to third-party services. Fimac Group is not responsible for, and completely disclaims any liability for, the privacy practices, content, or security of any external websites or services. Any access of external links is done at your own risk. We strongly encourage you to review the privacy policies of any third-party services before providing personal information.

12. Children's Privacy

The Platform is not intended for, nor directed to, individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a minor, please contact us immediately.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and for any reason at our sole discretion. Any changes will be effective immediately upon posting the revised Privacy Policy on this page with an updated "Last updated" date. Your continued use of the Platform after any changes constitutes your binding acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must immediately cease using the Platform. It is your sole responsibility to review this page periodically for any changes.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws applicable to the jurisdiction in which Fimac Group operates, without regard to conflict of law principles.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us at:

• Email: info@fimacgroup.com
• Website: Contact Page