Privacy Policy

Last updated: March 5, 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE FIMAC PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE OUR PLATFORM.

1. Introduction

FIMAC ("Financial Investment Management Advisory & Consultants", "we", "our", "us", or "the Company") operates the FIMAC Platform (the "Platform", "Service", or "Website"). This Privacy Policy governs the manner in which we collect, use, maintain, and disclose information collected from users ("User", "you", or "your") of the Platform. This Privacy Policy applies to the Platform and all products and services offered by FIMAC.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

  • Create an investor account (full name, email address, phone number, company name)
  • Authenticate using third-party services such as Google OAuth (name, email address, profile image)
  • Complete verification processes (proof of funds, identity documents)
  • Sign a Non-Disclosure Agreement (NDA) through the Platform
  • Contact us through any communication channel

2.2 Information Collected Automatically

When you access or use our Platform, we automatically collect certain technical information, including but not limited to:

  • Internet Protocol (IP) address and geolocation data
  • Browser type, version, and language preferences
  • Operating system and device identifiers
  • Pages visited, time spent, click patterns, and navigation paths
  • Referring and exit URLs
  • Date and time stamps of access
  • Cookies and similar tracking technologies

2.3 Third-Party Authentication Data (Google OAuth)

When you elect to sign in or register using Google OAuth, you explicitly authorize us to access and store the following information from your Google account: your full name, email address, unique Google account identifier, and profile picture. We do not access, store, or have visibility into your Google password, contacts, calendar, drive files, or any other Google account data beyond what is explicitly authorized through the OAuth consent screen.

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

  • Consent: You have given explicit consent for processing for specific purposes
  • Contractual Necessity: Processing is necessary for the performance of our services
  • Legitimate Interest: Processing is necessary for our legitimate business interests, provided such interests do not override your fundamental rights
  • Legal Obligation: Processing is necessary to comply with applicable laws and regulations

4. How We Use Your Information

We use the collected information strictly for the following purposes:

  • To create, maintain, and administer your investor account
  • To facilitate communication regarding investment opportunities
  • To verify your identity and financial qualifications
  • To enforce our Terms of Service and applicable agreements including NDAs
  • To send important platform updates, security alerts, and service notifications
  • To improve, personalize, and optimize the Platform experience
  • To analyze usage patterns and generate aggregated, anonymized statistical data
  • To detect, prevent, and address fraud, security incidents, and technical issues
  • To comply with legal obligations, regulatory requirements, and law enforcement requests

5. Information Sharing and Disclosure

We do not sell, trade, rent, or otherwise commercially exploit your personal information to any third party under any circumstances. We may share information only in the following limited circumstances:

  • Service Providers: We may share information with third-party service providers that assist in operating the Platform (e.g., hosting infrastructure, email delivery). These providers may have access to your information only to the extent necessary to perform their functions on our behalf
  • Legal Requirements: When required by applicable law, regulation, subpoena, court order, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
  • Business Transfers: In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your information may be transferred as part of such transaction. By using the Platform, you acknowledge and consent to such transfer
  • Platform Operations: When necessary for the operation, maintenance, and improvement of the Platform and our services

6. Data Security

We implement commercially reasonable and industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including but not limited to:

  • TLS/SSL encryption for all data transmitted between your browser and our servers
  • Cryptographic hashing of authentication credentials (passwords are never stored in plaintext)
  • Role-based access controls and principle of least privilege
  • Regular security assessments and vulnerability scanning
  • Secure data backup and disaster recovery procedures

NOTWITHSTANDING THE FOREGOING, NO METHOD OF ELECTRONIC TRANSMISSION OR STORAGE IS 100% SECURE. WHILE WE STRIVE TO USE COMMERCIALLY REASONABLE MEANS TO PROTECT YOUR PERSONAL INFORMATION, WE CANNOT AND DO NOT GUARANTEE ABSOLUTE SECURITY. YOU ACKNOWLEDGE AND ACCEPT THAT ANY TRANSMISSION OF DATA TO OUR PLATFORM IS AT YOUR OWN RISK.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain authenticated sessions, remember user preferences, and analyze Platform usage. By using the Platform, you consent to our use of cookies as described herein. You may control cookie settings through your browser; however, disabling cookies may impair certain functionality of the Platform.

8. Your Choices

As a user of the Platform, you may:

  • Rectification: Update or correct your account information at any time through your account settings
  • Account Deletion: Request deletion of your account by contacting us. Please note that certain information may be retained as required by law or for legitimate business purposes (such as records of signed NDAs or completed transactions)
  • Communication Preferences: Opt out of non-essential communications by contacting us

9. Data Retention

We retain your personal information for as long as your account remains active, as needed to provide our services, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will remove or anonymize your personal data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (such as maintaining records of signed NDAs or completed transactions).

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. By using the Platform, you consent to the transfer of your information to such countries. We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated or controlled by FIMAC. This Privacy Policy does not apply to third-party services, and we are not responsible for the privacy practices, content, or security of any external websites or services. We strongly encourage you to review the privacy policies of any third-party services before providing personal information.

12. Children's Privacy

The Platform is not intended for, nor directed to, individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a minor, please contact us immediately.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and for any reason. Any changes will be effective immediately upon posting the revised Privacy Policy on this page with an updated "Last updated" date. Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy. It is your sole responsibility to review this page periodically for any changes.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws applicable to the jurisdiction in which FIMAC operates, without regard to conflict of law principles.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us at: