Privacy Policy

Information We Collect

We collect information you provide directly when creating an account or using our services. This includes your name, email address, organization details, and any financial or estate planning data you enter into the platform. Because we serve wealth management professionals and family offices, the data stored on our platform may include sensitive financial records, beneficiary information, and insurance policy details.

We also collect usage data automatically, such as the features you access, the time and duration of your sessions, and the actions you perform within the platform. This helps us understand how our product is used so we can improve it. Additionally, we collect standard device information, including your IP address, browser type, and operating system, for security monitoring and to maintain platform stability.

How We Use Your Information

Your data is used primarily to provide and maintain the Family Office Organizer platform. This includes processing your account, delivering the features you rely on, and ensuring your workspace functions correctly across your team and tenants.

We also use your information to provide customer support, investigate issues you report, and communicate with you about your account or important platform changes. Aggregated, anonymized usage data helps us identify patterns, prioritize new features, and fix bugs. We will never sell your personal data to third parties.

Data Security

We take data security seriously. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Our infrastructure runs within isolated tenant environments, and access to production systems is restricted to authorized personnel through role-based access controls and multi-factor authentication.

We conduct regular security audits and penetration testing to identify and address vulnerabilities. Our platform is designed with SOC 2 Type II compliance in mind, and we maintain an ongoing commitment to industry-standard security practices appropriate for a financial services application.

Data Retention

We retain your personal data for as long as your account remains active. If you request account deletion, we will remove your personal data within 30 calendar days, except where we are required by law to retain certain records for longer periods. Backup copies may persist for up to 90 days after deletion as part of our disaster recovery process, after which they are purged automatically.

Anonymized usage data that cannot be linked back to you or your organization may be retained indefinitely for analytical purposes. If you have questions about specific data retention periods, contact us at the address below.

Third-Party Services

Our platform integrates with a limited number of third-party services to deliver core functionality. Keycloak provides authentication and identity management. Payment processors handle subscription billing. We also use anonymized analytics to monitor platform health and performance trends.

We carefully vet all third-party providers for security and privacy practices. These services receive only the minimum data necessary to perform their function and are contractually obligated to protect that data. We do not share your financial records or client data with any third party for marketing or advertising purposes.

Your Rights

You have the right to access the personal data we hold about you and to request corrections if that data is inaccurate. You may request deletion of your account and associated data, subject to legal retention requirements. You can also request a portable copy of your data in a structured, machine-readable format.

If you object to certain processing activities, such as the use of your data for analytics, we will accommodate your request where feasible. To exercise any of these rights, contact us at the email address listed below and we will respond within 30 days.

Cookies

Our platform uses only essential cookies necessary for authentication, session management, and platform operation. These cookies are required for the application to function properly and cannot be disabled without affecting your ability to use the service.

We do not set tracking cookies or advertising cookies by default. If we introduce optional non-essential cookies in the future, we will provide clear controls and obtain your consent before activating them.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes that affect how your data is collected, used, or shared, we will notify you by email at least 30 days before the changes take effect. We encourage you to review this page periodically to stay informed about our privacy practices.

Contact Us

If you have questions or concerns about this privacy policy or how your data is handled, please reach out to us at:

privacy@familyoffice.example.com