Privacy Policy

Data Controller

Family Office Organizer acts as the data controller for the personal information collected through this platform. We determine the purposes and means of processing your personal data. Our registered office and contact details are provided in the contact section below.

Information We Collect

We collect information you provide directly when creating an account or using our services, including your name, email address, organization details, and any financial or estate planning data you enter. We also collect usage data automatically, such as features accessed, session duration, and device information, to maintain platform stability and improve our services.

Legal Basis for Processing

We process your personal data under the following legal bases: (i) performance of a contract — to deliver the platform services you subscribe to; (ii) legitimate interests — to improve our services, prevent fraud, and ensure security; (iii) consent — where you have provided explicit consent for specific processing activities; and (iv) legal obligations — to comply with applicable laws and regulations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.

Your Data Protection Rights

Under LGPD, GDPR, and other applicable data protection laws, you have the right to: access your personal data; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); request data portability in a structured, machine-readable format; object to certain processing activities; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact our Data Protection Officer at the address below. We will respond within 15 business days (LGPD) or 30 days (GDPR).

Data Security

All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Our infrastructure runs within isolated tenant environments, and access to production systems is restricted to authorized personnel through role-based access controls and multi-factor authentication. We conduct regular security audits and maintain an ongoing commitment to industry-standard security practices appropriate for a financial services application.

Data Retention

We retain your personal data for as long as your account remains active. Upon account deletion, personal data is removed within 30 calendar days, except where retention is required by law (e.g., AML/KYC records). Backup copies may persist for up to 90 days as part of disaster recovery. Anonymized usage data may be retained indefinitely for analytical purposes.

Cookies

Our platform uses only essential cookies necessary for authentication, session management, and platform operation. We do not use tracking or advertising cookies. If we introduce optional non-essential cookies in the future, we will provide clear controls and obtain your consent before activating them.

Third-Party Services

Our platform integrates with a limited number of third-party services for core functionality, including authentication (Keycloak) and subscription billing. These services receive only the minimum data necessary and are contractually obligated to protect it. We do not share your financial records or client data with any third party for marketing or advertising purposes.

Changes to This Policy

We may update this privacy policy from time to time. Material changes that affect how your data is collected, used, or shared will be communicated by email at least 30 days before taking effect. We encourage you to review this page periodically.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our compliance with data protection laws. If you have questions about how we handle your personal data, wish to exercise your rights, or need to report a data protection concern, please contact our DPO:

Contact Us

For general questions or concerns about this privacy policy or how your data is handled, please reach out to us at:

privacy@familyoffice.example.com