Privacy Policy – InvestWise

Effective Date: [Insert Date]
Last Updated: [Insert Date]
Website: https://investwis.com
Contact Email: support@investwis.com

1. Introduction

InvestWise ("we", "our", or "us") is committed to protecting your privacy and personal data in accordance with the UAE Personal Data Protection Law (PDPL) and applicable global standards. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you access or use our website, mobile application, or services (“Services”).

By using InvestWise, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.

2. Data We Collect

We may collect the following categories of personal data, either directly from you or automatically:

a) Personal Identification Data

  • Full Name
  • Email Address
  • Phone Number (if provided)
  • Date of Birth (if required for eligibility)
  • Nationality or Emirates ID (if required for identity verification)

b) Technical & Usage Data

  • IP address
  • Device type and browser information
  • Usage patterns and page interactions
  • Cookies and similar technologies (see Section 8)

c) Financial Profile & Preferences (Optional or Consented)

  • Investment goals or risk appetite
  • Income range (if used in simulators)
  • Portfolio preferences or responses to questionnaires

3. How We Use Your Data

We process your data only for legitimate and specified purposes, including:

  • To register and manage your account
  • To deliver our educational and advisory services
  • To personalize your user experience and content
  • To provide customer support and respond to inquiries
  • To send platform updates, alerts, and promotions (if consented)
  • To monitor system security, fraud, or abuse
  • To comply with legal and regulatory obligations

4. Legal Basis for Processing

We rely on the following legal bases for processing your data:

  • Consent: Where you provide clear, explicit consent (e.g. marketing, cookies)
  • Contractual Necessity: To provide services you request or sign up for
  • Legal Obligation: Where required to comply with UAE laws and regulations
  • Legitimate Interests: For internal analytics, platform improvement, or security

5. Data Sharing & Third Parties

We do not sell your data. We may share your data with trusted third parties only when necessary:

  • Cloud hosting and database providers (e.g. Firebase, Cloudinary)
  • Analytics services (e.g. Google Analytics)
  • Customer support tools (e.g. email ticketing systems)
  • Regulatory or legal authorities, if required by law or legal proceedings

All third parties are contractually bound to maintain data confidentiality and security in accordance with PDPL.

6. Data Retention

We retain your personal data only as long as necessary to:

  • Fulfill the purposes outlined in this policy
  • Comply with legal, contractual, or regulatory obligations
  • Enforce our terms and protect our legal rights

Inactive accounts may be anonymized or deleted after 12–24 months of inactivity, unless retention is required by law.

7. Data Storage & International Transfers

All personal data is stored securely on servers located in compliance with UAE regulatory frameworks. Where data is transferred outside the UAE (e.g. via cloud services), we ensure:

  • Transfers are based on adequacy decisions or data protection agreements
  • Appropriate technical and organizational safeguards are in place

8. Cookies and Tracking Technologies

We use cookies and similar tools to enhance user experience and analyze traffic. These may include:

  • Essential cookies for secure login and navigation
  • Analytical cookies to improve performance
  • Preference cookies to remember settings

You may disable cookies in your browser, but certain features may not function properly.

9. Data Subject Rights (Under PDPL)

You have the following rights regarding your personal data:

  • Access – to request a copy of your personal data
  • Rectification – to correct inaccuracies or incomplete data
  • Erasure – to request deletion of data under specific conditions
  • Objection – to object to certain processing activities
  • Data Portability – to receive your data in a structured format
  • Withdraw Consent – where processing is based on prior consent

To exercise any of these rights, contact us at support@investwis.com. We may verify your identity before responding.

10. Information Security

We apply industry-standard security controls to protect your data, including:

  • SSL/TLS encryption
  • Role-based access control
  • Two-factor authentication (2FA)
  • Regular backups and activity monitoring
  • Incident response protocols in case of breach

Despite our efforts, no platform is immune to risks. Users are advised to use strong passwords and report any suspicious activity.

11. Children's Privacy

InvestWise is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover such data has been collected without verified parental consent, we will promptly delete it.

12. Policy Updates

We may update this Privacy Policy to reflect changes in our practices, technology, or legal obligations. Updates will be posted with a new “Last Updated” date. Your continued use of the Services indicates acceptance of any changes.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact:

Email: support@investwis.com
Legal Entity: [Insert Legal Company Name]
Address: [Insert Registered Company Address, Emirate, UAE]