Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account, making transactions, or contacting us. This includes:

• Personal identification: Full name, email address, phone number
• Identity documents: Government-issued ID, proof of address (for KYC verification)
• Financial information: Transaction history, deposit and withdrawal records, investment plan details
• Technical data: IP address, browser type, access timestamps

2. How We Use Your Information

Your personal data is used for the following purposes:

• Account creation, authentication, and portfolio management
• Processing deposits, withdrawals, and profit distributions
• KYC/AML compliance and identity verification
• Communicating account updates, transaction confirmations, and support responses
• Improving our services and ensuring platform security
• Referral program tracking and commission calculations

3. Data Storage & Security

All personal data is stored on secure servers with industry-standard encryption. We implement the following security measures:

• Encrypted password storage using modern hashing algorithms
• CSRF protection on all forms and API endpoints
• Rate limiting on authentication endpoints
• Secure session management with automatic timeout
• HTTPS encryption for all data transmission (in production)

4. Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• When required by law, regulation, or legal process
• To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations
• With service providers who assist in platform operations (under strict confidentiality agreements)

5. Cookies & Tracking

We use essential cookies for session management and authentication (including "Remember Me" functionality). We do not use third-party tracking cookies or advertising pixels.

6. Your Rights

You have the right to:

• Access your personal data stored in our systems
• Correct inaccurate or incomplete information via your profile settings
• Request deletion of your account and associated data (subject to regulatory retention requirements)
• Withdraw consent for optional data processing activities
• Export your transaction history in CSV format

7. Data Retention

We retain your personal data for as long as your account is active. After account closure, we may retain certain data for up to 7 years as required by financial regulations and anti-money laundering laws.

8. KYC Document Handling

Identity documents submitted for KYC verification are stored securely and accessed only by authorised administrators. Documents are retained for the duration of account activity plus the regulatory retention period, after which they are securely deleted.

9. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification. The "last updated" date at the top reflects the most recent revision.

11. Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at:

• Email: support@cumulusfz.com
• Location: Office C1-1F-SF7877, Ajman Free Zone, UAE
• Hours: Monday — Saturday, 9 AM — 6 PM GST