Xonata-AI

    Privacy Policy

    Last Updated: June 15, 2023

    1. Overview

    Xonata-AI is committed to protecting your privacy and complies with all applicable data protection regulations in Hong Kong. This document explains how we collect, process, and protect your personal information when you use our platform.

    2. What We Collect

    We may collect the following types of personal data:

    • Identity & Contact: Full name, email, phone number, and address
    • Financial Data: Details required to process investments and comply with regulatory requirements
    • Technical Data: IP address, browser information, and usage patterns
    • Tracking Technologies: Cookies and scripts to improve functionality and analyse traffic

    3. Why We Use It

    We process your data to:

    • Enable secure access to your account
    • Execute investment instructions
    • Fulfil legal obligations under Chinese regulations
    • Notify you of service changes or improvements
    • Provide personalised financial support
    • Enhance platform functionality through usage data
    • Prevent fraud or security breaches
    • Send marketing communications (only with your explicit permission)

    4. How Long We Keep Your Info

    Your data is retained only as long as necessary for operational and regulatory purposes. We delete or anonymise it when it is no longer required.

    5. Data Security Measures

    We implement industry-leading security protocols, including:

    • Data encryption at rest and in transit
    • Role-based access controls
    • Regular third-party audits and penetration testing
    • Secure server infrastructure and trusted hosting partners

    6. Your Rights

    You may be entitled to:

    • Request access to your stored data
    • Correct or update your information
    • Object to processing or request deletion
    • Restrict how your data is used
    • Export your data (data portability)
    • Withdraw consent at any time

    7. Working with Partners

    We work only with carefully selected third-party providers who maintain the same high standards of data protection.

    8. Analytics Use

    We use anonymised analytics tools to understand platform usage, detect issues, and continuously improve our services.

    9. Children's Data

    Our platform is not intended for users under 18. If you believe a minor has submitted data, please contact us immediately to have it removed.

    10. Policy Changes

    We may update this policy from time to time. Significant changes will be notified via email or platform announcement.

    11. Contact Information

    For privacy-related inquiries in Hong Kong, please reach out to: [email protected]