Privacy Policy
Last updated: July 2026
OVERVIEW
We take the protection of your personal data seriously. This policy explains what data is collected when you use AInvest, for what purposes, on what legal basis, and what rights you have as a data subject.
DATA CONTROLLER
The controller within the meaning of the GDPR is: Westbridge Media F.Z.E, Office BLV-6F-SF60938, Boulevard-A Building, Ajman Freezone, Ajman, United Arab Emirates. Privacy requests: privacy@conconai.com
SESSION DATA & TECHNICAL OPERATION
When you visit AInvest, your browser transmits standard technical data to our server (IP address, browser type, referring URL, date/time of access). This data is processed for the purpose of operating the website securely and diagnosing technical faults. Legal basis: Art. 6(1)(f) GDPR - legitimate interest. Hosting provider: Vercel Inc., San Francisco, USA (adequacy decision / Standard Contractual Clauses apply).
AI-ASSISTED INTERACTION (OPENAI)
When you use the investment coach, the text of your messages is transmitted to OpenAI Ireland Ltd (or the applicable OpenAI entity) to generate responses. AInvest does not permanently store conversation content on its own servers. OpenAI processes this data subject to its Privacy Policy (openai.com/policies/privacy-policy) and the Data Processing Agreement (DPA) between AInvest and OpenAI. Do not enter sensitive personal, financial, or health information beyond what is needed for investment framework guidance.
ANALYTICS (PLAUSIBLE)
AInvest uses Plausible Analytics - a cookieless, privacy-friendly analytics tool that does not use cookies and does not collect personally identifiable information. No consent banner is required. Plausible is operated by Plausible Insights OÜ, Estonia (EU). Data is processed in the EU. For more information: plausible.io/privacy.
COOKIES & LOCAL STORAGE
AInvest stores language preference (ainvest_locale) and market/region (ainvest_market) in cookies for technical operation. No tracking cookies are used. No consent is required for these technically necessary cookies.
YOUR RIGHTS
As a data subject under GDPR (or applicable law) you have the right to: access your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You also have the right to lodge a complaint with your national data protection authority. To exercise these rights, contact us at the address listed in the Legal Notice.
DATA PROCESSING AGREEMENTS
AInvest uses carefully selected processors: Vercel Inc. (hosting), OpenAI (AI processing) and Upstash (rate limiting/caching). Corresponding data processing agreements (DPAs) are in place with these providers.
DATA RETENTION
AInvest does not permanently store conversation data. Server access logs are kept for a maximum of 30 days. Technically necessary cookies (language, region) expire after 12 months at the latest.
INTERNATIONAL TRANSFERS
Data may be transferred to the USA (Vercel, OpenAI, Upstash) and to the UAE (operator) - on the basis of appropriate safeguards such as Standard Contractual Clauses (SCCs) and/or your consent.