Privacy policy.

We collect:

• Account data: name, email, phone, password hash, member reference, role.
• Identity & KYC data (Investor/Professional tiers only): passport / Emirates ID / equivalent national ID, proof of address, source-of-funds attestation, accreditation evidence where applicable.
• Activity data: pages viewed, downloads, queries, audit-chain entries for actions you take.
• Communications: emails, support tickets, and call notes when you contact us.
• Payment data: billing entity, address, VAT number. Card numbers are processed by Stripe and never stored on our servers.
• Technical data: IP address, browser user agent, session timestamps. Used for security and fraud prevention.

We use personal data to:

• Provide the Platform services for which you registered.
• Review membership applications and process KYC.
• Process payments and issue invoices.
• Communicate with you about your account, mandates, and the marketplace.
• Maintain the audit chain for governance and compliance purposes.
• Detect, prevent, and investigate security incidents and fraud.
• Comply with legal obligations including anti-money-laundering law.

We process personal data on the following bases:

• Contract: to provide the Platform services you have subscribed to.
• Legal obligation: for AML/KYC and accounting record-keeping.
• Legitimate interest: for security monitoring, fraud prevention, and product improvement (subject to your rights described below).
• Consent: for marketing communications you have opted into; withdrawable at any time.

We share personal data with:

• Service providers we rely on (cloud hosting, payment processing, email delivery, KYC vendors), under contractual confidentiality and data-processing terms.
• Opportunity sponsors when you submit an access request for one of their listings — we share only what is needed for them to decide whether to grant materials.
• Regulators and law enforcement where compelled by valid legal process.
• Successors in interest in the event of a corporate transaction (merger, acquisition, restructuring), subject to equivalent privacy protections.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure, subject to our retention obligations.
• Restrict or object to certain processing.
• Receive a portable copy of data you have provided.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority.