Privacy Policy

1. Introduction

InvestSync Limited ("InvestSync", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application (the "Service").

We comply with the New Zealand Privacy Act 2020 and other applicable privacy laws.

2. Information We Collect

We collect information that you provide directly to us, such as when you create an account, update your profile, or communicate with us. This may include:

• Identity Data: Name, username, or similar identifier.
• Contact Data: Email address and telephone number.
• Content and Communication Data: Information you submit through forms, feedback, support requests, or other interactions with the Service.
• Financial Data: Investment portfolio details, transaction history, and other financial information you choose to track via the Service.
• Technical Data: IP address, login data, browser type and version, time zone setting, and operating system.
• Mobile Device Data: A device identifier, device model, operating system version, app version, and notification token when notifications are enabled.
• Usage Data: The InvestSync screens you open and the organisation associated with those screens. Mobile usage insights do not include portfolio values, search text, notes, Assistant questions, or Assistant responses.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Host, manage, publish, and deliver website content and in-app information;
• Process your transactions and manage your account;
• Send you technical notices, updates, security alerts, and support messages;
• Respond to your comments, questions, and requests;
• Monitor and analyse trends, usage, and activities in connection with the Service;
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.
• Prepare Assistant responses when you explicitly choose to use the Assistant.

4. How We Share Your Information

We may share information with trusted service providers who help us operate the Service. This includes providers that support hosting, content management and delivery, analytics, customer communication, security, and technical operations.

These providers may process information only as needed to provide their services to us. We do not sell your personal information.

Some providers may store or process information outside New Zealand. When this happens, we take reasonable steps to make sure your information remains protected.

When you choose to use the Assistant, InvestSync asks for your permission before sharing your question, recent conversation, and relevant portfolio context with an AI service provider. This information is shared only to prepare the response you requested.

We also use a diagnostics provider to understand crashes and app performance. Diagnostics are not used for advertising or to track you across other companies' apps or websites.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

7. Your Rights

Under the Privacy Act 2020, you have the right to:

• Request access to your personal data;
• Request correction of your personal data;
• Request deletion of your personal data (subject to certain exceptions).

To exercise these rights, please contact us at support@investsync.co.nz.

You can also start permanent account deletion from the InvestSync mobile app under Settings. If you are the owner of an organisation, you may first need to transfer ownership or cancel an active organisation subscription so business and financial records remain under the control of an authorised owner.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: support@investsync.co.nz