Privacy Notice

01 Who We Are

This Privacy Notice applies to Onvest ("Onvest," "we," "us," or "our"), the operator of the Onvest platform, website at onvest.ai, and all related services. We are based in San Francisco, California.

02 What Data We Collect

We collect information in the following categories:

03 How We Use Your Data

We use your data to:

• Deliver the Service — provide AI signals, briefings, and platform features personalized to your watchlist and preferences
• Process payments — manage billing, subscriptions, and free trial activations
• Improve the platform — analyze usage patterns to fix bugs and improve features
• Communicate with you — send account notices, product updates, and (with your consent) marketing emails
• Comply with legal obligations — fraud prevention, security, and regulatory compliance
• Support RIA features — for registered advisor accounts, to facilitate client-facing tools

We rely on contractual necessity (to perform our services), legitimate interests (platform security and improvement), and your consent (marketing communications) as our legal bases for processing.

04 Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

• Service providers: Trusted vendors who help us operate the platform (e.g., Stripe for payments, AWS for hosting, analytics providers). These parties are bound by data processing agreements.
• AI model providers: Query inputs may be processed by third-party AI providers (OpenAI, Anthropic, Google, etc.) via API. We minimize data sent and do not include identifiable personal data in model prompts. See Section 8.
• Legal requirements: When required by law, court order, or to protect the rights, property, or safety of Onvest, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or asset sale, user data may transfer as part of the transaction. We will provide notice before this occurs.

05 Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: Authentication sessions, security, and core platform functionality. These are required to use the Service.
• Analytics cookies: Understanding how users interact with the platform (page visits, feature usage). We use privacy-respecting analytics tools.
• Preference cookies: Remembering settings like dark/light mode, language, and display preferences.

You may disable non-essential cookies through your browser settings, though this may affect certain features. We do not use advertising or cross-site tracking cookies.

06 Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained while your account is active, plus up to 90 days after account deletion for fraud prevention and legal compliance.
• Usage and analytics data: Aggregated and anonymized data may be retained indefinitely for platform improvement.
• Payment records: Retained for 7 years as required by financial regulations.

You may request deletion of your account and associated data at any time by contacting us at [email protected].

07 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request that we delete your personal data
• Portability: Receive your data in a machine-readable format
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the link in any email or by contacting us
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

California residents have additional rights under the CCPA, including the right to know, delete, and opt out of sale (we do not sell data). To exercise any right, contact us at [email protected].

08 AI & Model Processing

Onvest's signal engine routes market analysis queries through multiple third-party AI model APIs, including those operated by OpenAI, Anthropic, Google, and others. When we do this:

• We send only the market data and query context required — we do not send your name, email, or account identifiers to AI models
• We do not use your personal data to train external AI models
• AI-generated outputs are processed and stored within our infrastructure
• Third-party AI providers may have their own data retention and processing policies; we select providers with strong privacy commitments

09 Children's Privacy

Onvest is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

10 Changes to This Notice

We may update this Privacy Notice from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will notify you by email or via a prominent notice on the platform at least 30 days before the change takes effect.

Your continued use of the Service after the effective date of any update constitutes acceptance of the revised Notice.

11 Contact Us

For privacy questions, data requests, or concerns, contact our team at:

Onvest — Privacy
San Francisco, California
[email protected]
(415) 939-6838

We aim to respond to all data requests within 30 days.