Privacy Policy
Last updated: March 15, 2024
This Privacy Policy describes how Factfoliopedia ("we," "our," or "us") collects, uses, and protects your personal information when you use our AI-first finance encyclopedia platform and related services.
1. Information We Collect
Personal Information You Provide
We collect information you provide when you create an account, subscribe to our services, or contact us for support:
- Account Information: Name, email address, phone number, company name, job title, and professional credentials
- Payment Information: Billing address, payment method details, and transaction history (processed securely through third-party payment processors)
- Communication Data: Messages, feedback, support requests, and correspondence with our team
- Professional Information: Industry sector, regulatory jurisdiction, areas of interest, and usage preferences
- Verification Data: Professional licenses, certifications, or other credentials required for certain subscription tiers
Information Collected Automatically
When you use our platform, we automatically collect certain information about your device and usage patterns:
- Usage Data: Search queries, pages viewed, features used, time spent on platform, and interaction patterns
- Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution
- Log Data: Access times, error logs, performance metrics, and system events
- Location Data: General geographic location based on IP address for regulatory compliance purposes
- Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies as described in our Cookie Policy
Information from Third Parties
We may receive information about you from third-party sources, including:
- Professional verification services for credential validation
- Payment processors for transaction processing
- Analytics providers for usage insights
- Security services for fraud prevention
2. How We Use Your Information
We use the collected information for legitimate business purposes, including:
- Service Provision: Provide and improve our AI-powered financial information services, process searches, and deliver relevant content
- Account Management: Create and maintain your account, process subscriptions, and manage user access levels
- Payment Processing: Process payments, manage billing, handle refunds, and maintain transaction records
- Communication: Send service updates, respond to inquiries, provide customer support, and deliver important notices
- Platform Security: Protect against fraud, unauthorized access, security threats, and ensure platform integrity
- Compliance: Meet legal obligations, regulatory requirements, and industry standards
- Analytics and Improvement: Analyze usage patterns, improve platform performance, and develop new features
- Personalization: Customize user experience, provide relevant content recommendations, and optimize search results
- Marketing: Send promotional materials and service updates (with your consent where required)
- Research and Development: Improve AI algorithms, enhance data accuracy, and develop new platform capabilities
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
Service Providers
We work with trusted third-party service providers who assist in operating our platform and providing services to you. These providers are contractually bound to protect your information and use it only for specified purposes:
- Cloud hosting and infrastructure providers
- Payment processing companies
- Customer support platforms
- Analytics and monitoring services
- Security and fraud prevention services
Legal Requirements
We may disclose your information when required by law or when we believe disclosure is necessary to:
- Comply with legal obligations, court orders, or regulatory requirements
- Protect our rights, property, or safety, or that of our users or the public
- Investigate potential violations of our Terms of Service
- Respond to government requests or law enforcement inquiries
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction, subject to appropriate confidentiality protections.
Consent
We may share your information with your explicit consent for specific purposes not covered by this policy.
4. Data Security and Protection
We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
Technical Safeguards
- Encryption: End-to-end encryption for data transmission and AES-256 encryption for data storage
- Access Controls: Multi-factor authentication, role-based access controls, and principle of least privilege
- Network Security: Firewalls, intrusion detection systems, and secure network architecture
- Data Backup: Regular encrypted backups with secure off-site storage
Operational Safeguards
- Security Audits: Regular third-party security assessments and penetration testing
- Employee Training: Comprehensive data protection training for all staff members
- Incident Response: Established procedures for detecting, responding to, and reporting security incidents
- Vendor Management: Due diligence and ongoing monitoring of third-party service providers
Compliance Certifications
Our security practices are validated through industry-standard certifications and compliance frameworks:
- SOC 2 Type II compliance
- GDPR compliance for European users
- CCPA compliance for California residents
- ISO 27001 information security management
5. Your Rights and Choices
You have several rights regarding your personal information, which may vary based on your location:
Access and Portability
- Right to Access: Request a copy of the personal information we hold about you
- Data Portability: Receive your data in a structured, machine-readable format
- Account Dashboard: View and manage your information through your account settings
Correction and Updates
- Right to Rectification: Request correction of inaccurate or incomplete information
- Self-Service Updates: Update most information directly through your account
- Verification Process: We may require verification before processing correction requests
Deletion and Restriction
- Right to Erasure: Request deletion of your personal information (subject to legal retention requirements)
- Right to Restrict Processing: Limit how we use your information in certain circumstances
- Account Closure: Close your account and request data deletion
Communication Preferences
- Marketing Opt-out: Unsubscribe from promotional communications at any time
- Notification Settings: Control which service notifications you receive
- Cookie Management: Adjust cookie preferences through our cookie banner or browser settings
To exercise these rights, please contact us at privacy@factfoliopedia.com or use the contact information provided below.
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes:
- Active Accounts: Information is retained while your account remains active
- Closed Accounts: Most data is deleted within 90 days of account closure
- Legal Requirements: Some information may be retained longer to comply with legal or regulatory obligations
- Backup Systems: Data in backup systems is deleted according to our standard backup retention schedule
- Analytics Data: Aggregated, anonymized data may be retained indefinitely for research and improvement purposes
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:
- Adequacy Decisions: Transfers to countries with adequate data protection laws
- Standard Contractual Clauses: EU-approved contractual protections for international transfers
- Certification Programs: Participation in recognized data protection frameworks
- Data Processing Agreements: Contractual protections with all international service providers
8. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last updated" date
- Sending email notifications to registered users for significant changes
- Displaying prominent notices on our platform
- Providing additional notice as required by applicable law
Your continued use of our services after such changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:
Mailing Address
Factfoliopedia Privacy Office
4110 N 47th St
Phoenix, AZ 85018
USA
We will respond to your inquiry within 30 days of receipt, or sooner as required by applicable law.