Legal

Privacy Policy

Last updated: 1 March 2026

1. Who we are

Bolsa De Valores Ai is the controller responsible for personal data processed through the Services. You can contact us at [email protected] or +44 20 7946 6661. Postal correspondence may be sent to High Holborn 108, EC3M 4AJ Edinburgh, GB.

We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Information we collect

Depending on how you use the Services, we may collect:

• Identity and contact data, such as your name, email address and telephone number;
• Account data, such as login credentials (stored in hashed form), preferences and settings;
• Usage data, such as pages viewed, features used, device type, browser and approximate location derived from IP address;
• Technical data, such as log files, IP address and security events;
• Communications data, such as messages you send to our support team.

We do not ask you to provide private keys, seed phrases or wallet passwords. Please never share these with anyone, including us.

3. How we use your information

We use personal data to provide and operate the Services, create and manage accounts, respond to enquiries, improve performance and features, keep the Services secure, prevent fraud and abuse, comply with legal obligations, and send service-related messages. Where you have opted in, we may also send marketing communications, which you can withdraw at any time.

4. Legal bases for processing

We rely on one or more of the following lawful bases: performance of a contract with you; compliance with legal obligations; our legitimate interests, such as securing and improving the Services, balanced against your rights; and your consent, where we ask for it specifically.

5. Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember your preferences and understand how the Services are used. Please refer to our cookie information shown on the website for details of each category and how to manage your choices.

6. Sharing your information

We do not sell personal data. We may share data with trusted service providers who process it on our behalf under written contracts, including hosting, analytics, customer support and payment processing providers. We may also disclose information where required by law, to protect our rights, or in connection with a merger, acquisition or restructuring, in which case we will ensure appropriate safeguards apply.

7. International transfers

Some of our providers may process data outside the United Kingdom. Where this occurs, we ensure that an appropriate safeguard is in place, such as a UK adequacy regulation or the International Data Transfer Agreement or Addendum approved for use in the United Kingdom.

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting or reporting requirements. When data is no longer required, we delete or anonymise it securely.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, monitoring and staff confidentiality obligations. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights

Under the UK GDPR you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure in certain circumstances;
• restrict or object to certain processing;
• request portability of data you provided to us;
• withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us using the details above. We may need to verify your identity before responding. We aim to respond within one month, as required by law.

11. Complaints

If you have concerns about how we handle your data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Children

The Services are not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with data, please contact us so that we can delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The revised version will be published on this page with an updated "Last updated" date. Where changes are significant, we will provide additional notice.