Privacy Policy

keystone-io ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you use keystone-io.net, our mobile app and our investment services, why we collect it, and the choices you have.

keystone-io is operated by [Company legal name], registered under number [registration number], with its registered office at [registered office address]. We are the controller of the personal data described here.

We collect information in several ways:

• Directly from you — when you open an account, complete onboarding, fill in a form, or contact our team.
• Through our platform — when you log in, view your portfolio, place instructions or use the mobile app.
• From communications — emails, chat, calls and meeting notes with your advisor.
• From third parties — identity-verification providers, custodians, payment processors and public registers.
• From surveys and feedback you choose to give us.

Personal data includes your name, date of birth, residential address, email, phone number, government ID details, tax residency, bank account details, employment and income information, investment experience and account activity.

We use it to verify your identity, meet our know-your-customer (KYC) and anti-money-laundering (AML) obligations, assess suitability, run and service your account, send statements and important notices, prevent fraud, and improve our services. We do not sell your personal data.

We keep personal data only as long as needed for these purposes and to meet legal record-keeping requirements, after which it is securely deleted or anonymised.

We protect your information with 256-bit encryption in transit and at rest, mandatory two-factor authentication, role-based staff access and regular independent security reviews. Data may be stored on our own secured systems or with vetted cloud providers bound by confidentiality and data-protection terms.

Please keep your login details confidential and tell us promptly if your personal details change or if you suspect unauthorised access to your account.

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the site is used and improve our services. Strictly necessary cookies are always on; analytics and marketing cookies are used only with your consent.

You can accept, reject or change your cookie choices at any time through our cookie banner or your browser settings. Blocking some cookies may affect how the site works.

This policy also applies to the keystone-io mobile app. The app gives you the same account features as the web platform, and the same privacy protections apply to data processed through it.

Depending on the features you use, the app may ask for:

• Camera / photos — to upload identity documents during verification.
• Storage — to save statements and reports you download.
• Notifications — to send account alerts and security messages.
• Biometrics — to let you sign in with Face ID or fingerprint (handled by your device; we never receive your biometric data).
• Internet access — required for the app to function.

All permissions except internet access are optional and can be turned off in your device settings. If you prefer, you can use the web platform instead.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights or ask a question, contact our data protection team at legal@keystone-io.net. You also have the right to complain to your local data-protection authority.

We may update this policy from time to time. The "Last updated" date above shows when it last changed.