Privacy Policy

This Privacy Policy explains how Assetzyx collects, uses, stores and shares information when you use the Assetzyx website and software service. Assetzyx is a technology platform for organizing, tracking and managing asset information; it is not a bank, broker, investment adviser, financial adviser, custodian, insurer or tax or legal adviser.

When an organization provides you access, that organization may separately control how information in its workspace is managed. You should direct organization-specific privacy questions to the organization administrator as well as Assetzyx where appropriate.

Information you provide

• Account information: name, email address, phone number when provided, authentication details and profile preferences.
• Asset and financial-related information: descriptions, acquisition information, values, currencies, transactions, income, expenses, liabilities, ownership interests and notes you choose to enter.
• Organization information: organization names, member roles, permissions and professional manager relationships.
• Documents: deeds, appraisals, titles, contracts, receipts and other files you choose to upload.
• Communications: information you send when requesting support or providing feedback.

Information collected automatically

We may collect device, browser, operating system, approximate location derived from IP address, pages viewed, dates and times of use, referring pages, error reports, performance information and security events. We may use cookies, local storage and similar technologies for sign-in sessions, preferences, security and service operation.

Assetzyx is designed to store asset records, not the secrets used to access external accounts. Do not enter passwords, PINs, security answers, full banking credentials, private keys, authentication codes or similar secrets into asset fields, notes or documents.

For bank and cash records, the product is designed to use descriptive account information and references rather than full account credentials. You are responsible for reviewing documents before upload and removing information that is not needed for your intended use.

• Provide, maintain and improve the service.
• Create and manage accounts, organizations and permissions.
• Store and display asset records, valuations, activity, documents and reports at your direction.
• Authenticate users, enforce access controls, investigate misuse and protect the service.
• Respond to support requests and send service-related communications.
• Understand product performance and correct errors.
• Meet legal obligations and enforce our agreements.

Assetzyx uses technical and organizational safeguards appropriate to the nature of the service. Current product safeguards include authentication, organization-level data isolation, row-level access policies, role-based permissions, private document storage, audit history and server-side permission checks. Sensitive provider credentials are kept away from browser code.

No system can guarantee absolute security. You are responsible for using a strong, unique password, protecting access to your email and devices, and promptly reporting suspected unauthorized access.

We do not disclose your information to third parties except as described in this policy, at your direction, or as reasonably necessary to operate and protect the service.

• Organization members and authorized managers: information is available according to assigned roles and explicit organization relationships.
• Service providers: vendors may process information for hosting, authentication, storage, email, monitoring, support and related infrastructure under appropriate contractual restrictions.
• Legal and safety reasons: information may be disclosed when reasonably necessary to comply with law, legal process, protect rights and safety, investigate fraud or defend legal claims.
• Business changes: information may transfer in connection with a merger, financing, acquisition, reorganization or sale of assets, subject to applicable safeguards.

Assetzyx does not sell full banking credentials because the product does not ask users to store them.

Assetzyx may use essential cookies and browser storage to keep you signed in, preserve security state, remember preferences and operate the service. We may also use limited analytics or diagnostics to understand performance and errors. Browser controls may allow you to remove or block these technologies, but blocking essential storage can prevent sign-in or other features from working.

We retain information while an account or organization is active and as reasonably necessary to provide the service, maintain historical and audit records, resolve disputes, enforce agreements, meet legal obligations and protect users. Retention periods may vary by information type and operational need.

You may request account deletion using the contact channel designated by Assetzyx. Deletion may require verification and may be limited where information must be retained for security, legal, fraud-prevention, backup or organization-record purposes. Organization administrators may control records in shared workspaces.

Depending on your location and relationship with Assetzyx, you may have rights to request access, correction, deletion, restriction, objection or a portable copy of certain personal information. You may update some profile and asset information directly in the service.

To make a request, use the official support contact published by Assetzyx. We may need to verify your identity and authority before responding. If an organization controls your workspace, we may direct the request to that organization.

Assetzyx is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact Assetzyx so the matter can be reviewed.

We may update this policy as the service changes. The “Last updated” date will identify the latest version. Material changes may be communicated through the service or another appropriate channel. Continued use after an update means the revised policy applies to future use, subject to applicable requirements.

Business owner action required: Insert the official privacy and support email address before production launch. No physical address or phone number is stated because none is currently configured.

Privacy contact: [PRIVACY EMAIL TO BE PROVIDED]