InvestaX is a Singapore licensed, Security Tokens investment platform, using blockchain technology and smart contracts and we ensure to protect the privacy of your personal data in accordance with the Personal Data Protection Act, 2012 of Singapore (“PDPA”) and any other applicable laws.

This Privacy Policy (“Privacy Policy”) describes the way in which IC SG PTE LTD. (UEN-201300459N), a company incorporated in Singapore (“InvestaX, “we”, “us”, “our”) collects, uses, shares, discloses and protects information about you, including personally identifiable information, in connection with your access to our website https://investax.io/(“Site”) including but not limited to access to our primary issuance platform (“Platform”)

The term “you” or “User” as used herein refers to any member, user or viewer of our Site, including, but not limited to, any real estate developer, owner, agent, sponsor, operating company seeking funding for its security token offering project, or any company issuing Security Tokens in connection with fundraising activities (collectively the “Offering Companies”) investors and issuers.

By continuing to use our Site, you signify that you have read and understood this Privacy Policy. If you do not wish to be bound by the terms of this Privacy Policy, please do not access or register on the Site.

This Privacy Policy is an agreement between you and InvestaX, its subsidiaries and affiliated entities (collectively, “us”, “we” or “InvestaX”) regarding the treatment of the personal data you provide to us through the Site. 

1. CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy from time to time and the updated versions will be posted on our Site and date stamped so that you are aware of when the Privacy Policy was last updated. Please check back frequently to see any updates or changes to this Privacy Policy. If we make any material changes to this Privacy Policy, we will provide notice including by banner on our Site or may also send you an email about the same. Your continued access or use of the Site after making any changes constitute your acceptance of the new Privacy Policy.

2. PERSONAL DATA COLLECTION

1. How we collect and receive Personal Data

We may collect and receive personal information from you when -:

1. You visit our Site and register an account with us;
2. You contact us through telephone, e-mail, customer support, social media or our Site;
3. You fill forms on our Site/Paltform requesting demonstration of our services or for joining our mailing lists;
4. You respond to any mails, letters, surveys that we may send or conduct.
5. You conduct a transaction or fundraise or issue Digital Securities on our Platform;
6. You enter into agreements with us or are referred by any of our business partners and third parties

(b) Types of Personal Data we collect from you

We collect personal, financial, technical, legal and other data relating you, including but not limited to the following-:

• Personal data required to verify your identity, such as your name, home address, telephone number, country of citizenship, date of birth, and gender
• Identity Documents such as a passport, NRIC, driving license, utility bill etc.
• Personal and financial data necessary to assess your eligibility to invest in the projects listed on the Platform. Specifically, Users who are accredited investors will need to provide financial information supporting their accredited investor status.
• Information about your investment preferences.
• Information from sponsors, issuers with regard to their project, purpose of fundraising etc.
• Information regarding execution of contracts, consents or agreements with regards to use of our services
• Payment related information such as bank account, credit card or other payment details
• Personal data relating to wallets, keys and blockchain addresses.
• Information with regard to source of funds
• Information about your visits to and use of this Site to help us maintain the appropriate features, functionality and user experience
• In addition, we gather names and email addresses of Users who contact us through the Site with questions about our company or our Platform. We collect this information for the sole purpose of responding to such inquiries and do not store the contact information unless requested by these people (e.g. applicants who submit resumes).

To create an account with InvestaX, you must provide us with your name and a valid email address. Users may also create an account using social media credentials as provided for on the Site, such as Facebook or LinkedIn. These services will verify your identity, and you may choose to provide certain personal data to us to pre-populate our sign-up form. In doing so, you expressly consent to InvestaX collecting your personal data that may be available through such social media networks. 

We do not collect more personal data than is necessary for the purposes for which they are collected.

3. PERSONAL DATA STORAGE

We shall implement the necessary safeguards to securely store Personal Data, using our offline and online technological capabilities, as appropriate. We will keep Personal Data for as long as necessary, in accordance with this Privacy Policy and as required by any applicable law, and once this time period has expired, we will delete such Personal Data accordingly.

4. WEB-RELATED INFORMATION COLLECTION

When you visit the Site, we may send one or more cookies to your computer. “Cookies” are small text files containing a string of alphanumeric characters that may be placed on your web browser when you visit our Site that may convey anonymous information about your preferences and how you browse the Site to us. However, it does not collect personal data about you.

We use cookies when you sign in, to keep track of your personal session, including some account identifiers so that we can ensure that you are the only person making changes to your account. We also use cookies to track your activity on the Site/Platform as a unique person.

All of this information is stored in an encrypted form, and no personal information about you is stored. You can set your web browser to inform you when cookies are used or to prevent cookies from being used. Please note, however, that if you decline to use cookies, the Site/Platform’s performance may be affected, or you may be prevented from using some of our services. The Site uses Google Analytics, a web traffic analysis service provided by Google Inc. (“Google”).

Please refer to http://www.google.com/policies/privacy/partners to find out more about how Google uses data when you use our Site and how to control the information sent to Google. You may prevent Google’ s collection and processing of data by using the Google Ads Settings page or downloading and installing their browser plug-in (https://tools.google.com/dlpage/gaoptout).

In addition, we (or our service providers, such as Google Analytics) may also collect technical information related to your use of our services. This may include (but is not limited to):

• information regarding which of our web pages you access
• the frequency of such access
• your product and service preferences
• your Internet Protocol (IP) address
• your browser type and version
• your internet service provider (ISP)
• your operating system
• referring or exit pages
• the dates and times that you visit the Site. 
• the search terms you enter on our Site

Such technical data may be used for administrative purposes, to assess the usage, value and performance of our online products and services, and to improve your experience with our services. As with cookies, the web surfing information collected is aggregated, anonymous "click stream" and transactional data, and is not associated with any Users as individuals.

5. PURPOSES OF COLLECTING PERSONAL DATA

The personal data we collect is required for legal, compliance or security purposes. Where possible, we will inform you of the specific purpose for which such personal data is being collected. 

The personal data collected on the Site/Platform maybe used by InvestaX for the following purposes:

• for the specific purpose for which the information was volunteered;
• to provide you the services available on our Platform including but not limited to services related to Security Tokens offering, security token offerings etc.;
• To carry out any instructions in respect of issuance of Digital Securities;
• To setup your digital wallets;
• to establish your ability to view offering materials and to make investments through the Platform;
• to enable the service providers, legal and tax advisors, fund administrators etc on our Platform to continue to fulfill their obligations/provide services including but not limited to processing the personal data for the purpose of legal, regulatory, audit and tax analysis of issuers project or for purposes of compliance, AML/CFT checks, due diligence etc.;
• to provide you with alerts, newsletters, education materials or information that you have specifically requested;
• promoting and marketing services and products subject to your exercise of the opt-out right;
• to communicate with you and respond to your queries;
• to process your application, inquiry or request;
• to verify your identity, conduct know your customer and other due diligence check as may be required;
• to guard against potential fraud and other illegal activities;
• to maintain regular communications with you as may be necessary to inform you of upcoming investment opportunities and other company updates;
• to conduct surveys, research and statistical analysis with the aim of helping us monitor or improve our Services to you;
• to comply with applicable laws, proceedings or inquiries from regulatory authorities and enforcement agencies in or outside of Singapore or similar purposes;
• for any other purposes permitted by applicable law.

6. WHY YOU SHOULD PROVIDE US PERSONAL DATA

In order to access/utilize our services, you need to voluntarily provide us your personal data. It may be absolutely impossible for us to provide you with certain products and services in the absence of certain key personal data about yourself, including your identity document, email, name, telephone number, etc. You acknowledge that if you withdraw your consent for the processing of your personal data by us then we may not be able to provide you any or all of our services.

7. THIRD PARTY DATA

In the course of utilizing our services, you may have to disclose personal data relating to third parties (such as a director or an employee etc.). In this regard, you represent to us that you have the authority to disclose such personal data for the purpose for which it may be required or any other purpose as mentioned in this Privacy Policy.

8. MINORS

Our services are not directed at persons under the age of 16. If you are a parent or guardian and you become aware that your child has provided us with personal data without your consent, please contact us. We will only process personal data of a child under the age 16 only where consent is given or authorized by the child’s parent or guardian. If we become aware that a child under the age of 16 has provided us with personal data without consent, we will delete such information from our files, including any accounts that may have been created.

9. HOW WE SHARE YOUR INFORMATION

InvestaX does not sell or rent personal information about its Users to third parties. We do, however, work with a number of trusted partners who perform vital functions as part of our operations.

In addition to Hubspot, we work with (among others) providers of hosting services for the Site, electronic signature providers, and electronic payment service providers, and other service providers who provide information technology and system administration services to us. We may engage third parties to help us to carry out certain other internal functions such as account processing, client services or other data collection relevant to our business; examples of such companies might include companies that perform data processing, compliance checks, reporting, tax or legal documentation, digital asset custody or escrow services. Personal data is shared with these third parties, including Offering Companies, only to the extent necessary for us to process the transactions you initiate or perform other specific services, like collections. Our partners are legally required to keep your information private and secure.

If you use our blog or other public forums on the Site, please note that any personal data you submit there is available to other Users. We are not responsible for the personal data you choose to submit.

We may share your personal data with law enforcement or other government agencies as required by law or for the purposes of limiting fraud. We reserve the right to disclose your personally identifiable information when we believe that disclosure is necessary to protect our rights or to comply with a judicial proceeding, court order or legal process. We further reserve the right to disclose any of your personal information that we believe, in good faith, appropriate or necessary to take precautions against liability, to investigate and defend against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of the Site or our Services, or to protect the rights, property or personal safety of InvestaX, its Users, Offering Companies, or any other person.

10. NOTIFICATIONS AND COMMUNICATIONS FROM OUR SITE

We will send you email notifications from time to time. These will typically relate to your activities on our Platform. In other cases, these notifications involve changes to various legal agreements or User policies. By using our services, you consent to receiving such service-related emails.

From time to time, we may also send user surveys, requests for user feedback regarding user experience and Site operations or marketing offers from us or on behalf of the Offering Companies, news letters relating to us. Completing these surveys or requests for feedback or acceptance of any offer is strictly voluntary. If you do not wish to receive these offers, surveys or user feedback emails, please opt out in any offer email you receive from us.

11. LINKS TO OTHER SITES

The Site may contain links to other websites which are not maintained by InvestaX. If you follow any links that direct you away from the Site, this Privacy Policy will not apply to your activity on the other websites you visit. We do not control the privacy policies or the privacy practices of any third parties. We encourage you to review each website’s privacy policy before disclosing any personal data.

12. TRANSFERRING INFORMATION OVERSEAS

The entity responsible for the management and use of the Site/Platform and personal data collected from them is IC SG Pte Ltd, a Singapore private limited company. However, InvestaX operates worldwide and may transfer personal information across national borders. Personal data collected through the Site/Platform may be stored and processed outside of Singapore or any other country in which InvestaX or its agents maintain offices.By providing your personal data and using the Site/Platform, you consent to any such transfer of information outside of your country. 

InvestaX may also disclose and/or transfer or share your personal information (i) to its trusted third party service providers, related parties, partners and affiliates (for example, companies that provide systems, web hosting including microsites of the Site and other IT services, and internal and external advisors and auditors, companies providing services in the area of safekeeping/custody of digital assets, fraud monitoring and detection, KYC checks and due diligence, cybersecurity and technology risk management etc); (ii) if required by applicable law; (iii) in connection with a reorganization or combination of our company with another company, (iv) if it believes that such disclosure is necessary to enforce or apply its terms of use and other agreements or otherwise protect and defend InvestaX’s rights, property or safety or that of our clients and other users of the Site; (vi) in order to comply with a judicial proceeding, court order or other legal obligation, or a regulatory or government inquiry; or (vi) with your consent.

InvestaX will not sell or release your personal information to third parties or allow them to direct market their products and services to you, except as otherwise stated in this Privacy Policy.

Where the third-party recipient of personal data is located in a country which has not been deemed by the European Commission to have adequate laws in place to protect it, we may transfer such personal data ensuring that it is compliant with or subject to appropriate safeguards as required by GDPR or any other applicable laws.

If you submit any personal information relating to another person on or through the Site to InvestaX and such personal information is protected by another state or country, you will be responsible for compliance with the applicable laws in so far as they relate to your right to use such personal information, your transfer of it to InvestaX, InvestaX storage of that personal information in electronic form on the Site and collection, use, processing and transfer of that personal information in accordance with this Privacy Policy.

13. SECURITY POLICY

We limit access to your personal data to those employees or third parties who have a legitimate business need to access such information. We conform to industry standards and best practices and maintain appropriate physical, electronic and procedural safeguards and controls to protect your information.

InvestaX takes the protection of your personal data seriously but, unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted through the Site; any transmission is at your own risk.

If your personal data is compromised as a result of breach of our security measures, we will promptly notify you of such a breach. 

InvestaX will never send you an email asking you for your login information. In general, you can protect yourself against phishing by never providing personal or login information via a link contained in an email; instead, go to the Site directly.

14. RETENTION OF YOUR PERSONAL DATA

We keep the personal data you provide us for as long as you continue to use our services and to comply with the applicable laws.

15. YOUR RIGHTS

For the residents of the European Economic Area or United Kingdom, we shall process their personal data in compliance with the EU General Data Protection Regulation 2016/679/EU (“GDPR”). InvestaX will be the Data Controller as defined under GDPR and in certain circumstances you will have certain rights, including the following-:

(a) Access to information

The GDPR gives you the right to find out whether we are processing your personal data and, where that is the case, to receive a copy of the personal data we process.We will endeavor to provide you with an account of your personal data in our possession or control within a reasonable time.Such account shall be in respect of how your personal data has been or may have been generally used or disclosed.

We reserve the right to charge you a reasonable administrative fee for carrying out such request. Where your personal data is inseparable from the personal data of others, we reserve the right to withhold your personal data if permitted by applicable law.

(b) Right to request rectification or erasure of personal data

You have the right to request the amendment of your personal data at any time if it is inaccurate. If it is incomplete, you have the right to have such personal data rectified. You also have the right to require us to delete your personal data as soon as possible by emailing us at privacy@investax.io where one of the following applies:

• the personal data is no longer necessary for which they were collected or otherwise processed
• the personal data has been unlawfully processed
• the personal data must be erased for compliance with a UK or EU legal obligation on us
• the personal data relates to a child under the age of 16
• you object to us processing the your Personal Data and we have no overriding legitimate grounds for the processing;
• you withdraw your consent to us processing your personal data and we have no other legal grounds for processing it

Please not that it may take up to 30 working days for any request for consent withdrawal to be reflected in our systems. You must agree that while offering you our services we are making use of the blockchain/distributed ledger technology which works around creating an immutable ledger. In case you request us for a deletion/erasure of your personal data we may not be able to provide you all or any services.

(c) Right to restrict personal data

You have the right to request the restriction of processing of personal data if you object to us processing your Personal Data and we have no overriding legitimate grounds for the processing or you think that is inaccurate, that we are processing it unlawfully, or that we no longer need it for the purposes for which it was collected. While we consider your request, we will stop processing your personal data within a reasonable time from the date we receive your request. We will notify you of our decision and any justifications for continuing to process your personal data as soon as we can.

(d) Right to withdraw your consent

If we process your personal data with your consent, you have the right to withdraw your consent at any time. This will not affect the legality of our processing of your personal data up until the point at which you withdraw your consent. Please also note that we may still need to process your personal data on other grounds, for example to fulfil a contract with you or as required by law.

(e) Right to object

You have the right to object, at any time, on grounds relating to your particular situation, to the processing of personal data. If we cannot demonstrate compelling legitimate grounds to continue processing the personal data, processing of such data will cease.

(f) Right to data portability

You have the right to request that we transfer your Personal Data that we have collected to another organization, or directly to you, under certain conditions.

16. DATA PROTECTION OFFICER AND ACCESSING YOUR RIGHTS

We have appointed a Data Protection Officer in compliance with the PDPA and if you wish to withdraw your consent to any or all use of your personal data, or request amendment, restriction or erasure of such personal data, or exercise any other of your rights, please contact the Data Protection Officer:

• Name: Nishtha Pandey
• Position name/title: Data Protection Officer
• Business email address: privacy@investax.io

Do note that if you withdraw your consent to any or all use of your personal data or request for erasure of your personal data, depending on the nature of your request, we may not be in a position to continue to provide services to you, or administer any contractual relationship already in place. Any withdrawal of consent or request to erase your personal data may also result in the termination of any agreements you have with us. Our legal rights and remedies in such an event are expressly reserved.

By giving or making available your personal data, you expressly agree and consent to the collection, use, processing and disclosure of your personal data in accordance with the terms of this Privacy Policy, including but not limited to, consenting and receiving communications and materials from us, from time to time.

17. GOVERNING LAW

This Privacy Policy shall be construed in accordance with the laws of Singapore.

Questions? Please email us at privacy@investax.io

Last updated: 17 February 2023