1. Overview
InvCo Funds Ltd. ("we," "us," or "our") operates the InvCo Funds investment platform at invco.live. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our platform, create an account, or make investments.
This policy applies to all users of our platform, including visitors, registered users, and investors. By using InvCo Funds, you consent to the practices described in this Privacy Policy.
We comply with applicable data protection laws including the General Data Protection Regulation (GDPR) for users in the European Economic Area, and equivalent legislation in other jurisdictions where we operate.
2. Data We Collect
We collect different types of information depending on how you interact with our platform:
2.1 Information You Provide Directly
- Registration data: Full name, email address, phone number, country of residence
- Identity verification: Government-issued ID documents when required for compliance
- Financial data: Cryptocurrency wallet addresses used for deposits and withdrawals
- Communications: Messages and inquiries you send to our support team
- Referral data: Referral codes and associated account connections
2.2 Information Collected Automatically
- Device information: IP address, browser type, operating system, device identifiers
- Usage data: Pages visited, features used, time spent on platform, click patterns
- Transaction data: Deposit amounts, withdrawal requests, cycle history, payout records
- Security data: Login timestamps, authentication attempts, session information
2.3 Data We Do NOT Collect
- Credit card or bank account numbers
- Social security numbers or national ID numbers (except where legally required)
- Passwords in plaintext (all passwords are encrypted with bcrypt)
- Biometric data of any kind
| Data Category | Examples | Legal Basis | Retention |
|---|---|---|---|
| Account Data | Name, email, phone | Contract performance | Duration of account + 2 years |
| Transaction Data | Deposits, withdrawals, cycles | Legal obligation | 7 years (financial records) |
| Device & Usage | IP address, browser, sessions | Legitimate interest | 90 days |
| Communications | Support tickets, emails | Contract performance | 3 years |
| Wallet Addresses | BTC, USDT addresses | Contract performance | 7 years (AML compliance) |
3. How We Use Your Data
We use your personal information solely for the following purposes:
- To create and manage your InvCo Funds account
- To process deposits, manage investment cycles, and execute withdrawals
- To verify your identity and comply with anti-money laundering regulations
- To send you transaction confirmations, payout notifications, and security alerts
- To calculate and credit referral commissions
- To detect and prevent fraud, unauthorized access, and security breaches
- To improve our platform, trading algorithms, and user experience
- To respond to your support inquiries and customer service requests
- To comply with applicable legal and regulatory obligations
4. Data Sharing
InvCo Funds does not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:
4.1 Service Providers
We engage trusted third-party service providers to assist with platform operations, including email delivery services, security monitoring, and blockchain analytics providers. All service providers are contractually bound to protect your data and may only use it for the specific services they provide to us.
4.2 Legal Requirements
We may disclose your information to law enforcement agencies, regulators, or other government authorities when required by law, court order, or to protect the rights, safety, or property of InvCo Funds or its users.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
5. Data Security
We implement comprehensive security measures to protect your personal information:
- AES-256 encryption for all data at rest and in transit
- TLS 1.3 for all communications between your browser and our servers
- Zero-knowledge password storage using bcrypt with salt rounds
- Regular security audits conducted by independent third-party firms quarterly
- Segregated cold storage for all client cryptocurrency funds
- 24/7 intrusion detection and anomaly monitoring systems
- Two-factor authentication available for all accounts
6. Cookies & Tracking
InvCo Funds uses cookies and similar tracking technologies to enhance your experience on our platform. We use the following types of cookies:
- Essential cookies: Required for the platform to function, including authentication and security cookies. These cannot be disabled.
- Functional cookies: Remember your preferences such as language, theme, and dashboard layout settings.
- Analytics cookies: Help us understand how users interact with our platform so we can improve it. All analytics data is anonymized.
You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. We do not use advertising or tracking cookies from third parties.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Specific retention periods are shown in the data table in Section 2.
Upon account closure, we will delete or anonymize your personal data within 30 days, except where retention is required by law (such as transaction records which must be retained for 7 years under financial regulations) or where we have a legitimate interest in retaining the data for fraud prevention purposes.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal retention requirements)
- Right to Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your data for certain purposes
- Right to Restrict Processing: Request restriction of how we process your data
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@invco.live. We will respond to all legitimate requests within 30 days. We may need to verify your identity before processing your request.
9. Children's Privacy
InvCo Funds is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account or provided us with personal data, we will immediately terminate the account and delete all associated data.
If you believe a minor has used our platform, please contact us immediately at privacy@invco.live.
10. International Data Transfers
InvCo Funds operates globally and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.
Where we transfer data from the European Economic Area to third countries, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision.
11. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:
- Sending an email notification to your registered email address
- Displaying a prominent notice on our platform
- Updating the "Last Updated" date at the top of this policy
We encourage you to review this policy periodically. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related inquiries, data subject requests, or concerns about how we handle your personal information, please contact our Data Protection team:
- Privacy Email: privacy@invco.live
- General Support: support@invco.live
- Data Protection Officer: support@invco.live
- Address: InvCo Funds Ltd., Data Protection Office, London, United Kingdom
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data appropriately.