Privacy Policy

Last Updated: August 12, 2026

1. Introduction

IOMI Technologies Inc ("IOMI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

Create an account (name, email address, password)
Complete your profile (ICP persona, age range, financial goals, risk preferences)
Manually enter assets, liabilities, transactions, or other financial data
Communicate with our AI Assistant or support team
Respond to surveys or feedback requests
Upgrade your subscription (payment information is processed by our third-party payment processor; we do not store full payment card details)

2.2 Information from Connected Accounts

When you connect a financial account (bank, brokerage, crypto exchange, etc.) through a third-party data provider such as Plaid, we may access:

Account balances and transaction history
Account holder information and account type
Asset positions and values
Other financial data available through the connection

This data is accessed in read-only mode and used solely to provide the Services. We do not initiate transactions or move funds.

2.3 Information Collected Automatically

When you use the Services, we may automatically collect:

Usage data (features used, pages viewed, time spent)
Device and browser information
IP address and approximate location
Session recordings and interaction patterns (via Hotjar/Contentsquare)
Referral source (UTM parameters, signup source)

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide and operate the Services — display your financial dashboard, calculate scores, generate insights, respond to AI queries
Improve the Services — analyze usage patterns, fix bugs, develop new features, train AI models (with your opt-in consent for model training)
Personalize your experience — tailor insights and recommendations to your ICP persona and financial profile
Communicate with you — send transactional emails (security alerts, billing), onboarding sequences, product updates (with your consent for marketing), and respond to support requests
Secure the Services — detect and prevent fraud, abuse, and unauthorized access
Comply with legal obligations — respond to lawful requests, enforce our Terms of Service

4. AI Model Training (Your Choice)

We offer you the choice to allow anonymized usage data to be used to improve IOMI's AI models. This is entirely optional.

What is used (when opted in):

Anonymized behavioral data (which features you use, how you interact with the AI Assistant)
General interaction patterns

What is never used:

Your assets, balances, or transaction details
Your name, email, or any personally identifiable information
Your account names, linked institution details, or credentials

You can enable or disable this at any time in Settings → Data & Privacy → AI Training Preferences. If you disable AI training, your data will not be used for future training, but models already trained on previously collected anonymized data will not be retrained.

5. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

Service providers — third parties who help us operate the Services (cloud hosting, analytics, customer support, email delivery). They are contractually bound to protect your data and use it only for the services we engage them for.
Financial data providers — such as Plaid, to facilitate account connections. Your use of these connections is also governed by the provider's terms and privacy policy.
Analytics providers — such as PostHog and Hotjar/Contentsquare, to understand usage patterns and improve the Services.
Legal compliance — when required by law, court order, or governmental regulation, or to protect our rights, property, or safety.
Business transfers — in connection with a merger, acquisition, or sale of assets, we may transfer your information to the acquiring entity.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain data for legal or compliance purposes.

Anonymized and aggregated data that does not identify you may be retained indefinitely for analytics and product improvement purposes.

7. Data Security

We implement commercially reasonable technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security audits.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access — request a copy of the information we hold about you
Correction — request that we correct inaccurate or incomplete information
Deletion — request deletion of your personal information (subject to legal exceptions)
Portability — request a machine-readable copy of your data
Opt-out — opt out of marketing communications or AI training data use
Withdraw consent — withdraw any consent you previously provided

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

If you are a California resident, please see Section 12 for your CCPA rights.

9. Cookies and Tracking

We use cookies and similar tracking technologies to operate, analyze, and improve the Services. These include:

Essential cookies — required for the Services to function (authentication, security)
Analytics cookies — help us understand how you use the Services (PostHog, Hotjar)
Marketing cookies — used to measure the effectiveness of our advertising (only with your consent)

You can manage your cookie preferences through your browser settings and our cookie consent banner.

10. Third-Party Services

The Services may integrate with or link to third-party services, including financial data providers (Plaid), analytics providers (PostHog, Hotjar/Contentsquare), payment processors (Stripe), and customer communication platforms (Customer.io, which we use to send service and, with your consent, marketing emails — it receives identity and subscription data such as your name, email address, plan, and billing status, but never your portfolio holdings or asset values). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before using their services.

11. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required by applicable law.

12. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete — request deletion of your personal information, subject to certain exceptions
Right to Opt-Out — the right to opt out of the sale of your personal information. IOMI does not sell your personal information.
Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights

To exercise your CCPA rights, contact us at [email protected]. We will verify your identity before processing your request.

13. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, in-app notification, or by posting the updated policy on our website. Your continued use of the Services after the updated policy becomes effective constitutes your acceptance of the changes.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

IOMI Technologies Inc
1 Sansome Street
San Francisco, CA 94104
United States
Email: [email protected]