Privacy policy

Ocular Wealth ("we", "us") runs this website and the investment accounts on it. This policy explains what personal data we collect, why, who we share it with and the choices you have. If you have a question about it, email support@ocularwealth.com.

We only collect what we need to run your account:

• Account details: your name, email address and a securely hashed version of your password (we never store the password itself).
• Identity verification (KYC), only if you choose to submit it: your legal name, date of birth, country, home address, document type and number, photos or scans of your identity document and a selfie holding it.
• Financial activity: deposits, investments, profits, withdrawals, your balance, the wallet addresses you give us and blockchain transaction hashes.
• Security data: whether two-factor authentication is on, an encrypted copy of your authenticator key, hashed backup codes, and records of security events.
• Technical data: your IP address (used briefly to limit repeated login and sign-up attempts) and the cookies listed below.
• Sign-in devices: the browser and device type, IP address and time of each browser you sign in from, so we can warn you about sign-ins from a new device.
• Messages: emails and notifications we send you, and anything you send to support.
• Live chat, if you use it: your name and email (or your account, when logged in), your messages and any photos you send, the page you started the chat from, your IP address, and when you were last active in the chat.

• To create and secure your account, log you in and protect it against unauthorised access.
• To process deposits, run your investment plans, pay out profits and send withdrawals.
• To verify your identity and meet anti-money-laundering, fraud-prevention and other legal obligations.
• To send you service emails and notifications (for example, deposit confirmations, security alerts and replies to support requests).
• To answer you in live chat, and to email you our reply if you have left the site before we answer.
• To keep records required by law and to resolve disputes.

We do not sell your personal data, and we do not use it for advertising.

Where data-protection laws such as the GDPR apply, we process your data to perform our contract with you (running your account), to comply with legal obligations (for example identity checks and record keeping), and for our legitimate interests in keeping the service secure and preventing fraud.

We only use cookies that the site needs to work. We do not use advertising or tracking cookies.

• session: keeps you logged in (up to 7 days).
• 2fa_pending: remembers, for up to 10 minutes, that you entered the right password and still need to enter your two-factor code.
• lang: remembers the language you chose.
• theme: remembers whether you chose light or dark mode.
• chat: if you start a live chat without logging in, links this browser to your chat so you can continue it (up to 30 days).
• device: a random id that lets us recognise a browser you have signed in from before, so we only send a new sign-in alert when it is really new (up to 1 year).

We share personal data only when needed to provide the service or when the law requires it:

• Service providers that host the site and send our emails, under contracts that require them to protect your data.
• Law enforcement, regulators or courts when we are legally required to, or to prevent fraud or protect our users.
• A buyer or successor if our business is sold or merged, under the same protections as this policy.

Withdrawals we have sent may appear in the "Recent payouts" list on our homepage. It shows only a shortened first name (for example J***n), the amount, the coin and when it was sent; never your full name, email or wallet address. To opt out, email support.

Blockchain transactions are public by nature. Anyone can see the addresses and amounts on a public blockchain, although they are not linked to your name there.

The live crypto and stock prices on the site are fetched by our servers from public market-data services. No personal data is sent to them.

We keep account and transaction records while your account is open and for as long as financial and anti-money-laundering laws require afterwards (often five years or more). Identity documents are kept for the same period. Other data is deleted or anonymised when it is no longer needed.

Passwords and backup codes are stored only as one-way hashes, and authenticator keys are encrypted. Identity documents are stored outside the public website and can only be opened by administrators. Connections to the site are encrypted, and you can add two-factor authentication to your account for extra protection. No system is perfectly secure, so please use a strong, unique password.

Depending on where you live, you may have the right to access, correct or delete your data, to object to or restrict how we use it, to receive a copy of it, and to complain to your local data-protection authority. To use any of these rights, email support@ocularwealth.com. We may need to keep some data where the law requires it, for example transaction records.

Our service providers may process data in other countries. When they do, we rely on appropriate safeguards such as standard contractual clauses.

Our service is only for people aged 18 or over. We do not knowingly collect data from anyone younger.

We may update this policy from time to time. We will change the date at the top of this page and, for significant changes, let you know by email or a notice on your dashboard.

For any privacy question or request, email support@ocularwealth.com.