Information we may collect
Enigma may collect information supplied directly by investors, including name, email address, telephone number, country, state or province, city, street address and postal code.
Account records may also include authentication identifiers, account status, verification status, compliance declarations, legal-document acceptance records, investment records, portfolio information, transaction records, payment identifiers and receipts.
When identity verification is required, Enigma may collect copies of identity documents such as a passport or driver's license and associated review records.
Technical records may include IP address, browser or device information, timestamps, security events and application activity.
How information may be used
Information may be used to create and administer investor accounts, authenticate users, provide account information, process funding instructions, issue receipts, maintain investment and transaction records, and provide customer support.
Information may also be used for identity verification, manual compliance and risk review, fraud prevention, security monitoring, auditing, recordkeeping and other activities reasonably necessary to operate and protect the platform.
Service providers and disclosures
Enigma may use third-party technology and infrastructure providers to operate parts of the platform. These may include cloud hosting, database, authentication, email, payment, market-data and security providers.
Information may be disclosed when reasonably necessary to provide those services, investigate misuse, protect users or the platform, enforce agreements, or respond to legally valid requests and obligations to the extent applicable.
Enigma does not treat the sale of personal information as part of its intended investor platform business model.
Identity and KYC documents
Identity documents are sensitive. Enigma's current platform stores KYC documents in private storage and uses time-limited access links for authorized review.
Investors should never upload wallet seed phrases, private keys, account passwords or unrelated confidential credentials as identity documentation.
Security
Enigma uses administrative, technical and application controls intended to protect information against unauthorized access, alteration, disclosure and destruction.
No method of storage, transmission or processing can be guaranteed completely secure. Investors are responsible for protecting their login credentials and promptly reporting suspected unauthorized access.
Retention
Enigma may retain account, transaction, compliance, identity, security and legal-acceptance records for as long as reasonably necessary for service delivery, security, dispute handling, legitimate business purposes and applicable legal or recordkeeping obligations.
Privacy choices and requests
Depending on applicable law, an individual may have rights regarding access, correction, deletion, restriction or other handling of personal information.
Some records may need to be retained even after an account is closed where retention is reasonably required for security, transaction, compliance, legal or recordkeeping purposes.
International processing
Platform infrastructure and service providers may process information in jurisdictions different from an investor's place of residence. Applicable safeguards and requirements depend on the relevant jurisdictions and service arrangements.
Children
The Enigma investor platform is not intended for children. Account access is intended for persons with legal capacity to enter the applicable agreements and satisfy Enigma's account requirements.
Contact and policy changes
Enigma may update this policy as its services, technology, providers or legal requirements change. Material revisions should be reflected by an updated effective date.
Privacy questions may be directed to info@enigmaservicesllc.com.
Investors should also review the Terms of Use and Risk Disclosure.