Privacy Policy

Introduction & Scope

This Privacy Policy (“Policy”) explains how GeFi Technologies (“GeFi”, “Company”, “we”, “us”, “our”) collects, uses, discloses, and protects personal information when you access our website, platform, or related services (“Services”). By using the Services, you consent to the data practices described in this Policy. If you do not agree, please discontinue use of the Services.

GeFi is committed to privacy-by-design principles. Our architecture leverages federated learning so that raw data remains locally with the user. We comply with applicable data protection laws, including GDPR, UK GDPR, CCPA/CPRA, and other financial data regulations.

1. Information We Collect

We collect information that identifies or can reasonably be linked to you (“Personal Information”). The type of data collected depends on your interaction with the Services.

• Information You Provide: Account data (name, email, organization), form submissions, model proposals, communications, and payment information processed by secure third-party providers.
• Automatically Collected Data: IP address, device identifiers, browser type, usage data, Platform performance metrics, and approximate geolocation for compliance checks.
• Third-Party Sources: Data from partners, integrations (e.g., HubSpot), and public market data. All enrichment data is anonymized.

We do not collect sensitive personal data unless required by law and only with explicit consent.

2. How We Use Your Information

We use collected data to operate, secure, and improve the Services, including to:

• Provide and maintain Services, including AI model operations and federated learning processes
• Personalize user experience and recommendations
• Ensure compliance, security, and fraud prevention
• Communicate about updates, support, and service notices
• Analyze and improve the Platform without accessing raw datasets
• Send marketing communications with user consent

3. Sharing of Information

We do not sell Personal Information. We may share data only in the following circumstances:

• Service Providers: With vendors such as HubSpot, cloud hosting, and payment processors under strict confidentiality and data processing agreements.
• Federated AI Participants: Only encrypted and anonymized model updates are shared—never raw datasets.
• Regulators & Audits: Compliance information may be shared when legally required.
• Business Transfers: In the event of a merger or acquisition, subject to notice.
• Legal Compliance: Where required by law or to protect rights, safety, or security.

4. HubSpot Forms & Integrations

Certain forms on our Site and Platform are powered by HubSpot. By submitting information through these forms:

• HubSpot processes submitted data (e.g., name, email, model proposals) on our behalf
• Cookies and analytics tools may be used by HubSpot with your consent
• Data is encrypted and handled in accordance with HubSpot’s privacy practices

For more information, please refer to the HubSpot Privacy Policy.

5. Data Security

We apply bank-grade protection measures, including:

• Encryption in transit and at rest
• Local-first data processing and sovereignty controls
• Role-based access controls and audit logs
• Incident response protocols with legally required notifications

Despite safeguards, no system is fully secure. Users are encouraged to maintain strong access controls on their devices.

6. Your Rights & Choices

Depending on your jurisdiction (e.g., GDPR, CCPA/CPRA), you may have the right to:

• Access, correct, or delete your Personal Information
• Withdraw consent for data processing
• Opt out of marketing or data sharing (where applicable)
• Exercise portability rights and request copies of stored data
• Submit complaints to a supervisory authority

Requests can be made by contacting our Privacy Officer. We will respond within applicable timeframes (e.g., 45 days for CCPA).

7. International Data Transfers

Where data is transferred outside your country of residence, we use lawful mechanisms such as Standard Contractual Clauses or adequacy decisions to protect the information.

8. Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect data from minors. If such data is identified, it will be deleted promptly.

9. Changes to This Policy

We may update this Policy periodically. Updates take effect upon posting, and the revised effective date will be reflected in the page header. Continued use of the Services indicates acceptance of the updated Policy.

10. Contact Information

If you have questions regarding this Privacy Policy, please contact:

Email: privacy(a)gefi.io

Address: [Insert Company Address]