Privacy Policy

Introduction

Alloris ("we", "our", "us") is committed to protecting the privacy of individuals who visit our website and use our strategy execution software. This Privacy Policy describes how we collect, use, store and protect your personal data.

Data We Collect

• —Account information: name, email address, organization
• —Contact form information: investor type, preferred exchange and message content
• —Authentication data: encrypted credentials, two-factor authentication records
• —Usage data: platform activity, strategy configuration preferences, session logs
• —Technical data: IP address, browser type, device information, access timestamps
• —Communication data: support inquiries, correspondence records

How We Use Your Data

• —To provide and maintain the Alloris platform
• —To authenticate your identity and secure your account
• —To communicate with you regarding your account, platform updates and support
• —To respond to access and details requests
• —To comply with legal and regulatory obligations
• —To improve our platform and services

Data We Do Not Collect

• —We do not collect, store or have access to account balances on connected platforms
• —We do not collect or store withdrawal credentials
• —API keys provided for strategy execution are encrypted at rest and in transit

Legal Basis for Processing (GDPR)

• —Performance of contract: providing the platform services you have requested
• —Legitimate interest: improving our services, ensuring platform security and responding to inquiries
• —Legal obligation: compliance with applicable laws and regulations
• —Consent: where explicitly provided for specific communications

Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Upon account closure, personal data is deleted within 90 days unless retention is required by law.

Data Sharing

We do not sell personal data. We may share data with:

• —Infrastructure providers necessary to operate the platform (hosting, security)
• —Legal and regulatory authorities when required by law
• —Professional advisors under confidentiality obligations

Your Rights

Under applicable data protection laws, you may have the right to:

• —Access the personal data we hold about you
• —Request correction of inaccurate data
• —Request deletion of your data
• —Restrict or object to certain processing
• —Request data portability
• —Withdraw consent where processing is based on consent

To exercise these rights, contact privacy@alloris.one.

Cookies

We use essential cookies required for platform functionality and authentication. We do not use advertising or third-party tracking cookies.

International Transfers

Data may be processed in jurisdictions where our offices operate (United Kingdom, Poland, Portugal). All transfers comply with applicable data protection requirements.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform or via email.

Contact

For privacy inquiries: privacy@alloris.one