Privacy Policy

SecondStock, operated by LooX Commerce Europa, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable global privacy laws.

1. Data We Collect

Account data: name, email address, authentication credentials, and profile information you provide during registration.

Financial data: wallet balance, transaction history, investment records, bank withdrawal details, and payment information processed via Stripe.

Usage data: pages visited, interactions with the platform, device information, and IP address.

Company data: information submitted by companies seeking to list, including business plans and financial statements.

2. How We Use Your Data

We use your personal data to: process transactions and manage your wallet, facilitate share purchases and sales, verify your identity for compliance, send transactional and service notifications, provide AI Auto-Invest services, prevent fraud, and improve our platform.

3. Legal Basis (GDPR)

We process your data based on: your consent, the performance of a contract (providing investment services), compliance with legal obligations (anti-money laundering), and our legitimate interests (platform security and improvement).

4. Data Sharing

We share data with: Stripe (payment processing), our internal compliance team (bank withdrawal verification), and authorities when legally required. We never sell your personal data to third parties.

5. Data Security

We implement bank-grade security measures including encryption in transit and at rest, secure authentication, and regular security audits. Access to personal data is restricted to authorized personnel only.

6. Data Retention

We retain your data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Financial records are retained per applicable tax and AML regulations.

7. Your Rights

Under GDPR and global privacy laws, you have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent. To exercise these rights, contact us through the in-app support system.

8. International Transfers

As a global platform, your data may be processed in countries outside the EU. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data during international transfers.

9. Cookies

We use essential cookies for authentication and platform functionality. We do not use tracking cookies for advertising. You can manage cookie preferences through your browser settings.

10. Children's Privacy

SecondStock is not available to individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the platform or by email.

For privacy inquiries, contact our support team through the in-app ticket system.