Privacy policy

1. General Terms

This Privacy Policy (hereinafter referred to as the “Policy”) establishes the rules and procedures governing the collection, processing, storage, use, and protection of personal data of users of the Envast platform (hereinafter referred to as the “Platform”).

Envast respects the privacy rights of its users and processes personal data solely for lawful purposes and in compliance with applicable laws and regulations.

By accessing or using the Platform, the User acknowledges and agrees to the terms of this Policy.

2. Information We Collect

The Platform may collect and process the following categories of personal information:

  • Full name (surname, first name, and patronymic, where applicable);
  • Mobile phone number;
  • Email address;
  • Date of birth and identification documents (passport, national ID card, or equivalent documents, where required);
  • Payment and banking information necessary for investment activities and financial transactions;
  • Technical and usage information collected during interaction with the Platform, including IP address, device type, browser information, and system log files;
  • Information collected through cookies and similar tracking technologies.

3. Purpose of Data Processing

Personal information collected by the Platform may be used for the following purposes:

  • Identifying and authenticating users;
  • Providing, managing, and improving investment-related services;
  • Establishing, maintaining, and fulfilling contractual relationships with users;
  • Processing financial transactions and maintaining accounting records;
  • Ensuring the security, integrity, and proper operation of the Platform;
  • Enhancing service quality and developing new products, features, and functionalities;
  • Complying with applicable laws, regulations, and requirements of competent governmental and regulatory authorities.

4. Data Storage and Protection

Envast implements appropriate technical, organizational, and legal measures designed to protect personal data against unauthorized access, disclosure, alteration, destruction, loss, or misuse.

Such measures include, but are not limited to:

  • Data encryption technologies;
  • Secure data storage infrastructure and protected servers;
  • Access control and authorization mechanisms;
  • Regular security monitoring, assessments, and audits.

5. Disclosure of Information to Third Parties

Personal information may be disclosed to third parties only under the following circumstances:

  • When required by applicable law or pursuant to a lawful request from authorized governmental authorities;
  • To banks, payment service providers, financial institutions, and other authorized partners for the purpose of executing transactions and providing Platform services;
  • With the User’s explicit consent.

Envast does not sell, rent, or disclose users’ personal information to third parties for advertising, marketing, or other commercial purposes without the User’s prior consent.

6. Cookies and Tracking Technologies

The Platform may use cookies and similar technologies to improve user experience, enhance system security, analyze Platform performance, and collect statistical information.

Users may manage, restrict, or disable cookies through their browser settings. However, disabling cookies may affect the availability and functionality of certain Platform features and services.

7. User Rights

Subject to applicable laws, users have the right to:

  • Access their personal data and obtain information regarding its processing;
  • Request correction, update, or rectification of inaccurate or incomplete information;
  • Request deletion of personal data where legally permissible;
  • Withdraw previously granted consent for data processing;
  • Submit inquiries, complaints, or requests regarding the processing of their personal information.

8. Data Retention

Personal data shall be retained only for as long as necessary to fulfill the purposes outlined in this Policy or as otherwise required by applicable laws and regulatory obligations.

Upon expiration of the applicable retention period, personal data will be securely deleted, destroyed, or anonymized.

9. Security Incidents

In the event of a security incident, data breach, or unauthorized access affecting personal information, Envast shall take all reasonable measures to mitigate potential risks and, where required by law, notify affected users and relevant authorities.

10. Amendments to this Policy

Envast reserves the right to amend, modify, or update this Privacy Policy from time to time.

Any amendments shall become effective upon publication on the Platform unless otherwise specified.

Users are encouraged to review this Policy periodically to stay informed of any updates.

11. Contact Information

For any questions, requests, or concerns regarding this Privacy Policy, the processing of personal data, or the exercise of user rights, users may contact Envast through the Platform or via the official communication channels provided by Envast.