Privacy Policy
At Invertirec S.A.S. we treat your personal data with the seriousness that comes with trusting a financial platform with your money. This policy explains, in plain language, what information we collect, how we use it and what rights you have as a data subject under Ecuador's Personal Data Protection Act (LOPDP) and its regulations.
1. Who is responsible
The data controller is Invertirec S.A.S., RUC 1793219874001, with registered office at Av. República del Salvador N36-140, Mansión Blanca Building, 11th floor, office 1104, Quito, Ecuador. Our Data Protection Officer can be reached at privacidad@invertirec.com.
2. What data we process
We process identification data (name, national ID or passport, date of birth), contact data (email, phone, address), economic data needed to comply with anti-money-laundering rules, navigation data (IP address, device identifiers, cookies) and communications you exchange with our advisors.
3. Why we use them
We use your data to verify your identity, execute investment contracts, pay interest, comply with tax obligations before Ecuador's Internal Revenue Service and anti-money-laundering obligations before the Financial and Economic Analysis Unit (UAFE), and to share commercial opportunities when you have given consent.
4. Legal basis
Each processing activity is grounded in a lawful basis: the performance of a contract, compliance with legal obligations applicable to crowdlending entities, Invertirec's legitimate interest in fraud prevention or your explicit consent, for example to receive newsletters or to use non-essential cookies.
5. Who we share information with
We share minimum information under contract with: custodian banks, public notaries to register collateral, external lawyers, auditors, competent authorities when formally required, and technology providers for hosting, analytics and electronic signature located in Ecuador and the European Union.
6. International transfers
Some technology providers are located outside Ecuador. In those cases we verify that the destination country offers an adequate level of protection or we sign standard contractual clauses equivalent to those recommended by the Personal Data Protection Authority.
7. How long we keep the data
For as long as the contractual relationship is active and afterwards for the periods required by Ecuadorian tax, commercial and anti-money-laundering rules, which in some cases reach ten years from the last operation.
8. Your rights
You have the right to access, rectify, delete, object to, restrict the processing of and port your data, as well as not to be subject to automated decisions. You may exercise them by writing to privacidad@invertirec.com attaching a copy of your ID. We will respond within fifteen business days.
9. Security
We apply encryption in transit and at rest, environment segregation, multi-factor authentication for our team and regular audits. Even so, no system is absolutely invulnerable, so we ask you to take care of your credentials.
10. Complaints
If you believe we have not handled your request you may file a complaint with Ecuador's Personal Data Protection Authority. In any case, we appreciate it if you reach out to us first so we can try to solve your concern.