Aurifisc is a software-as-a-service platform providing AI-powered portfolio recommendation tools for licensed financial advisors. References to "Aurifisc", "we", "us", or "our" in this policy refer to Aurifisc and its operators.

We collect the following categories of data:

We use the data we collect to:

• Provide and operate the Aurifisc platform
• Generate AI-powered portfolio recommendations
• Create and store client profiles and recommendations
• Generate PDF reports for advisor use
• Authenticate your account and maintain security
• Send transactional emails (account verification, password reset)
• Improve the Service based on usage patterns
• Comply with legal and regulatory requirements

Aurifisc uses the following third-party services to operate the platform:

• OpenAI — Portfolio recommendations and suitability notes are generated using OpenAI's GPT models. Client profile data is sent to OpenAI's API to generate recommendations. OpenAI's privacy policy applies to this data processing.
• Supabase — We use Supabase to store advisor accounts, client profiles, and recommendations. Data is stored in secure, encrypted databases.
• FRED (Federal Reserve) — We fetch publicly available market data including Treasury yields and interest rates. No personal data is shared with FRED.

We do not share personal data with any third party for marketing or advertising purposes.

As a financial advisor using Aurifisc, you are the data controller for your clients' personal information. You are responsible for:

• Obtaining appropriate consent from clients before entering their data
• Complying with applicable privacy laws regarding client data
• Maintaining appropriate data security practices
• Notifying clients if their data is processed by AI systems

Aurifisc acts as a data processor for client personal information entered by advisors. We process this data only as instructed by advisors through use of the Service.

We implement industry-standard security measures to protect your data including:

• Encryption of data in transit using TLS/HTTPS
• Encryption of data at rest in our database
• Row-level security ensuring advisors can only access their own data
• Secure authentication via Supabase Auth
• Regular security reviews and updates

Aurifisc handles nonpublic personal financial information in accordance with the Gramm-Leach-Bliley Act (GLBA) and implements appropriate administrative, technical, and physical safeguards to protect this information against unauthorized access, use, or disclosure.

We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory compliance purposes.

Recommendation and client data may be retained for up to 7 years to support regulatory compliance and audit requirements applicable to financial advisory businesses.

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Portability — Request your data in a portable format
• Objection — Object to certain processing of your data

To exercise any of these rights, contact us at advisornest.app@gmail.com

Aurifisc uses session cookies to maintain your login state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this may prevent you from logging in to the Service.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service. Your continued use of Aurifisc after notification constitutes acceptance of the updated policy.