Legal
Privacy Policy
Last updated: May 1, 2026
This Privacy Policy describes how InvestArt, LLC and its affiliates (collectively, “InvestArt”) collect, use, disclose, and safeguard personal information when you visit investart.com, use the InvestArt mobile application, open an account, or otherwise interact with us. It also serves as our annual privacy notice under the Gramm-Leach-Bliley Act (“GLBA”), Regulation S-P, and Regulation S-AM.
1. Information We Collect
Identifiers and contact data
Name, postal address, email, phone number, date of birth, government-issued identification numbers (SSN/ITIN, passport, driver's license), photograph and selfie used for identity verification.
Financial and suitability data
Bank account and ACH routing details, brokerage account numbers, source-of-funds documentation, accredited-investor evidence, net worth and income disclosures, investment objectives, time horizon, and risk tolerance.
Transaction data
Subscription amounts, holdings, distributions, capital calls, secondary-market bids and asks, settlement records, and tax reporting (Forms 1099 and Schedules K-1).
Device and usage data
IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, click-stream data, and approximate geolocation derived from IP.
Cookies and similar technologies
Strictly necessary cookies for authentication, performance cookies (Google Analytics 4), and marketing pixels (Meta CAPI, LinkedIn Insight). You may opt out via the cookie preference center on the Site.
2. How We Use Information
- To provide, maintain, and improve the Site, the Trading Market, and the Price Database.
- To verify identity, perform KYC/AML and OFAC screening, and assess suitability and accreditation.
- To service your account, execute subscriptions and redemptions, and report tax information.
- To communicate Offering availability, account notices, and required disclosures.
- To detect, prevent, and respond to fraud, security incidents, and unlawful activity.
- To comply with legal and regulatory obligations under the Securities Act, Exchange Act, Investment Advisers Act, Bank Secrecy Act, and FINRA rules.
3. How We Share Information
We share personal information with: (i) affiliates including InvestArt Advisers, LLC; (ii) service providers acting as processors (custodian, transfer agent, broker-dealer, escrow agent, KYC vendor, cloud hosting, payment processor); (iii) regulators, self-regulatory organizations, and law enforcement when required by law; and (iv) successors in connection with a merger, financing, or sale of assets. We do not sell personal information for monetary consideration.
4. GLBA Notice — Sharing for Marketing
We do not share nonpublic personal information with non-affiliated third parties for their own marketing purposes. We may share with affiliates for everyday business purposes; you cannot limit this sharing under federal law.
5. Your Rights
California (CCPA/CPRA)
Right to know, access, delete, correct, and limit use of sensitive personal information; right to opt out of "sharing" for cross-context behavioral advertising; right to non-discrimination. Submit requests via privacy@investart.com.
European Economic Area / United Kingdom (GDPR/UK GDPR)
Right of access, rectification, erasure, restriction, portability, and to object. Lawful bases include contractual necessity, legal obligation, and legitimate interests. Our EU representative is identified in our Schrems II transfer assessment.
Other U.S. states
Residents of Colorado, Connecticut, Virginia, Utah, Oregon, Texas, and Montana have analogous rights under applicable state privacy laws.
6. Data Retention
We retain personal information for as long as necessary to provide services and to comply with our legal obligations under SEC Rule 17a-4, FINRA Rule 4511, IRS recordkeeping rules, and applicable AML laws (generally 5–7 years after account closure).
7. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information consistent with the SEC's Regulation S-P safeguards rule, including encryption in transit (TLS 1.2+) and at rest (AES-256), least-privilege access, MFA, SOC 2 Type II–audited cloud infrastructure, and ongoing penetration testing.
8. Children
The Site is not directed to children under 18. We do not knowingly collect personal information from minors.
9. Changes
Material changes will be communicated by email or in-app notice prior to taking effect.
10. Contact
Privacy Officer, InvestArt, LLC — 1 World Trade Center, 57th Floor, New York, NY 10007 — privacy@investart.com.
See also: Terms of Use, Important Disclosures.
