Legal

Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how InvestArt, LLC and its affiliates (collectively, “InvestArt”) collect, use, disclose, and safeguard personal information when you visit investart.com, use the InvestArt mobile application, open an account, or otherwise interact with us. It also serves as our annual privacy notice under the Gramm-Leach-Bliley Act (“GLBA”), Regulation S-P, and Regulation S-AM.

1. Information We Collect

Identifiers and contact data

Name, postal address, email, phone number, date of birth, government-issued identification numbers (SSN/ITIN, passport, driver's license), photograph and selfie used for identity verification.

Financial and suitability data

Bank account and ACH routing details, brokerage account numbers, source-of-funds documentation, accredited-investor evidence, net worth and income disclosures, investment objectives, time horizon, and risk tolerance.

Transaction data

Subscription amounts, holdings, distributions, capital calls, secondary-market bids and asks, settlement records, and tax reporting (Forms 1099 and Schedules K-1).

Device and usage data

IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, click-stream data, and approximate geolocation derived from IP.

Cookies and similar technologies

Strictly necessary cookies for authentication, performance cookies (Google Analytics 4), and marketing pixels (Meta CAPI, LinkedIn Insight). You may opt out via the cookie preference center on the Site.

2. How We Use Information

  • To provide, maintain, and improve the Site, the Trading Market, and the Price Database.
  • To verify identity, perform KYC/AML and OFAC screening, and assess suitability and accreditation.
  • To service your account, execute subscriptions and redemptions, and report tax information.
  • To communicate Offering availability, account notices, and required disclosures.
  • To detect, prevent, and respond to fraud, security incidents, and unlawful activity.
  • To comply with legal and regulatory obligations under the Securities Act, Exchange Act, Investment Advisers Act, Bank Secrecy Act, and FINRA rules.

3. How We Share Information

We share personal information with: (i) affiliates including InvestArt Advisers, LLC; (ii) service providers acting as processors (custodian, transfer agent, broker-dealer, escrow agent, KYC vendor, cloud hosting, payment processor); (iii) regulators, self-regulatory organizations, and law enforcement when required by law; and (iv) successors in connection with a merger, financing, or sale of assets. We do not sell personal information for monetary consideration.

4. GLBA Notice — Sharing for Marketing

We do not share nonpublic personal information with non-affiliated third parties for their own marketing purposes. We may share with affiliates for everyday business purposes; you cannot limit this sharing under federal law.

5. Your Rights

California (CCPA/CPRA)

Right to know, access, delete, correct, and limit use of sensitive personal information; right to opt out of "sharing" for cross-context behavioral advertising; right to non-discrimination. Submit requests via privacy@investart.com.

European Economic Area / United Kingdom (GDPR/UK GDPR)

Right of access, rectification, erasure, restriction, portability, and to object. Lawful bases include contractual necessity, legal obligation, and legitimate interests. Our EU representative is identified in our Schrems II transfer assessment.

Other U.S. states

Residents of Colorado, Connecticut, Virginia, Utah, Oregon, Texas, and Montana have analogous rights under applicable state privacy laws.

6. Data Retention

We retain personal information for as long as necessary to provide services and to comply with our legal obligations under SEC Rule 17a-4, FINRA Rule 4511, IRS recordkeeping rules, and applicable AML laws (generally 5–7 years after account closure).

7. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information consistent with the SEC's Regulation S-P safeguards rule, including encryption in transit (TLS 1.2+) and at rest (AES-256), least-privilege access, MFA, SOC 2 Type II–audited cloud infrastructure, and ongoing penetration testing.

8. Children

The Site is not directed to children under 18. We do not knowingly collect personal information from minors.

9. Changes

Material changes will be communicated by email or in-app notice prior to taking effect.

10. Contact

Privacy Officer, InvestArt, LLC — 1 World Trade Center, 57th Floor, New York, NY 10007 — privacy@investart.com.

See also: Terms of Use, Important Disclosures.