Privacy Policy

1.1 Who We Are

AssetIndex is operated by Nexvira Technologies Ltd ("Nexvira", "we", "us"), a company registered in England and Wales. Our company number will be provided upon registration confirmation.

We act as the data controller for personal information processed through the AssetIndex platform.

1.2 Information We Collect

We collect only what is necessary to operate the platform and deliver its functionality.

a. Account Information

• Your name and email address (for authentication and communication).
• A password (encrypted using one-way hashing — we cannot view or recover it).

b. Asset Metadata

• Asset names, categories, descriptions, and your written instructions for trusted contacts.
• We do not collect:
  • Account numbers
  • Balances or valuations
  • Login credentials or PINs
  • Documents, certificates, or attachments

c. Trusted Contact Information

• Names, email addresses, and relationship descriptors of the trusted contacts you designate.

d. System Activity

• Check-in confirmations, grace period settings, and disclosure activity (used to operate the registry).
• Technical data such as IP address, browser type, and access times (used for security and abuse prevention).

e. Communications

• Emails and support correspondence sent through hello@assetindex.io or related verified channels.

1.3 How We Use Your Information

Your information is used solely to:

1. Authenticate your account and secure your sessions.
2. Maintain your encrypted asset registry.
3. Notify trusted contacts only under the disclosure conditions you have set.
4. Send transactional and security messages (e.g., warnings, confirmations).
5. Improve platform reliability and protect against fraud or abuse.

We do not use your data for advertising, analytics, or behavioural profiling.

1.4 Legal Basis for Processing (UK GDPR)

We process your information under the following lawful bases:

• Contract: to provide the registry service you have agreed to use.
• Legitimate interests: to ensure system integrity, prevent abuse, and maintain operational security.
• Consent: for optional communications and any future analytical or research features (which will always be opt-in).
• Legal obligation: where required by law or regulation.

1.5 Data Sharing

AssetIndex does not sell, lease, or share personal data with third parties for marketing.

We share data only:

• With the trusted contacts you have designated (only when disclosure conditions are met).
• With service providers acting under strict confidentiality (e.g., cloud hosting, email delivery, security monitoring).
• Where legally required (e.g., to comply with a court order or regulatory request).

All service providers are bound by data processing agreements and operate under our control.

1.6 Data Storage and Security

• Data is encrypted in transit (TLS) and at rest using industry-standard encryption.
• Authentication credentials are stored using one-way cryptographic hashing.
• Access to backend systems is restricted, monitored, and audited.
• We follow defence-in-depth principles, including segregation, monitoring, and continuous patching.

While no system can guarantee absolute security, we take all reasonable measures to protect your information.

1.7 Data Retention

• Account data is retained for as long as your registry remains active.
• You may delete your account or specific records at any time.
• Audit logs may be retained for a limited period (typically 12 months) for security and compliance.
• Disclosure logs may be retained as part of audit trails for legal or operational integrity.

1.8 Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access your personal data.
• Correct or update information.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Export your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at hello@assetindex.io.

1.9 International Data Transfers

Data is primarily stored within the UK and the European Economic Area (EEA). Where transfers occur to other regions (e.g., cloud infrastructure providers), they are made under appropriate safeguards including Standard Contractual Clauses or equivalent UK protections.

1.10 Children's Privacy

AssetIndex is not intended for users under 18 years of age. We do not knowingly collect data from minors.

1.11 Changes to This Policy

We may revise this policy from time to time. Significant changes will be communicated through the platform or by email at least 30 days before they take effect.

1.12 Contact

For privacy questions or to exercise your data rights:

Email: hello@assetindex.io

Postal: Nexvira Technologies Ltd, United Kingdom