Assets Flow

The Smart Shield for Real Estate Investors

Back to Home
English עברית

Privacy Policy

Last Updated: June 25, 2026

Welcome to Assets Flow ("we", "our", or "the App"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when using the Assets Flow application.

1. Information We Collect

1.1 Personal Information

When you register for the App, we collect the following information:

1.2 Financial and Investment Data

1.3 App Usage Information

1.4 Subscription History and Tier-Migration Audit Data

When we migrate your account between tiers (for example, on discontinuation of the Premium tier), we retain a record in our migrations Firestore collection containing the following data items:

Legal basis: our legitimate interest in maintaining accurate records for tax, accounting, audit, and dispute-resolution purposes under applicable tax and accounting law, and performance of our contract with you for subscription fulfillment. Retention period: 7 years from the migration date, to satisfy tax and regulatory record-keeping obligations. Recipients: this data is NOT shared beyond Paddle (acting as our Merchant of Record, who already processes the underlying subscription data) and named AssetsFlow operators who execute and audit the migration. Your rights: you may request access, rectification, or erasure of this data under Section 7, subject to our legal-retention obligations.

2. Collection and Use of Information

2.1 Collection Purpose

We collect personal and financial information to:

2.2 Legal Basis for Processing

We process information based on:

3. Data Classification and Sharing

3.1 Data Classification

We classify data into two categories:

3.2 Lead Sharing and Business Referrals

With your explicit consent, we may share your contact information with investment companies, property developers, or financial service providers as a qualified lead. This sharing occurs only when:

We do not sell your private investment data (amounts, returns, financial plans, payment records) to any third party. Only basic contact information (name and email) and expressed investment interests may be shared with verified business partners.

Partner companies are contractually obligated to use shared information solely for legitimate business outreach and to comply with applicable privacy laws.

3.3 Service Providers

We use third-party services to operate the app:

All service providers are committed to protecting your data in accordance with privacy laws.

4. Investment Verification and Risk Assessment (I-SCAN)

4.1 I-SCAN Service

Assets Flow provides access to the I-SCAN verification system, which checks companies and investment opportunities against regulatory alert databases, including the International Organization of Securities Commissions (IOSCO) and participating financial regulators worldwide.

4.2 No Guarantee of Fraud Detection

IMPORTANT DISCLAIMER: I-SCAN is a risk assessment tool, not a guarantee of legitimacy. By using this service, you acknowledge and agree that:

4.3 Your Responsibility

You are solely responsible for conducting your own due diligence before making any investment decision. I-SCAN is one tool among many and should not be your only source of verification. We strongly recommend:

Assets Flow and its operators shall not be liable for any investment losses, fraud, or damages resulting from reliance on I-SCAN results.

5. Foreign Exchange (FX) Calculator

5.1 Informational Purpose Only

The FX Calculator feature provides estimated currency exchange rates, transfer fees, and cost comparisons between financial institutions for informational purposes only.

5.2 Rate and Fee Disclaimers

IMPORTANT: Exchange rates, transfer fees, and other costs displayed in the FX Calculator:

5.3 Independent Verification Required

Before initiating any currency transfer or financial transaction, you must:

Assets Flow shall not be liable for any financial losses, currency exchange losses, or transfer fees incurred based on FX Calculator estimates.

6. Data Security

6.1 Security Measures

We implement advanced security measures:

6.2 Data Encryption Details

Private investment data is encrypted on your device before being sent to our servers. Each user has a unique encryption key stored securely in their private data store. Even our own systems cannot decrypt your private investment data without your authentication.

Note: Public data (company names, project types, countries, currencies) is not encrypted as it is intended to be visible to other users for investment discovery purposes.

6.3 Password Storage

We do not store passwords in plain text. We use Google Authentication to ensure passwords are securely managed.

6.4 No Absolute Security Guarantee

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights as a User

7.1 Access to Information

You have the right to:

7.2 How to Exercise These Rights

Contact us through the app or email service@assetsflow.work

8. Data Retention

8.1 Retention Period

We retain your personal information while your account is active. After account closure, personal data will be deleted within 90 days, except as required by law.

8.2 Storage Location

Data is stored on Firebase (Google) servers in secure data centers.

9. Children's Privacy

The app is NOT intended for children under 16. We do not knowingly collect information from children.

10. Limitation of Liability

10.1 No Investment Advice

Assets Flow is an information management platform, not a registered investment advisor. We do not provide personalized investment advice, recommendations, or suitability assessments. All information provided through the Platform is for general informational purposes only.

10.2 User Responsibility

You are solely responsible for:

10.3 Disclaimer of Warranties

THE PLATFORM AND ALL INFORMATION, CONTENT, MATERIALS, AND SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:

10.4 Limitation of Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ASSETFLOW, ITS OWNERS, EMPLOYEES, AGENTS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY:

This limitation applies regardless of the legal theory under which damages are sought.

10.5 Third-Party Content and Links

The Platform may contain links to third-party websites or display content from third parties. We do not endorse, verify, or guarantee the accuracy of any third-party content. We are not responsible for the privacy practices or content of third-party sites.

11. Changes to This Policy

We may update this policy from time to time. Changes will be published in the app and will take effect immediately.

12. Shield Reports — Separate Product Data Handling

AssetsFlow is launching a separate product, Shield Reports, available at shield.assetsflow.work. Shield Reports is a separate product with its own data-handling practices, its own privacy policy, and its own terms of service. This AssetsFlow Privacy Policy applies only to data collected and processed by the AssetsFlow dashboard application. Data collected by Shield Reports — including any sponsor due-diligence inputs, screening results, and Shield account information — is governed by Shield's own privacy policy, which is available on the Shield site. We do not transfer AssetsFlow account data to Shield Reports except as described in Shield's privacy policy and as you separately authorize.

13. Concern Flags — Privacy and Disclosure

Data items collected. When a Concern Flag is placed, we store the following data items: display name (displayName), email address, a short investment-status snapshot of the investor's status on the project at the time of the flag, a timestamp, and the disclosure opt-in status (optedInToDisclosure).

Legal basis. The legal basis for processing Concern Flag data is consent (for voluntary disclosure to co-investors who have also flagged and opted into disclosure) and legitimate interest (for record retention, internal audit, legal protection, and prevention of mechanism abuse — including retention of withdrawn flags for audit purposes).

Recipients. The personal identity details (display name + email) of a flag that has opted into disclosure will be disclosed only to co-investors who have also placed an active flag and opted into disclosure, and only after the 3-genuine-investor disclosure threshold described in the Terms of Service has been met. There is no transfer of Concern Flag data to third parties, third-party websites, or project content producers. Internal processing of flags (without identity disclosure) is performed by AssetsFlow systems for the purpose of disclosure-threshold calculation and audit.

Retention of withdrawn flags. Withdrawn flags are marked as "withdrawn" and retained in the system on the basis of legitimate interest (audit, abuse prevention, legal protection, and threshold-count preservation). The identity details of a withdrawn flag are no longer shown to other investors from the moment of withdrawal.

Right to withdraw and erasure. An investor may withdraw a flag at any time via the "My Concern Flags" screen in account Settings, or delete their account in full. Full account deletion will remove personal identity details from associated flag records (while retaining aggregate/anonymous records for audit purposes as required by law).

14. Contact Us

For questions or inquiries about this policy, please contact:

Email: service@assetsflow.work


This Privacy Policy was last updated on June 25, 2026