Privacy Policy

DRAFT FOR REVIEW — Privacy Notice
September 30, 2026 · Version 0.2 · Not effective. Proposed commitments require operational confirmation before publication.

Your information, used with purpose

This notice concerns IAG website, account and support services. The supplied company record identifies INFRASTRUCTURE ASSETS GROUP LLC, Delaware, formed July 31, 2023, file 7597343. The effective notice must identify the responsible operator and a tested privacy contact.

What we use and why

• Account and contact details: access, account recovery and requested communications.
• Verification information: the identity and eligibility checks relevant to the service requested.
• Transaction and agreement records: authorization, reconciliation, statements and applicable recordkeeping.
• Support messages and technical events: resolving requests, protecting access and investigating errors.

Collection should be limited to what the purpose requires. A display name or account reference can reduce routine exposure where supported; it remains linkable to protected records and does not make an investment anonymous.

Who can receive information

The proposed default is confidential individual participation, without public client balances or an investor directory. Necessary recipients can include authorized service providers, professional advisers, your authorized representatives and authorities where lawfully required. The effective notice must describe the providers or recipient categories actually used and any sale, advertising sharing or other secondary use, including applicable choices.

Where AI assistance is enabled, disclose its role and relevant processing. The proposed boundary excludes raw identity documents and payment secrets from routine AI prompts. Provider access, retention and training settings require verification; this is not a zero-retention promise.

Your choices and records

Session and security cookies support the account. Optional analytics, advertising and marketing need separate accurate disclosures and applicable controls. Account acceptance is not blanket marketing consent.

Depending on applicable law, you may have rights to access, correct, delete or obtain information, restrict specified uses or appeal a request decision. Verification should be proportionate. Record-specific retention criteria must cover active systems, backups and lawful holds; closing an account does not automatically erase transaction evidence.

Requests and protection

Use the designated secure process for sensitive documents, never ordinary chat. Do not share passwords, one-time codes or wallet recovery phrases. No system guarantees absolute security. Hosting regions, operational request channels and retention periods remain to be confirmed in the effective notice.

The existing Contact page accepts development-review enquiries; it is not yet designated as a statutory privacy-request channel. The final notice must include the applicable request and appeal process, contact and effective date. Changes do not create retroactive consent.