Last updated: April 20, 2025
InvestStep ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our investment education services.
We comply with all applicable data protection laws in Puerto Rico and other jurisdictions where we operate. Please read this Privacy Policy carefully to understand our practices regarding your personal information.
By accessing or using our services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
We collect several types of information from and about users of our website and services, including:
Personal information is data that can be used to identify you individually. We may collect the following personal information:
We also collect non-personal information that does not directly identify you, including:
We collect information through various methods:
For more information about our use of cookies and your choices regarding them, please see our Cookie Policy.
We use the information we collect for various purposes, including:
If you are located in the European Economic Area (EEA) or the United Kingdom, we collect and process your personal information based on one or more of the following legal grounds:
We may share your information with the following categories of recipients:
We may share your information with third-party service providers who perform services on our behalf, such as:
These providers are contractually obligated to use your information only as directed by us and for the purpose of providing their services.
We may share your information with business partners who offer products or services jointly with us or who provide educational content on our platform. These partners are bound by confidentiality obligations and are prohibited from using your information for purposes other than those disclosed to you.
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government requests).
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.
We may share your information with other third parties when we have your consent to do so.
We do not sell, rent, or lease your personal information to third parties.
We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider:
When we no longer need your personal information, we will securely delete or anonymize it.
We have implemented appropriate technical and organizational measures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure.
Our security measures include:
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Depending on your location, you may have certain rights regarding your personal information, including:
You have the right to request access to the personal information we hold about you and to receive information about how we process it.
You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
You have the right to request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
You have the right to object to the processing of your personal information in certain circumstances, such as for direct marketing purposes.
Where we process your personal information based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law.
Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information as soon as possible.
If you believe that we might have any information from or about a child, please contact us using the information provided in the "Contact Us" section below.
We may transfer your personal information to countries other than the one in which you reside. These countries may have data protection laws that differ from those in your country.
When we transfer personal information across borders, we take appropriate safeguards to ensure that your information receives an adequate level of protection, such as:
By using our services, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our primary servers and operations are located.
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated policy will be posted on this page with a revised "Last updated" date.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
InvestStep
1369 Ashford Avenue
Mezzanine Floor
San Juan, 00907
Puerto Rico
Phone: +1 (281) 794-0077
Email: [email protected]
We will respond to your inquiry as soon as possible and within the timeframe required by applicable law.
If you are not satisfied with our response to your privacy concern or believe that we are not processing your personal information in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.