AssetView Products and Services Privacy Policy

Effective Date / Last Updated: October 13, 2026

⸻

Overview

AssetView LLC and/or its subsidiaries and affiliates (referred to as “AssetView,” “AV,” “we,” “our,” or “us”) thank you for selecting our Services.

This AssetView Products and Services Privacy Policy (“Policy”) explains how AssetView collects, uses, stores, and shares information in connection with the Services. This Policy applies to Subscribers and Designated Users to the extent they are authorized to access or use the Services. Unauthorized access or use is prohibited and does not expand AssetView’s obligations under this Policy, although information incidentally received in connection with unauthorized activity may be handled as described in this Policy and applicable law. For clarity, Subscriber controls Account-level settings, sharing permissions, and rights for the Account. For clarity, the Services (including Applications) may include Open-Source Software and other third-party software components. This Policy addresses data handling; license terms for those components are addressed in the applicable AssetView services terms and the related open-source notices.

AssetView may publish Supplemental Terms that include privacy policies for a specific product or feature of the Services. Such Supplemental Terms may give Users greater privacy protection than this Policy but may not give them less: where the Supplemental Terms place tighter limits on how AssetView collects, uses, keeps or shares the information that product or feature handles, the Supplemental Terms control for that product or feature, and in every other respect this Policy controls.

The Services are offered to Users located in the United States, and fees are charged in United States dollars. Information Processed in connection with the Services is Processed in the United States.

The security of your information is important to us. While we strive to protect your information using commercially reasonable safeguards, no method of transmission over the Internet or electronic storage is 100% secure.

Recovery of your Personal Financial Data. Your Personal Financial Data is encrypted on your device using your Encryption Password (as defined in the License Agreement) before it reaches us. We do not hold the keys, we cannot derive them, and we cannot produce that content for you, for anyone who asks us for it, or for ourselves. If you lose both your Encryption Password and your Recovery Kit, we cannot recover your Personal Financial Data for you.

⸻

Key Definitions

This Policy uses the following terms:

“Account” means the Subscriber’s registered account for access to the Services, including associated credentials, profiles, settings, and any Designated Users associated with such account.

“Affiliate(s)” means, with respect to a party, any entity that directly or indirectly controls, is controlled by, or is under common control with that party, where “control” means ownership of more than fifty percent (50%) of the voting interests or the power to direct management.

“AI Provider” means a third party that operates an artificial-intelligence model or service that AssetView makes available within the Services to process information you choose to submit to an AI feature. AI Providers act as AssetView’s service providers (sub-processors) for that processing.

“Application(s)” or “App(s)” means AV-provided or third-party integrations, extensions, plugins, connectors, or other software components that add to, modify, or enable functionality in the Services, which may be offered under separate subscription terms, pricing, or Product Terms.

“Application Provider” means the legal entity (or its authorized affiliate) that provides an Application (and any related services) and is the contracting party responsible for that Application under the terms governing it. For Applications provided by AssetView, the Application Provider is AssetView LLC (or the AssetView entity identified in this Policy). Any “provider,” “developer,” “seller,” “author,” or similar label displayed within the Services (including in an app directory or listing) is provided for convenience only and is not determinative of the Application Provider or the party legally responsible for the Application.

“AV Websites” means websites owned or operated by AssetView LLC and/or its subsidiaries and affiliates, including assetview.com and any subdomains, paths, and pages (including /legal) through which AssetView makes Services, Product Terms, documentation, pricing, or other materials available.

“Billing Records” means the records of amounts charged, refunded, and paid in connection with an Account, and the associated invoices, tax records, and payment-processor references, held by AssetView and by AssetView’s payment processor.

“Consent Record” means the record that a specific version of an AssetView agreement, policy, or disclosure was presented to and accepted by a User, including the version identifier, its permanent address on AV Websites, and the time of acceptance.

“De-Identified Data” means data that may be derived from Personal Data and/or personal financial data that does not reasonably identify a User or an Account.

“Designated User” means a person to whom Subscriber elects to share access to all of or portions of a portfolio through the Services, subject to the sharing permissions selected by Subscriber and the limitations described in the Services and applicable terms. For clarity, the Subscriber controls the Account and manages Account-level settings, permissions, and rights for the Account and its Designated Users.

“Documentation” means user guides, FAQs, support articles, technical documentation, and other materials that AssetView makes available describing features or intended use of the Services, whether within the Services or on AV Websites.

“Including” The words “include,” “includes,” and “including” are deemed to be followed by the words “but not limited to,” whether or not expressly stated.

"Media Services" means documents, images and other files that are in storage you control and that you attach to Services.

“Open-Source Software” means software components, libraries, frameworks, or code made available under open-source licenses that may be included in, incorporated into, distributed with, or used in connection with the Services.

“Personal Data” (or “PD”) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) to a User or Account. For purposes of this Policy, information Processed by or on behalf of AV in connection with the Services will be treated as PD to the extent it identifies or relates to a User or Account (such as contact details, authentication events, device/session identifiers, billing records, support communications, and usage telemetry).

“Personal Financial Data” or "Personal Investment Data" or “PID” means the account balances, positions, holdings, and transactions and related portfolio information associated with an Account Processed by or on behalf of AV in connection with the Services (including where such information is derived from documents or files a User uploads or information you enter into the Services, to the extent used to create, update, or modify accounts, balances, positions, holdings, or transactions). For purposes of this Policy, information will be treated as PID to the extent it reflects or is used to create, update, or modify accounts, balances, positions, holdings, or transactions. PID may also constitute PD to the extent it is reasonably capable of being associated with, or linked to, a User or Account; however, for purposes of this Policy, where this Policy provides PID-specific terms, those terms govern.

“Processed” means any operation performed on information, whether by automated means or otherwise, such as collecting, recording, organizing, storing, accessing, using, analyzing, modifying, transmitting, disclosing, sharing, generating, or deleting.

“Product Terms” means product- or feature-specific terms, pricing, packaging, program terms, and/or usage-limit terms made available through the Services or on AV Websites that apply to specific Service offerings, editions, features, or Applications, including definitions for product metering terms.

“Retention Set” means the limited categories of records AssetView keeps after an Account is deleted, as listed under “How does AssetView treat your Personal Data?” below.

“Services” means all AssetView services and products made available to Subscriber, including, without limitation: (a) the web application at client.assetview.com; (b) any other resources reached at the assetview.com domain and via related subdomains, paths, or pages (excluding public marketing site content which is subject to the AssetView Websites Terms of Use and Privacy Policy); (c) any installed application clients or software that access the Services; (d) application programming interfaces (“APIs”) offered by AssetView; (e) AssetView’s cloud services (“AV’s Cloud”); (f) Applications (defined herein); (g) support, customer service, and billing operations related to the Services; and (h) professional services offered by AssetView.

“Subscriber” means the individual or entity that uses the Services under an Account and accepts the applicable AssetView services terms.

“Third-Party App(s)” or “Third-Party Developer App(s)” means an Application where the Application Provider is a third party (not AssetView).

“Third-Party Website(s)” means third-party websites or online services that are linked to or otherwise accessible from the Services or AV Websites.

“Usage” means consumption of the Services measured under applicable Product Terms, including by reference to metering concepts such as Assets, Transactions, and Connectors, and other feature- or volume-based measures that may apply to a particular Service edition or App.

"User(s)” means Subscriber and any Designated Users, in each case to the extent authorized to access or use the Services.

“You” or “your” means a User.

⸻

How does AssetView treat my personal financial data?

Recovery of your Personal Financial Data. Your Personal Financial Data is encrypted on your device using your Encryption Password (as defined in the License Agreement) before it reaches us. We do not hold the keys, we cannot derive them, and we cannot produce that content for you, for anyone who asks us for it, or for ourselves. If you lose both your Encryption Password and your Recovery Kit, we cannot recover your Personal Financial Data for you.

Processing PID. AV and its service providers may Process encrypted PID on AV's behalf for hosting, backup, synchronization, security, and support, subject to contractual and technical controls. Your PID is not disclosed to third parties in identifiable or readable form except in the following circumstances.

• You opt to share it through functions in AssetView. In these cases, AssetView makes reasonable efforts to advise you in advance of the share and may also provide a choice as to what PID will be shared.
• Subscriber may authorize a Designated User to access a portfolio. A Designated User’s access is subject to the sharing permissions the Subscriber selects and the limitations described in the Services. Designated Users must be independent subscribers with their own credentials. A Designated User may access and interact with the applicable portfolio(s) and associated PID until the Subscriber revokes access through the Services. Upon revocation, the Designated User will lose access to the portfolio and future portfolio updates. However, Designated Users may continue to retain previously saved information, such as screenshots or exports created before access was revoked. The Subscriber is responsible for sharing choices and permissions, for ensuring it has all rights and permissions necessary to share the data, and for ensuring that each Designated User complies with the terms of this Policy that apply to such access.
• You install Apps. If you opt to install Apps, you are choosing to share PID with that App Provider. The treatment of PID by Apps is described below.
• You use an AI feature. If you opt to use an AI feature, you are choosing to send the information described under “How does AssetView interact with AI?” to an AI Provider for processing.
• Legal and safety requirements. In response to a subpoena, court order, or other valid legal process, or as otherwise required by applicable law.
• Protection of rights and security. Where AV believes in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of AV, users of the Services, third parties, or the public.

If you share PID with a third party, that recipient will have access to the PID you authorized from the time you grant access until you revoke access through the Services. After you revoke access, the recipient will not receive further updates through the Services. However, the recipient may retain information previously accessed, exported, copied, cached, or saved prior to revocation, and AssetView cannot control how a recipient stores or uses data outside the Services.

⸻

Can I delete my account and purge my personal financial data from AssetView?

Yes, Subscriber may delete the account, portfolios, and associated PID through the Services.

What you can delete yourself, from inside the Services. Four things, in order of how far they reach:

1. The copy on one device. You may wipe AssetView from the device you are using. Nothing is removed from our servers and nothing is removed from your other devices.
2. A portfolio. The Subscriber may delete any portfolio they own, from that portfolio's settings. Deleting a portfolio deletes its PID, its backups, and its uploaded files.
3. All of your financial data at once. The Subscriber may run a purge of their financial data. It deletes every portfolio you own, removes you from any portfolio you were given access to, and clears the copies held locally on the device you run it from. It does not close your Account, and it does not remove your identity, your Billing Records or the audit rows described below.
4. Deleting the Account itself. You may delete your Account from inside the Services, and doing so removes your portfolios, your files, your backups and your sign-in. You will be asked to confirm it is you with our sign-in provider, and then to type your email address once. We do not ask for a reason and we do not make you write to us. Designated Users may be able to remove locally stored copies from their own devices (for example, by clearing site data), but only the Subscriber may delete portfolios or the Account, or manage Account-level retention and settings.

Deletion cannot be called back. Once it has started, it runs to the end. It is carried out in stages, and if it is interrupted, by a lost connection or a closed laptop, our systems finish it by themselves rather than leave it half done. The Services tell you which of three things happened: nothing was removed and you can still sign in, or deletion has started and is still finishing, or deletion started and your sign-in is already gone. Export anything you want to keep before you begin.

Your other devices clean themselves. AssetView keeps an encrypted copy of your portfolios on each device and each browser that you use it from. When you log in to the Services, each device and browser asks us whether any account (that it is holding data for) has been deleted. If the answer is yes, the Services removes that account's key and local copies. A device or browser that the user never opens again keeps an encrypted copy that it has no key for. You can also clear this data yourself for each browser on each device by clearing site data for the AssetView domain.

Files in your own storage stay yours. If a portfolio was configured to keep its files on storage you control, deletion leaves those files where they are. We remove only the software management files used to provide AssetView Media Services.

AV cloud systems, synchronization, and encrypted backups. If PID is stored in AV’s cloud systems (including encrypted backups, synchronization, or other cloud-dependent features), then upon deletion of a portfolio, or upon deletion of the Account, whether by you or by AssetView under the License Agreement, AssetView will delete the applicable PID from its active production systems within a commercially reasonable time, subject to (a) normal backup cycles and technical constraints (including retention and rolling deletion/overwriting of encrypted backups), and (b) any legal, security, fraud-prevention, dispute, or compliance hold where retention is required or permitted by law. For clarity, PID may persist for a limited period in encrypted backups, disaster recovery systems, or logs consistent with those backup cycles and technical constraints.

Third parties. Where PID is shared with a third-party (e.g if you share a portfolio with a Designated User or use AI features), such third parties may retain data pursuant to their own terms and policies. AV does not control retention or deletion of data once transmitted to or stored by third parties outside the Services.

When a trial or subscription ends. When a trial ends without converting or you cancel a subscription, we do not delete your portfolios or your PID. We keep them so that you can pick up where you left off: an Application continues on its free level where it has one and your data fits within its limits, and otherwise your data stays available to view and export until you subscribe again or delete it. You can delete a portfolio, purge your financial data, or delete your Account at any time, as described above. The one outer limit is dormancy: an Account with no subscription that no one signs in to for an extended period may be deleted by us after notice by email, on the terms stated in the License Agreement (Section 10.10). A deletion by us follows the same process, and leaves the same Retention Set, as a deletion by you.

Copies outside the Services. AssetView cannot delete copies of PID or other information that you store or save outside the Services (for example, exported files, downloaded reports, screenshots, or information stored in third-party Apps, devices, or services).

⸻

How does AssetView interact with AI?

If you opt to use AssetView’s AI features, you are choosing to share certain PID (and/or related context) with one or more third-party AI models for processing. AssetView applies technical controls designed to limit the detail shared and reduce the likelihood that shared data is personally identifiable; however:

• You control (a) the names and labels you assign to accounts and assets that may be included in AI prompts and outputs, and (b) the content of your AI conversations;
• You are responsible for ensuring you do not include personally identifiable information (or other sensitive information) in account or asset names, labels, uploaded documents, or chat messages submitted for AI processing unless you intend for such information to be processed by the selected AI provider; and
• AI models are owned by entities independent of AssetView. AssetView engages AI Providers, such as Anthropic and OpenAI, as service providers (sub-processors) and uses their AI models for processing AI requests. The Services indicate which AI provider is available for a given AI request at a given time. Please review the AI Provider's policies before enabling or using AI features. AssetView does not permit AI Providers to use your prompts, the information sent with them, or the outputs returned to you to train their models, except where you separately and expressly opt in to something that says otherwise. AI outputs may be inaccurate, incomplete, or inappropriate and are provided for informational purposes only. You are responsible for verifying outputs before relying on them.

⸻

What information do we collect and use?

In connection with the Services, AV may collect and use information such as your name and email address; device, session, and network identifiers (including IP address); interaction data (such as clicks, pages viewed, and features used); device and application attributes (such as type, version, and language); and usage metrics (such as counts of portfolios, users, assets, connectors, transactions, accounts, and installed Apps). We use this information for purposes such as billing, customer support, delivering and securing the Services, and understanding product performance and improving the Services. The following are examples of the information types and the treatment:

• Account and identity information. Your name and email address, the identifiers our sign-in provider uses for you, authentication events, and the devices and browsers you have signed in from. Readable by us.
• Portfolio metadata, including the names you give your portfolios. For each portfolio we hold identifiers, ownership and access records, encryption key material we cannot open, lifecycle state, timestamps and byte counts. The name you give a portfolio is stored on our servers in readable form. If you would rather a portfolio name reveal nothing about you, name it accordingly.
• Usage metrics for each portfolio. Counts, not contents: how many accounts, assets, transactions, attributes, connections, Users and Applications a portfolio holds, how much AI usage it has drawn, and how many bytes of backups and uploaded files it is storing. The counts are readable by us. What is being counted is not. These counts are also how we tell whether a portfolio fits within the limits of its level.
• Billing Records. What you were charged, for which Applications, when, and what was refunded, together with the invoices and tax records, and the customer and payment references our payment processor issues. Readable by us. We do not store your card number; our payment processor does.
• Bank connection tokens. When you connect a financial institution, our connectivity provider issues an access token that lets the Services fetch the data you asked for. That token is stored encrypted at rest with a key held by the platform, and it is bound to the person who created the connection, so it can be used only in that person's context. It is not readable by anyone using the Services, and it is not sent to your browser. Your credentials for the institution itself are never given to us at all; you give them to the connectivity provider directly.
• Cloud backups of your portfolios. For backup and synchronization, we hold a copy of your portfolio as ciphertext. It is encrypted on your device before it is sent, our servers refuse a backup that does not arrive encrypted, and we hold no key that opens it. What we can see is its size, its version, and when it was made.
• Files you upload. Documents, images and other files you attach inside an Application are encrypted on your device before upload when they are stored with us, and our servers refuse an unencrypted upload on that path. We hold the encrypted bytes and information about the file such as its size and its type; we do not hold the name you gave it. For Media Services where storage of the file is in your control rather than ours, the files may be stored unencrypted and our servers pass the bytes through, which means we could read them in transit; for those files we do hold the name and the folder they were placed in, in readable form, because we have to be able to find them again in storage that you control.
• Error telemetry. When something goes wrong in the application or on our servers, we receive a diagnostic report through our error-monitoring provider so we can fix it. We configure that provider to strip the things that would otherwise ride along: request parameters and query strings, the properties of the screen you were on, and console output. Session recordings, where they are captured, have all text masked and all media blocked.
• Support communications that you send us, and the diagnostics you choose to attach.
• Operational and security logs, such as requests, and authentication, error, and audit records.

⸻

How does AssetView treat my Personal Data?

AssetView does not sell your PD. AV uses PD for purposes including:

• billing and Account administration (including subscription management), at the direction of the Subscriber;
• authentication and access management for Users (with Account-level permissions controlled by the Subscriber);
• customer support, processing requests for assistance;
• bug-fixing, diagnostics, and analytics to improve products and services;
• security monitoring including, but not limited to, fraud, abuse, and misuse prevention;
• communicating important information (e.g., security notifications, product updates, administrative messages);
• complying with legal obligations and enforcing our policies and agreements; and
• value-added services and marketing/advertising operations.

**Marketing.**For clarity, our marketing/advertising uses of PD are limited to first-party marketing communications and high-level measurement; we do not use PD to run third-party targeted advertising campaigns unless we clearly disclose and provide choices where required by law. Each User may have choices to opt out of certain marketing communications sent to that User (see “Your Rights and Choices” below).

Advertising measurement. If you reached AssetView through an advertisement on channels such as Meta, Google or Reddit, the link you arrived on may carry an identifier that the advertising network uses to recognise its own click. We keep that identifier for no more than thirteen months so that we can tell which advertising works. We report back to that advertising channel that a sign-up or a purchase happened only if you have consented to that reporting, in the setting the Services provide for it. Turning it off stops the reporting; it does not affect your subscription, your data, or anything else about the Services. We never send your portfolio contents, your financial data or your Billing Records to an advertising channel.

AV may disclose PD to the following categories of recipients, only as necessary for the purposes described in this Policy:

• Internal personnel. AV employees and authorized personnel, only as needed for the purposes described above and subject to access controls and confidentiality obligations.
• Service providers. Third-party contractors, affiliates, subsidiaries, and other service providers that perform services on AV’s behalf (such as hosting, billing, customer support, communications delivery, security monitoring, and analytics). Service providers may include vendors and software components used for hosting, authentication, payments, diagnostics, and analytics, which may include open-source software components and third-party libraries used within the Services. Their use of PD is subject to contractual obligations and safeguards intended to ensure they use PD only to provide services to AV, and AV takes steps to limit their access, use, and disclosure of PD consistent with this Policy, including technical, organizational, and administrative safeguards. The service providers we use may change from time to time. Examples of key service providers include:
  • Microsoft Azure (cloud services): hosting, storage and databases for the Services, and the delivery of the transactional email we send you, such as sign-in, billing and security messages.
  • Clerk (sign-in): user authentication and access management. AV does not store your authentication credentials (for example, passwords or OAuth secrets).
  • Stripe (payments): subscription payment processing. Payment information is provided directly to Stripe, and AV does not store payment method details, though AV stores a customer identifier and invoice references to administer billing.
  • Plaid (financial institution connectivity): enables connections to supported financial institutions. Financial institution credentials are provided directly to Plaid, and AV does not store those credentials. Plaid Processes information under its own end-user privacy policy.
  • Sentry (error telemetry): receives diagnostic reports when the application or our servers encounter an error, so that we can find and fix defects. We configure it to strip request parameters and query strings, the properties of the screen you were on, and console output, and to mask all text and block all media in any session recording.
  • Anthropic and OpenAI (AI features): processing of the information you choose to send to an AI feature, and nothing else. They receive what you submit to that feature and what it returns; they do not receive your portfolio, your Account, your Billing Records or anything you have not sent to the feature.
• Legal and safety. In response to a subpoena, court order, or other lawful governmental request; where required or permitted by law; or when AV believes in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of AV, our users, third parties, or the public.

Data Retention. AssetView may retain Personal Data and related service logs and operational records (including audit logs, authentication logs, and operational diagnostics) as reasonably necessary for Account administration (including subscription and billing, at the direction of the Subscriber); providing, maintaining, and improving the Services; billing and payment processing; maintaining system integrity; security and fraud prevention; dispute resolution; compliance with applicable law; enforcing our agreements; and establishing, exercising, or defending legal claims—and, where permitted by applicable law and your choices, for communications and marketing purposes. AssetView retains such information only for as long as reasonably necessary for these purposes and as permitted by applicable law. After an Account is deleted, retention of PD is limited to the following records (the "Retention Set"):

(a) records of amounts charged, refunded, and paid, together with the associated invoices and tax records, kept for no longer than seven (7) years;

(b) records showing that a specified version of an AssetView agreement, policy, or disclosure was presented to and accepted by a User, and when, kept for no longer than seven (7) years;

(c) a redacted record of each permission a User granted within the Services, identifying the permission, its scope, its version and the date, kept for no longer than seven (7) years;

(d) a record of the deletion itself, identifying the stages performed, the date, whether the deletion was requested by the User or performed by AssetView, and the quantities of records removed, kept for no longer than seven (7) years, together with the record of any refund settled manually; and

(e) a permanent marker recording that an Account was deleted and when, which AssetView retains indefinitely in order to confirm the deletion and to prevent a deleted Account from being reinstated.

Each record described in (a) through (e) is held under a one-way identifier rather than under a User's name, email address or Account identifier. Nothing else is retained by AssetView after deletion, other than as required by a legal, security, fraud-prevention, dispute, or compliance hold. Our service providers retain their own records under their own terms. Our payment processor retains its own transaction records as required by law.

**Individuals Under 18 Years of Age.**The Services are not intended for individuals under 18 years of age, and we do not knowingly collect Personal Data from individuals under 18. If we learn that we have collected Personal Data from an individual under 18, we will take reasonable steps to address the issue, including deletion where appropriate and as required by applicable law.

⸻

How does AssetView treat De-Identified Data?

AssetView may generate De-Identified Data (defined herein) to operate, maintain, secure, support, and improve the Services, including for analytics, product development, performance optimization, reliability, fraud and abuse detection and prevention, security monitoring, benchmarking, and internal business analysis. AssetView may also use De-Identified Data for high-level, non-targeted marketing and advertising analytics (for example, to understand feature adoption or product performance), but not to identify, contact, or target you or any individual.

De-Identified Data may be retained, used, and disclosed by AssetView for these purposes. AssetView will maintain De-Identified Data in de-identified form and will not attempt to re-identify De-Identified Data except as necessary to validate de-identification processes, detect or respond to security incidents, or comply with applicable law. AssetView will not disclose De-Identified Data in a manner that reasonably could re-identify any individual.

⸻

How is App data treated?

Apps (or extensions to the core of AssetView, as defined above) may be created by AssetView or by Third Parties (Third-Party Developer Apps).

Apps created by AssetView. Apps created by AssetView are subject to the same strict privacy policy as your PID in AssetView.

Apps created by Third Parties Third-Party Apps are governed by the Application Provider’s own terms, policies, and notices. AssetView does not control, and is not responsible for how an Application Provider uses, retains, or discloses data under its own terms. When you install or enable a Third-Party App, the Services may present additional disclosures and/or require you to accept the Application Provider’s terms, policies, or notices. Please review them before installing, enabling, or using a Third-Party App.

If you enable an App, information shared with the App may include PID and/or PD. The App may then share PID and/or PD with third parties (e.g., to perform AI functions). Where feasible, the Services may present disclosures describing (a) the categories of information the App will access from your AssetView account (based on settings you choose) and (b) whether the App indicates it will share that information with third parties. These disclosures may be provided by the Application Provider and AssetView does not guarantee their completeness.

⸻

My Rights and Choices

Depending on where you live and applicable law, you may have certain rights and choices regarding your information, which may include:

• Access and portability: requesting a copy of certain PD related to that User’s use of the Services and, where applicable, PID associated with portfolios the User is permitted to access;
• Correction: requesting corrections to inaccurate PD about that User;
• Deletion: requesting deletion of certain PD. Through the Services, a Subscriber may delete an individual portfolio and its associated PID, may purge all of their financial data at once, and may delete the Account itself. Deleting the Account purges your information from our active production systems apart from the Retention Set described above, and you do not need to ask us to do it for you. Designated Users may request the Subscriber to delete or revoke access, as applicable;
• Marketing preferences: opting out of certain marketing communications sent to that User (you may still receive important administrative and security messages).

Subscriber controls Account-level settings. If you are a Designated User, certain actions (such as deleting a shared portfolio, changing Account settings, or managing other users’ access) may require the Subscriber to take action.

Contact Us. To exercise rights or request assistance, contact us using the information below. We may take reasonable steps to verify your identity (and, where applicable, your authority to act for the Subscriber or access the relevant portfolio) before fulfilling certain requests. In some cases, we may deny or limit a request as permitted by law (for example, where we cannot verify your identity or where an exception applies). Where required by applicable law, you may appeal our decision by contacting us using the information below.

⸻

Business Transfers

If AV, or substantially all of its assets, were acquired, or in the unlikely event that AV goes out of business or enters bankruptcy, PD, PID, and other information processed in connection with the Services may be among the assets transferred or acquired. You acknowledge that such transfers may occur, and that any acquirer of AV may continue to use PD, PID, and other information processed in connection with the Services as set forth in this Policy, subject to applicable law.

⸻

Policy Changes

AssetView may update this Policy from time to time in its sole discretion. We encourage you to review this Policy periodically. If we make material changes, we will provide notice through the Services, such as by email to the address associated with the Account (typically the Subscriber’s email), an in-app notice, and/or by posting the updated Policy with a new effective date. Where required by applicable law, we will obtain your consent or require you to acknowledge the updated Policy. When you accept a version of this Policy, the record of that acceptance identifies the version you accepted. To the extent permitted by law, your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the updated Policy.

⸻

Contact Us

If you have questions about this Policy or want to exercise your rights, contact us at legal@assetview.com or write to: AssetView, Attn: Legal, 66 W Flagler Street, Suite 900, PMB 12192, Miami, Florida 33130, United States.