Privacy Policy

AssetCentral (“we”, “us”) is operated by LOMOND CONSULTING FZE, P.O. Box 38984, 8th Floor, RAKFTZ Business Centre 4, Ras Al Khaimah, United Arab Emirates (TRN: 100044129300003). We operate the portfolio management service at assetcentral.ai. This policy explains what data we collect, why, where it lives, and what you can do about it. It is written to be understood without a lawyer.

1. The data we hold about you

We hold the following categories of personal data:

• Account data — name, email, hashed password, country of residence, base reporting currency, billing details.
• Portfolio data — properties you add, financial figures, loans, tenancies, documents you upload, and any documents you forward to us by email, WhatsApp, or file upload. This data is yours.
• Usage data — pages visited, features used, errors encountered. Our primary product analytics is Plausible Analytics, a privacy-first product that does not use cookies or collect personal data. If you accept the cookie banner, we additionally load Google Analytics 4 (GA4) and Google Ads tag (gtag.js) — see section 8 below for details.

2. Why we hold it

Account and portfolio data are required to operate the service. Usage data helps us improve the product and detect security issues. We do not sell, share, or rent personal data to anyone for marketing purposes. We do not run advertising on the service.

3. AI document processing

When you forward a document (statement, invoice, contract) to AssetCentral, we send the contents to a large-language-model provider to extract structured data (amounts, dates, parties). The provider is contractually prohibited from training on your data. Extracted fields are stored against your portfolio; the original document remains in your private document vault and can be deleted at any time.

4. Where your data lives

Application and database servers run in EU and UAE regions. Document storage is in the same regions. Backups are encrypted at rest and retained for 30 days. All traffic to and from AssetCentral is encrypted in transit (TLS 1.2+).

5. Your rights

You have the right to access, correct, delete, export, or restrict processing of your personal data. EU/EEA and UK residents have these rights under the GDPR; UAE residents have equivalent rights under the UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law). Most are self-service inside the product. For anything else, email privacy@assetcentral.ai. We respond within 30 days.

6. Data retention

Active accounts: data is kept while you use the service. After cancellation, data is retained for 90 days so you can reactivate, then deleted. Billing records are retained for the period required by tax law (typically 6–10 years).

7. Sub-processors

We use a small number of vetted sub-processors to operate AssetCentral, including a hosting provider, a database provider, an email-sending provider, a payments processor, and an LLM provider. A current list is available on request.

8. Cookies and advertising tags

AssetCentral is built to work without cookies. The marketing site (assetcentral.ai) sets no cookies by default. The product (app.assetcentral.ai) sets only strictly-necessary cookies needed for authentication and security — these are exempt from consent under PECR and equivalent EU law.

If you click Accept on the cookie banner, the marketing site additionally loads Google Analytics 4 (measurement IDG-VEX6ZKV6LH) and the Google Ads tag (AW-18179673413). These tools set the following cookies:

• _ga, _ga_VEX6ZKV6LH — Google Analytics, used to distinguish unique visitors and aggregate page-view metrics. Lifetime up to 2 years.
• _gcl_au — Google Ads conversion linker, used to attribute paid-traffic signups to the ad that brought you to the site. Lifetime 90 days.
• _gid — Google Analytics session cookie. Lifetime 24 hours.

Aggregated, non-identifying analytics data is shared with Google Ireland Limited (data processor) and may be transferred to the United States under Google's EU-US Data Privacy Framework certification. The product (app.assetcentral.ai) also loads the Google tag once you have signed up, so we can attribute trial starts and paid subscriptions back to the campaigns that introduced you to us.

You can decline these tags via the cookie banner, or revoke consent at any time on our cookies page. Declining only blocks the GA4 + Google Ads tags — Plausible Analytics and the strictly-necessary cookies continue to run, since they do not require consent.

9. Data controller and contact

The data controller is LOMOND CONSULTING FZE, P.O. Box 38984, 8th Floor, RAKFTZ Business Centre 4, Ras Al Khaimah, United Arab Emirates. For privacy questions, complaints, or data-protection requests: privacy@assetcentral.ai.