Privacy Policy

AssetCentral (“we”, “us”) is operated by LOMOND CONSULTING FZE, P.O. Box 38984, 8th Floor, RAKFTZ Business Centre 4, Ras Al Khaimah, United Arab Emirates (TRN: 100044129300003). We operate the portfolio management service at assetcentral.ai. This policy explains what data we collect, why, where it lives, and what you can do about it. It is written to be understood without a lawyer.

1. The data we hold about you

We hold the following categories of personal data:

• Account data — name, email, hashed password, country of residence, base reporting currency, billing details.
• Portfolio data — properties you add, financial figures, loans, tenancies, documents you upload, and any documents you forward to us by email, WhatsApp, or file upload. This data is yours.
• Usage data — pages visited, features used, errors encountered. We use Plausible Analytics, a privacy-first product that does not use cookies or collect personal data.

2. Why we hold it

Account and portfolio data are required to operate the service. Usage data helps us improve the product and detect security issues. We do not sell, share, or rent personal data to anyone for marketing purposes. We do not run advertising on the service.

3. AI document processing

When you forward a document (statement, invoice, contract) to AssetCentral, we send the contents to a large-language-model provider to extract structured data (amounts, dates, parties). The provider is contractually prohibited from training on your data. Extracted fields are stored against your portfolio; the original document remains in your private document vault and can be deleted at any time.

4. Where your data lives

Application and database servers run in EU and UAE regions. Document storage is in the same regions. Backups are encrypted at rest and retained for 30 days. All traffic to and from AssetCentral is encrypted in transit (TLS 1.2+).

5. Your rights

You have the right to access, correct, delete, export, or restrict processing of your personal data. EU/EEA and UK residents have these rights under the GDPR; UAE residents have equivalent rights under the UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law). Most are self-service inside the product. For anything else, email privacy@assetcentral.ai. We respond within 30 days.

6. Data retention

Active accounts: data is kept while you use the service. After cancellation, data is retained for 90 days so you can reactivate, then deleted. Billing records are retained for the period required by tax law (typically 6–10 years).

7. Sub-processors

We use a small number of vetted sub-processors to operate AssetCentral, including a hosting provider, a database provider, an email-sending provider, a payments processor, and an LLM provider. A current list is available on request.

8. Data controller and contact

The data controller is LOMOND CONSULTING FZE, P.O. Box 38984, 8th Floor, RAKFTZ Business Centre 4, Ras Al Khaimah, United Arab Emirates. For privacy questions, complaints, or data-protection requests: privacy@assetcentral.ai.