Courtesy translation. This notice is a translation of the Spanish version (Aviso de privacidad). In case of any discrepancy, the Spanish version prevails.
1. Who is responsible
INVERSHA S.A.P.I. de C.V., located at Lomas de Gran Jardín, León, Guanajuato, México, is responsible for processing your personal data under the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”). For any personal data matter, write to us at hello@inversha.com.
INVERSHA is an investment app: USDC or USDT portfolios on the Solana network with an engine that invests based on the news (what is INVERSHA). This notice covers the data that app needs.
2. What data we collect
Identification and contact
- First name, last name, username and email.
- Profile photo, only if you choose to upload one.
- If you sign in with Google: the name, email and photo Google shares with us.
Access and security
- Your password, which we store protected with a hashing algorithm (never in readable text).
- The verification codes we email you and the attempts to use them.
- Technical data your browser sends when using the service (such as IP address and browser type), for security and abuse prevention.
- If you turn on browser alerts: the technical subscription your browser creates to receive them (an address of its notification service and some encryption keys), the browser type and the app language.
Financial and asset data
- Your portfolios: name, currency (USDC, USDT or practice) and Autopilot settings.
- The public address of each wallet and its private key, which we store encrypted to be able to sign your transactions.
- Balances, deposits, withdrawals, engine trades, yield and the addresses you withdraw to.
Financial and asset data receive special treatment under the Law; that is why we ask for your express consent to process it (see section 4). We do not collect sensitive personal data (health, origin, beliefs, etc.).
3. What we use it for
Purposes necessary to provide the service
- Create and manage your account and verify it is you when you sign in.
- Create and safeguard your portfolios’ wallets, receive deposits and send withdrawals.
- Carry out what you authorize: put your USDC to earn yield and trade with Autopilot within your mandate.
- Send you service emails: access codes, welcome, wallet-created notices, engine trades, alerts when a position hits its exit plan and periodic summaries.
- If you turn them on, alert you in your browser of every engine buy and sell; while they are on, those trades no longer reach you by email. You can turn them off whenever you want from your account menu.
- Show you your balances, results and the explanation of each move.
- Prevent fraud, protect your account and comply with legal obligations and authority requests.
Additional purposes
- Let you know about product news.
- Analyze in aggregate how INVERSHA is used in order to improve it.
You can refuse the additional purposes at any time by writing to hello@inversha.com; refusing does not affect your service.
The engine’s public record shows only aggregate figures of all trades; never an individual’s data.
4. Your consent
By creating your account and accepting this notice you give us your express consent to process your data, including financial and asset data, for the purposes in section 3. You can revoke it at any time (section 9); since that data is essential to the service, revoking it means closing your account after withdrawing your balance.
5. Who we share it with
Only with those we need to provide the service, and only what is necessary:
- Hosting (Hostinger): servers where the application and the database live.
- Email (email delivery provider): to send you codes and notices; it receives your email address and the message content.
- Google: if you choose to sign in with Google.
- Your browser’s notification service (Google, Mozilla, Apple or another, depending on the browser): delivers the alerts you turned on. It receives the encrypted alert —what the engine bought or sold—, not your name or email.
- Google Analytics: measures in aggregate how the inversha.com site is used (pages viewed, device, approximate country). It does not receive your name, your email or anything about your portfolios.
- Lulo and Jupiter: when you turn on yield or the engine trades, they receive your wallet’s transactions (address and amounts), not your name or email.
- Artificial intelligence provider (DeepSeek): to write the summary of your positions we send it which assets you hold and how they are doing, without your name or email. This provider may process the information outside Mexico.
- Authorities: when a law or an order from a competent authority requires it.
These providers act on our behalf and cannot use your data for their own purposes. Transfers the Law exempts from consent (for example, those necessary to fulfill the contract with you or required by an authority) are made without asking you again. We do not sell your data.
6. The blockchain is public
Wallet addresses and transactions on the Solana network are public and permanent: anyone can see them and no one, not even us, can delete them. Your name and email do not appear on the chain, but if someone knows your address they could see its movements.
7. How we protect it
- Wallet private keys are stored encrypted and only decrypted at the moment of signing.
- Passwords are stored with a hashing algorithm and access is confirmed with an email code.
- Changing your password closes all your open sessions.
- Each account can only see and move its own portfolios.
If a security breach occurs that affects your rights, we will inform you without delay.
8. How long we keep it
While you have your account and, after closing it, only for as long as tax laws, anti-money-laundering laws or other applicable laws require. After that period we delete or anonymize it.
9. Your rights (ARCO)
You can ask us at any time for:
- Access: to know what data of yours we hold and how we use it.
- Rectification: to correct it if it is wrong or incomplete.
- Cancellation: to delete it when it is no longer necessary.
- Opposition: to stop using it for a given purpose.
You can also revoke your consent or limit the use of your data. Write to us athello@inversha.com from your account’s email, say which right you want to exercise and attach an official ID. We will reply within the periods set by the Law.
If you believe we did not handle your request properly, you can go to the personal data protection authority (currently, the Ministry of Anti-Corruption and Good Governance).
11. Changes to this notice
If we change this notice, we will publish the new version on this page with its date and, if the change is significant, we will notify you by email or in the app.