1. Information We Collect

Account and Registration Data

When you sign up for DataFlux Hub, we ask for basic identifiers: your name, email address, phone number, and company affiliation. If you're subscribing to a paid plan, we'll also collect billing information—though payment card details are handled by our payment processor, not stored on our servers.

Usage and Analytics Information

Like most platforms, we track how you interact with our service. This includes pages visited, features used, time spent on different sections, and search queries within our database. We collect IP addresses, browser types, device information, and operating systems. This helps us understand what's working and what isn't.

Financial Analysis Activity

We log the companies and securities you research, the reports you generate, and the data points you access. This might sound intrusive, but it serves two purposes: improving our recommendations for you, and understanding which datasets matter most to our user base.

Communications

When you email us, chat with support, or fill out feedback forms, we keep those records. They help us provide better assistance and track recurring issues that need attention.

2. How We Use Your Information

We're not in the business of selling your data. Here's what we actually do with it:

• Platform Operations: Maintaining your account, processing subscriptions, sending necessary service notifications, and keeping the platform running smoothly.
• Service Improvement: Analyzing usage patterns to identify bugs, optimize performance, and develop features that people actually want.
• Personalization: Tailoring content recommendations based on your research history and preferences. You can adjust or disable this through your account settings.
• Security: Detecting fraudulent activity, preventing unauthorized access, and protecting both your account and our infrastructure.
• Legal Compliance: Meeting regulatory requirements under Philippine law and responding to valid legal requests when required.
• Communications: Sending account updates, feature announcements, and occasional educational content. You can opt out of non-essential emails.

3. Data Sharing and Third Parties

There are limited circumstances where we share information with external parties:

Service Providers

We work with vendors who help run the platform—cloud hosting providers, payment processors, email services, and analytics tools. These companies only access the data necessary for their specific function and are contractually required to protect it.

Legal Requirements

If compelled by court order, subpoena, or other legal process under Philippine jurisdiction, we may disclose information. We evaluate each request carefully and will contest overly broad demands where appropriate.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information would likely be among the transferred assets. We'd notify you beforehand and outline any changes to privacy practices.

Aggregated Data

We occasionally share anonymized, aggregated statistics about platform usage—like "500 users researched semiconductor companies last quarter." This contains no personally identifiable information.

4. Your Rights and Control

Under the Data Privacy Act of 2012, you have several rights regarding your personal information:

Access and Portability

You can request a copy of the personal data we hold about you. We'll provide this in a structured, commonly used format within 30 days. Log into your account and navigate to Settings > Privacy > Request Data Export.

Correction and Updates

Found outdated information? You can modify most details directly through your account settings. For changes requiring verification, contact our support team at contact@datafluxhub.com.

Deletion

You can request account deletion at any time. We'll remove your personal information within 60 days, though some data may be retained for legitimate business purposes (like financial records for tax compliance) or legal requirements. Backup systems might hold residual data for up to 90 days before permanent deletion.

Objection and Restriction

You can object to certain processing activities—like personalized recommendations or analytics—through your privacy settings. This might limit some features, but core functionality remains available.

Withdraw Consent

Where we rely on consent for processing (rather than legitimate interest or contractual necessity), you can withdraw it. This won't affect the lawfulness of processing before withdrawal.

5. Data Security

We take security seriously, but let's be realistic—no system is completely impenetrable. Here's what we do to protect your information:

• Encryption: Data in transit uses TLS 1.3 encryption. Sensitive data at rest is encrypted using AES-256 standards.
• Access Controls: Employee access to personal data is restricted based on role necessity. All access is logged and audited.
• Infrastructure: We use reputable cloud providers with ISO 27001 certification and regular security audits.
• Monitoring: Automated systems detect unusual activity patterns and potential security threats.
• Vulnerability Management: Regular security assessments, penetration testing, and prompt patching of identified issues.
• Incident Response: We maintain a documented plan for handling potential data breaches, including user notification within 72 hours if required by law.

Your part: Use strong, unique passwords. Enable two-factor authentication through account settings. Don't share login credentials. Be skeptical of phishing attempts—we'll never ask for your password via email.

6. Data Retention

We don't keep information longer than necessary. Here's our general approach:

Data Type	Retention Period
Account Information	Duration of active account plus 90 days after deletion request
Usage Analytics	24 months from collection date
Financial Records	7 years (tax compliance requirements)
Support Communications	3 years from last interaction
Security Logs	12 months for routine logs, longer for incidents under investigation

When retention periods expire, data is either permanently deleted or anonymized beyond reasonable reconstruction. Some aggregated, non-identifiable statistics might be kept indefinitely for research purposes.

7. International Data Transfers

Our primary servers are located in secure facilities within the Philippines. However, some service providers we work with operate globally, which means your information might be processed in other countries.

When data crosses borders, we implement appropriate safeguards—standard contractual clauses, adequacy determinations, or other mechanisms recognized under Philippine data protection law. Countries involved typically include Singapore, Japan, and the United States, all of which maintain reasonable privacy protections.

By using DataFlux Hub, you acknowledge this international processing. If you have concerns about specific jurisdictions, contact us to discuss alternatives where possible.

8. Cookies and Tracking Technologies

Our platform uses cookies—small text files stored on your device—along with similar tracking technologies. Here's what we deploy:

Essential Cookies

These keep the platform functional: maintaining your login session, remembering preferences, ensuring security. They can't be disabled without breaking core features.

Analytics Cookies

We use tools to understand usage patterns—which features get attention, where people encounter problems, how long sessions typically last. This data is aggregated and doesn't track you across other websites.

Performance Cookies

These help optimize loading times and technical performance by caching certain elements and monitoring system health.

You can manage cookie preferences through your browser settings or our cookie preference center (accessible through account settings). Disabling non-essential cookies won't prevent platform access but might affect personalization and performance.

9. Children's Privacy

DataFlux Hub is designed for investment professionals and serious financial analysts—generally not children. We don't knowingly collect information from anyone under 18 years old. If you're a parent who discovers your child has created an account, contact us immediately and we'll delete the associated data.

10. Third-Party Links

Our platform occasionally links to external resources—regulatory filings, news sources, company websites. We're not responsible for the privacy practices of these third parties. Once you leave our platform, different policies apply. Read them before sharing personal information elsewhere.

11. Updates to This Policy

Privacy practices evolve as technology, regulations, and our services change. We'll update this policy when necessary, with the revision date noted at the top. Significant changes will be communicated via email to active account holders at least 30 days before taking effect.

Continued use of the platform after updates indicates acceptance of the revised policy. If you disagree with changes, you can discontinue service and request account deletion.