We collect information you provide directly: your name, your email address, your mobile number if you give one, any profile photo you add, and the password for your Aaim account, which we keep only as a one-way hash. If you come to Aaim from your financial institution, it may share your name and contact details, its identifier for you, and the mailing address on its records. We record each sign-in, with its time, IP address, device, and approximate location. We never receive the credentials for your financial accounts. When you connect financial accounts, we access account balances, holdings, and transaction data through authorized third-party providers.
We use your financial data to classify assets, calculate pledging capacity, and facilitate collateral sharing with your designated financial institution. We do not sell your personal data.
We share your collateral information with financial institutions only when you explicitly create a pledge and acknowledge consent. We do not share data with third parties for marketing purposes.
All data is encrypted in transit and at rest, using AES-256 encryption at rest. Aaim is preparing for a SOC 2 Type 1 examination covering the Security category of the AICPA Trust Services Criteria.
Under CCPA and applicable state laws, you have the right to access, correct, or delete your personal information. You may disconnect financial accounts at any time, which stops data collection from those accounts.
We retain financial account data for the duration of your active account. Connection data is cached in session storage with a 30-minute expiration. When you delete your account, all personal data is removed within 30 days.
For privacy inquiries, contact privacy@aaim.com.