We collect information you provide directly: your name, your email address, your mobile number if you give one, any profile photo you add, and the password for your Aaim account, which we keep only as a one-way hash. If you come to Aaim from your financial institution, it may share your name and contact details, its identifier for you, and the mailing address on its records. We record each sign-in, with its time, IP address, device, and approximate location. We never receive the credentials for your financial accounts. When you connect financial accounts, we access account balances, holdings, and transaction data through authorized third-party providers.
We use your financial data to classify assets, calculate pledging capacity, and facilitate collateral sharing with your designated financial institution. We do not sell your personal data.
We share your collateral information with financial institutions only when you explicitly create a pledge and acknowledge consent. We do not share data with third parties for marketing purposes.
If you give us a mobile number and agree to receive texts, we use the number to send the texts you asked for: codes that verify the number or recover your account, and alerts about your pledges. We do not share your mobile number or your consent to receive texts with any third party or affiliate for its marketing or promotional purposes. The carriers and the messaging provider that deliver our texts receive the number only to deliver them.
All data is encrypted in transit and at rest, using AES-256 encryption at rest. Aaim is preparing for a SOC 2 Type 1 examination covering the Security category of the AICPA Trust Services Criteria.
Under CCPA and applicable state laws, you have the right to access, correct, or delete your personal information. You may disconnect financial accounts at any time, which stops data collection from those accounts.
We retain financial account data for the duration of your active account. Connection data is cached in session storage with a 30-minute expiration. When you disconnect an account or close your Aaim account, we stop collecting data from it and end our access at the provider. We keep the history we already hold for the periods law and regulation require, with the information that identifies you replaced by tokens and the originals kept encrypted under a key our services cannot use, opened only when a court order, subpoena or regulator compels it. An account that backs an outstanding pledged-asset loan stays readable to Aaim until the pledge is released.
For privacy inquiries, contact privacy@aaim.com.