Unicorn FinReg: Privacy Notice

Version date: 6 November 2026

This notice explains how Unicorn Private LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States of America ("we") processes personal data in connection with Unicorn FinReg (the "Service"). For the general privacy policy of Unicorn Private see unicornprivate.com/privacy.

1. Data of users and customers

When you use the Service as a user of a customer account, we process: your work email, the company name and role in the account, your language, sign-in times, actions recorded in the activity log and in the obligations register (for example who created or changed an obligation and when), technical data such as IP address for security, and the origin of your first visit if you arrive from a link with a source parameter. For billing contacts we process name, address, tax identification number and invoice data, which are handled by Stripe.

We process these data to provide the Service and send the emails you request (sign-in links, invitations, alerts, daily summaries, the Monday briefing and reminders of obligations), on the basis of the contract with the customer and of our legitimate interest in keeping the Service secure. Invoices and payment records are kept as required by tax law.

We do not send newsletters or marketing emails from the Service. We do not sell personal data and do not use it for advertising.

2. Data entered by customers

Obligations, notes, owners and other content that customers enter are processed on behalf of the customer, which is the controller. For these data we act as processor under the Data Processing Agreement.

3. Publications of authorities

The Service reads publications of financial supervisory authorities from their official feeds. Some publications, for example enforcement decisions or sanctions notices, may name individuals. We process this information only as published by the authority, to provide the Service to our customers, on the basis of our legitimate interest and of the interest of our customers in knowing the publications of their supervisors, and we always show the source and date. Corrections must be requested from the authority that published the text.

4. Sub-processors and transfers

We use Cloudflare, Inc. (hosting, database, email delivery), Anthropic, PBC (automatic analysis, summaries and translations of the publications of authorities; no customer content and no user data are sent for this purpose) and Stripe, Inc. (payments). Data may be processed in the United States and in other countries where they operate. For transfers from the European Economic Area, Switzerland and the United Kingdom we rely on the standard contractual clauses and, where available, on the data privacy framework certifications of the providers.

5. Retention

Account data are kept while the account is active and deleted within 30 days after its end, except invoices and records that must be kept by law (normally up to 10 years). The obligations register and the activity log are deleted with the account; admins can export them before. Sign-in links expire after 20 minutes; sessions expire after 30 days.

6. Cookies

The Service uses only technical cookies: the session cookie after sign-in and, if you arrive from a link with a source parameter, a cookie that records the origin of the visit. No advertising or analytics cookies are used.

7. Your rights

Depending on the law that applies to you, you have the right to access, correct, delete or restrict your data, to object, to data portability and to lodge a complaint with a supervisory authority. To exercise your rights write to mail@unicornprivate.com. We answer by email.

8. Changes

We may update this notice. The date at the top shows the latest version.