Actarius AI
Privacy Policy
Last updated: 11 July 2026
1. Who we are
This Privacy Policy explains how Actarius Limited, a company incorporated in Hong Kong under the Companies Ordinance (Cap. 622) with company number 80803074, with its registered office at Rm 3805, 38/F, One Midtown, 11 Hoi Shing Road, Tsuen Wan, Hong Kong ("Actarius", "we", "us"), collects and processes personal data in connection with the website actarius.pro (the "Website") and the Actarius platform (the "Platform").
We process personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and, where it applies to our processing (for example, when we offer our services to organizations and individuals in the European Economic Area), the EU General Data Protection Regulation ("GDPR"). For the purposes of the GDPR and the PDPO, we act as the data controller (data user) for the personal data described in this Policy.
Contact for privacy matters: privacy@actarius.pro
2. Important note: data we process on behalf of our customers
The Platform is a business tool. Our customers (financial organizations) upload documents relating to their own clients. For that data, our customer is the data controller and Actarius acts only as a data processor, processing the data under the customer's instructions and a separate Data Processing Agreement. This Privacy Policy does not cover such data. If you are a client of one of our customers and have questions about your data, please contact that organization directly.
This Policy covers personal data for which we are the controller: data of Website visitors, prospects, and Platform account holders.
3. What data we collect
Data you provide to us:
- Contact and request data: name, business email address, company name, job title, and any information you include when you request early access or contact us.
- Account data: name, business email address, company, password (stored in hashed form), and account settings when an account is created for you on the Platform.
- Communications: correspondence with us by email or through the Website.
Data collected automatically:
- Technical and usage data: IP address, browser type and version, device type, operating system, pages visited, date and time of access, and referral source.
- Cookies and similar technologies, as described in our Cookie Policy.
We do not intentionally collect special categories of personal data through the Website, and we ask that you do not submit such data through our forms.
4. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to early access requests and inquiries | Contact and request data | Legitimate interest (b2b communication you initiated); steps prior to entering into a contract |
| Creating and administering Platform accounts | Account data | Performance of a contract |
| Operating, securing, and maintaining the Website and Platform | Technical and usage data | Legitimate interest (security, service integrity) |
| Improving our services | Aggregated usage data | Legitimate interest |
| Sending service communications about your account or pilot | Contact and account data | Performance of a contract |
| Sending product updates or marketing (if you opt in) | Contact data | Consent (you may withdraw at any time) |
| Complying with legal obligations | As required | Legal obligation |
5. How long we keep data
- Early access and inquiry data: up to 24 months after our last contact, unless a business relationship is established.
- Account data: for the duration of the account plus up to 6 years after closure, where needed for legal claims and record-keeping.
- Technical logs: typically up to 12 months.
We delete or anonymize data when it is no longer needed for the purposes above.
6. Who we share data with
We do not sell personal data. We share data only with:
- Service providers (processors) acting on our instructions: hosting and infrastructure providers, email and communication tools, analytics providers (if used), and AI infrastructure providers used to deliver Platform functionality. Each is bound by a data processing agreement.
- Professional advisers (lawyers, auditors, accountants) where necessary.
- Authorities where required by law.
- A buyer or successor in the event of a merger, acquisition, or asset sale, subject to this Policy.
A current list of key subprocessors is available on request at privacy@actarius.pro.
7. International transfers
We are based in Hong Kong, and personal data may be processed in Hong Kong and in other jurisdictions where we or our service providers operate. Where the GDPR applies and personal data is transferred outside the European Economic Area, we rely on appropriate safeguards, such as an adequacy decision of the European Commission or the EU Standard Contractual Clauses, together with additional technical and organizational measures where needed.
8. Security
We apply technical and organizational measures appropriate to the risk, including encryption in transit, access controls, environment segregation, and logging. No system is completely secure, and we cannot guarantee absolute security.
9. Your rights
Subject to conditions in applicable law, you have the right to:
- access your personal data;
- rectify inaccurate data;
- erase your data;
- restrict processing;
- object to processing based on legitimate interests, including direct marketing;
- data portability;
- withdraw consent at any time, without affecting processing before withdrawal.
Under the PDPO, you also have the right to request access to and correction of your personal data.
To exercise these rights, contact privacy@actarius.pro. We respond within one month, extendable in complex cases as permitted by law.
You also have the right to lodge a complaint with a supervisory authority. In Hong Kong, this is the Office of the Privacy Commissioner for Personal Data (PCPD). If you are in the European Economic Area, you may complain to the supervisory authority of your place of residence or work.
10. Children
The Website and Platform are intended for business users and are not directed at anyone under 18. We do not knowingly collect data from children.
11. Third-party links
The Website may contain links to third-party sites (for example, LinkedIn or X). We are not responsible for their privacy practices.
12. Changes to this Policy
We may update this Policy from time to time. The current version is always available on this page with the "Last updated" date. Material changes affecting Platform users will be notified through the Platform or by email.
13. Contact
Actarius Limited Rm 3805, 38/F, One Midtown, 11 Hoi Shing Road, Tsuen Wan, Hong Kong Email: privacy@actarius.pro