Legal

Privacy Policy

Effective date: 1 April 2026  ·  Last updated: 1 April 2026

1. Overview

Tesla Capital Inc ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have in relation to it.

This policy applies to all users of the Platform, including visitors, registered investors, and any other individuals who interact with our services. By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide - Account registration: name, email address, date of birth, country of residence, phone number - Identity verification (KYC): government-issued ID documents, selfie/liveness check images, proof of address - Financial information: deposit amounts, payment method details, transaction history - Communications: messages sent via our support channels or contact form

2.2 Information We Collect Automatically - Usage data: pages visited, features used, time spent on Platform - Device data: IP address, browser type, operating system, device identifiers - Session data: login timestamps, session duration, click patterns

2.3 Information from Third Parties - Identity verification providers: verification results and fraud signals - Payment processors: transaction confirmation and status - Analytics providers: aggregated, anonymised usage metrics

4. How We Use Your Information

We use your personal data to:

- Create and manage your investor account - Verify your identity and comply with KYC/AML obligations - Process deposits, withdrawals, and investment transactions - Communicate with you about your account, investments, and platform updates - Detect, investigate, and prevent fraudulent activity - Improve Platform functionality, performance, and user experience - Comply with our legal and regulatory obligations - Respond to your support enquiries and communications

5. Sharing Your Information

We do not sell your personal data. We share your information only in the following circumstances:

5.1 Service Providers. We engage trusted third-party providers to support platform operations, including: - Identity verification (KYC) providers - Cloud infrastructure and hosting providers - Email and communication services (ZeptoMail / Zoho) - Analytics and monitoring services - Image hosting (Cloudinary)

All service providers are contractually required to process your data only on our instructions and in accordance with applicable data protection law.

5.2 Legal Requirements. We may disclose your information if required to do so by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect our legal rights or the safety of others.

5.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the relevant party as part of that transaction.

6. Data Retention

We retain your personal data for as long as your account is active and for as long as necessary to comply with our legal obligations. Specifically:

- Account and transaction data: retained for a minimum of 5 years following account closure to comply with AML regulations - KYC documents: retained for a minimum of 5 years following the end of the business relationship - Support communications: retained for 2 years - Usage and analytics data: retained in anonymised form indefinitely

Upon expiry of the relevant retention period, data is securely deleted or anonymised.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

- End-to-end encryption for data in transit (TLS) - Encrypted storage for sensitive data at rest - Access controls limiting data access to authorised personnel - Regular security reviews and penetration testing - Incident response procedures

However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access.

8. Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

- Access: request a copy of the personal data we hold about you - Rectification: request correction of inaccurate or incomplete data - Erasure: request deletion of your data (subject to legal retention obligations) - Restriction: request that we limit processing of your data in certain circumstances - Portability: receive your data in a structured, machine-readable format - Objection: object to processing based on legitimate interests - Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@teslacapitalinc.pro. We will respond within 30 days.

9. Cookies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and gather analytics. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of the Platform.

We use the following categories of cookies: - Essential: required for Platform operation and cannot be disabled - Analytics: help us understand how users interact with the Platform (anonymised) - Functional: remember your preferences and settings

10. International Transfers

We operate globally and your data may be transferred to, and processed in, countries other than your country of residence. Where we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses or adequacy decisions recognised by applicable data protection authorities.

11. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will delete that data promptly. If you believe we may have collected data from a child, please contact us at privacy@teslacapitalinc.pro.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. We encourage you to review this policy periodically.

13. Contact

For privacy-related enquiries, data subject requests, or to raise a concern, contact our Data Privacy team at:

privacy@teslacapitalinc.pro

© 2026 Tesla Capital Inc. All rights reserved.