Taurion - Privacy Policy
Last updated: October 22, 2026
1. Scope and our two roles
This Privacy Policy explains how Taurion Inc. ("Taurion," "we") handles personal information through taurion.capital and the Taurion platform (the "Services").
We play two different roles, and the rules differ for each:
-
When we decide how data is used. For website visitors, prospective customers, and account holders' login and usage data, Taurion determines the purposes and is responsible for that information under this policy.
-
When we act for your adviser. When a registered investment adviser, family office, or other firm (a "Licensee") uses Taurion, the client information it uploads ("Customer Data") belongs to the Licensee. We process it on the Licensee's behalf, under our contract with them. The Licensee's own privacy notice governs how it collects and shares your information.
If you are a client of a firm that uses Taurion, contact your adviser first about your data. We will help them respond to your request.
2. Information we collect
Contact and inquiry:
Name, firm, title, email, phone, message
You, via forms or email
Account: Name, email, role, firm, login credentials, MFA settings
Source: You or your firm's administrator
Our role: We decide
Usage and device: IP address, browser, pages viewed, features used, timestamps, error logs
Source: Automatically, via cookies and logs
Our role: We decide
Customer Data: End Client names, contact details, household members, account holdings and balances, income, goals, risk preferences, tax and estate information, documents
Source: Your adviser, or custodians and aggregators they connect
Our role: We decide
Opted-in data: Customer Data the Licensee and, where required, the End Client allow us to use for model improvement
Your adviser, with consent
Our role: See Section 3
We do not knowingly collect Social Security numbers unless a Licensee configures the Services to require them. [Confirm whether the product stores SSNs or account numbers; if it does, say so here.]
Cookies. We use strictly necessary cookies to run the site and keep you signed in, and [analytics cookies from VENDOR] to understand site use. We do not use advertising or cross-site tracking cookies. Our site does not currently respond to browser Do Not Track signals; we honor Global Privacy Control signals as an opt-out of any analytics cookies that are not strictly necessary.
3. How we use information
Information we control is used to:
-
respond to inquiries and demo requests;
-
create and administer accounts and authenticate users;
-
operate, secure, troubleshoot, and improve the website and Services;
-
send service notices, and product updates you can opt out of;
-
meet legal obligations and enforce our terms.
Customer Data is used only to provide the Services to the Licensee that submitted it: generating Outputs such as the Financial Integrity Score, scenarios, and decision records; supporting and securing the Services; and as required by law. We do not use one Licensee's Customer Data to market to that Licensee's clients.
Aggregated, de-identified data. We may combine Customer Data into statistics that cannot reasonably identify any person or firm, to measure and improve the Services. We will not try to re-identify it.
Model improvement is opt-in. Today our Outputs come from rules-based and statistical models. We plan to develop AI models in the future. We will use identifiable Customer Data to develop or train models only if the Licensee opts in and, for End Client data, the End Client has consented through their adviser. You can withdraw consent for future use at any time through your adviser or at [privacy@taurion.capital]. We will describe any AI features in the Services before enabling them.
4. How we disclose information
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We disclose personal information only:
-
To your adviser: Customer Data and Outputs are available to the Licensee that submitted them and the users it authorizes.
-
To service providers that host, secure, and support the Services, under contracts that limit their use to serving us: [cloud hosting VENDOR], [email VENDOR], [analytics VENDOR], [error monitoring VENDOR].
-
To data connections you or your adviser enable, such as custodians or account aggregators.
-
For legal reasons: to comply with law, subpoenas, or regulator requests, including SEC or state examinations of a Licensee, and to protect rights and safety.
-
In a corporate transaction: to a successor in a merger, acquisition, or sale of assets, subject to this policy.
-
With consent.
Taurion and Palatino Wealth Advisors share common ownership. Palatino is a Licensee like any other: it cannot see other Licensees' Customer Data, and Taurion does not give Palatino information about other firms' clients.
5. Financial privacy and security
Regulation S-P. Many Licensees are SEC-registered advisers subject to Regulation S-P, which governs nonpublic personal information about their clients. We act as their service provider and limit our use and disclosure of that information to what our contract with them permits.
Incident notification. If we become aware of a security breach resulting in unauthorized access to a system we maintain that holds Customer Data, we will notify the affected Licensee as soon as possible and no later than 72 hours after becoming aware of it. That matches the service-provider standard in the 2024 Regulation S-P amendments (Vedder Price). The Licensee is responsible for notifying its clients, and we will assist. Where we hold information as the deciding party, we will notify affected individuals as state breach laws require.
Safeguards. [Keep only what is true:] encryption in transit (TLS 1.2+) and at rest; role-based access limited to personnel who need it; multi-factor authentication; logging and monitoring; background-checked staff; vendor security reviews; and [SOC 2 Type II — planned / achieved DATE]. No system is perfectly secure, and we cannot guarantee absolute security.
6. Retention, your rights, and contact
Retention. We keep account and usage data for as long as the account is active plus [24] months. Customer Data is kept per the Licensee's contract, generally deleted within [90] days after the contract ends. Backups are overwritten on a rolling [35]-day cycle. We keep records longer where law requires.
Your choices and rights. You can ask us to access, correct, or delete personal information we hold as the deciding party, or to stop sending marketing email. Email [privacy@taurion.capital]. For Customer Data, we will forward your request to your adviser and help them respond. We will verify your identity before acting, and we will not discriminate against you for making a request.
California residents. We extend the access, deletion, correction, and opt-out requests described above to California residents. Under CalOPPA, you can review and request changes to your information by contacting us at the address below. We do not sell or share personal information as those terms are defined in California law.
Children. The Services are for adults acting for themselves or their firms. We do not knowingly collect information from children under 13. Minor household members' information may appear in Customer Data only as entered by an adviser.
Location. We store and process data in the United States.
Changes. We will post updates here with a new effective date. For material changes we will notify account holders by email or in the Services at least [30] days in advance.
Contact.
Taurion Inc.,
663 Bourne Ct, Danville, CA 94506