🔒 Privacy Policy

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Identity Information: Name, email address, phone number
• Wallet Information: Ethereum wallet addresses, UID token IDs
• Territory Data: Geographic boundaries, land ownership documents
• Transaction Data: Carbon credit purchases, sales, and retirements
• Payment Information: Processed securely through Paypal (we don't store card details)

Automatically Collected Information

• Usage Data: Pages viewed, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Cookies: See our Cookie Policy for details

Blockchain Data

2. How We Use Your Information

We use collected information to:

• Provide Services: Process transactions, verify territories, issue carbon credits
• User Authentication: UID-based identity verification
• Communication: Send notifications, updates, and support responses
• Platform Improvement: Analyze usage patterns, optimize performance
• Legal Compliance: Meet regulatory requirements, prevent fraud
• Marketing: Send promotional emails (you can opt-out anytime)

3. How We Share Your Information

We Share Information With:

Category	Purpose	Examples
Service Providers	Platform operations	AWS (hosting), Paypal (payments), SendGrid (emails)
Verification Entities	Territory validation	Expert verifiers, VVB entities, government validators
Blockchain Network	Public records	Ethereum mainnet (transaction data is public)
Legal Authorities	Compliance	When required by law or to protect rights

We Do NOT:

• Sell your personal information to third parties
• Share data for advertising without consent
• Use your data for purposes not disclosed here

4. Data Security

We implement industry-standard security measures:

• Encryption: SSL/TLS for data in transit, AES-256 for data at rest
• Access Controls: Role-based permissions, multi-factor authentication
• Regular Audits: Security assessments and penetration testing
• Blockchain Security: Smart contract audits and immutable records

5. Your Rights

Depending on your location, you may have the following rights:

6. Data Retention

We retain your information:

• Active Accounts: As long as your account is active
• Inactive Accounts: 2 years after last activity, then deleted
• Transaction Records: 7 years for legal/tax compliance
• Blockchain Data: Permanent (inherent to blockchain technology)

7. International Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards through:

• Standard Contractual Clauses (EU Commission approved)
• Privacy Shield Framework alternatives
• Data Processing Agreements with service providers

8. Children's Privacy

9. Third-Party Links

Our platform may contain links to external sites (e.g., blockchain explorers, documentation). We're not responsible for their privacy practices. Please review their policies before providing information.

10. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes via:

• Email notification to registered users
• Prominent notice on our platform
• Updated "Last Updated" date at the top

11. Contact Us

Questions about this Privacy Policy? Contact us:

12. Regulatory Compliance

This Privacy Policy complies with:

• GDPR (EU General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• ePrivacy Directive (EU Cookie Law)
• Other applicable data protection laws