Privacy Policy

Seedlot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including our coffee tree investment platform.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and manage your investments
• Verify your identity and comply with legal requirements (KYC/AML)
• Communicate with you about your account and our services
• Send promotional communications (with your consent)
• Detect, prevent, and address fraud and security issues
• Analyze usage patterns to enhance user experience
• Comply with legal obligations and enforce our agreements

To comply with regulatory requirements and prevent fraud, we use Mekari Sign, a trusted third-party service, to verify your identity. During the KYC process:

• You will be directed to Mekari Sign's secure platform
• You may be asked to provide government-issued identification
• Biometric verification (liveness check) may be performed
• Mekari Sign processes this data according to their privacy policy

We receive only the verification status and necessary identity confirmation from Mekari Sign. Your sensitive identity documents are processed and stored by Mekari Sign in accordance with applicable data protection laws.

We may share your information with:

• Service Providers: Third parties that help us operate our platform (Mekari Sign for KYC, Clerk for authentication, payment processors)
• Blockchain Networks: Transaction data is recorded on the IOTA blockchain, which is publicly accessible
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose with your explicit consent

We do not sell your personal information to third parties for marketing purposes.

Our platform utilizes blockchain technology (IOTA) for transparency and security. Please be aware that:

• Transaction records on the blockchain are permanent and cannot be deleted
• Wallet addresses and transaction history may be publicly visible
• NFT ownership and transfer records are recorded on-chain
• We minimize personal data stored on-chain to protect your privacy

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments and monitoring
• Access controls and employee training
• Secure cloud infrastructure with industry-standard protections

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below. Note that some data may need to be retained for legal compliance or legitimate business purposes.

We use cookies and similar technologies to enhance your experience. These include:

• Essential Cookies: Required for basic site functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics, PostHog)
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Retention periods vary based on:

• Active account status and service usage
• Legal and regulatory requirements
• Legitimate business interests
• Dispute resolution needs

When data is no longer needed, we securely delete or anonymize it.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.