Legal
Privacy Policy
1. Information We Collect
Issuers: Name, email, location, education, work history, income data, social/professional links, video pitch, bank connection data (via Plaid), and covenant terms.
Backers: Name (or wallet address), allocation amounts, and KYC information (via Persona, when required).
All users: Browser type, IP address, pages visited, and interaction data for analytics.
2. How We Use Your Information
To operate the platform: processing applications, computing conviction scores, facilitating allocations, verifying income, distributing dividends, and displaying issuer profiles to backers. We do not sell personal data to third parties.
3. Income Data
Income data provided via Plaid or manual upload is used exclusively for covenant payment calculations and platform analytics. Individual income data is never shared with other users or third parties without consent. Anonymized, aggregated income trajectory data may be used to train the AI pricing engine in Phase 3.
4. Blockchain Data
Covenant contracts and token transactions are recorded on the Base blockchain (Ethereum L2). Blockchain data is public by nature. Wallet addresses and transaction history are visible to anyone. We do not control or have the ability to delete on-chain data.
5. Third-Party Services
We use: Supabase (database and authentication), Vercel (hosting), Plaid (income verification), and Base/Ethereum (smart contracts). Each service has its own privacy policy. We share only the minimum data necessary for each service to function.
6. Data Retention
Account data is retained for the duration of your account plus 7 years (for regulatory compliance). Income reports are retained for the life of the covenant plus 3 years. You may request deletion of non-regulatory data by contacting us.
7. Security
We use encryption in transit (TLS) and at rest. Database access is protected by row-level security policies. Smart contract interactions require wallet signatures. We do not store private keys.
8. Your Rights
You may request access to, correction of, or deletion of your personal data by emailing privacy@preflop.co. California residents have additional rights under the CCPA. EU residents have rights under the GDPR.
9. Contact
For privacy-related inquiries: privacy@preflop.co
Preflop Inc. · Delaware, United States
Last updated: April 2026 · Preflop Inc. · Delaware C-Corp