Privacy Policy

A. Information you provide to us

• •Demo requests. If you submit a demo request through our website, we collect the information you provide in that form: your name, company, work email address, and the description of your interest or use case.
• •Correspondence. When you contact us for support, partnership, or other inquiries, we collect your contact details and any contextual information you choose to share (such as wallet type, transaction details, device type, or error codes). This helps us respond and improve the Services.
• •Email addresses and account information. Where we offer email signup, waitlist, notification, or account features, we collect the email address and any other information you submit, together with information necessary to verify it (such as one-time verification codes).

You may choose to provide other information we have not requested. Where you do, you are solely responsible for that information.

B. Information collected automatically

• •Usage and analytics information. We use Google Analytics to collect standard website analytics, including pages visited, time spent on pages, scroll depth, referring URLs, links clicked, approximate geographic location derived from IP address, and general navigation patterns. This helps us understand how the Services are used and improve them.
• •Device and technical information. We may collect information about the device and software you use to access the Services, including device type, operating system, browser type, language settings, and screen dimensions. This helps us optimize the Services across devices and troubleshoot technical issues.
• •Log information. Our hosting and infrastructure providers may automatically log technical information, including IP address, request timestamps, and error data, for security, performance, and operational purposes.
• •Wallet addresses. Where you connect a self-custodial wallet to any interface we operate, we may collect the wallet address in connection with providing and improving the Services, and to detect or prevent activity that is unlawful or prohibited under our Terms of Service. We reserve the right, but assume no obligation, to screen wallet addresses against sanctions or other watch lists.

C. Information that is public on the blockchain

Transactions on public blockchains — including session key registrations, permission grants, and transactions executed by agents under those permissions — are recorded publicly and permanently by the relevant network. This information is not collected by us; it is inherently public and accessible to anyone. We cannot modify or delete information recorded on a blockchain.

We do not make decisions producing legal effects concerning you, or that otherwise significantly affect you, based solely on automated processing of your personal data.

We use information for legitimate business purposes, including where necessary for the performance of a contract, for compliance with legal or regulatory obligations, on the basis of your consent, or in pursuit of our legitimate interests or those of a third party. Our purposes include:

• •Operating and providing the Services — making the Services available, responding to your comments, questions, and requests, providing support, and sending technical notices, updates, security alerts, and administrative messages.
• •Responding to demo and business inquiries — contacting you about your request, evaluating fit, and following up regarding our products.
• •Improving the Services — analyzing usage patterns to improve functionality, performance, and user experience.
• •Security and integrity — detecting, preventing, investigating, and addressing fraud, security incidents, abuse, breaches of our Terms of Service, and other harmful or unlawful activity.
• •Legal compliance — complying with applicable laws, lawful requests, and legal process, including responses to subpoenas or requests from governmental or regulatory authorities, and enforcing our Terms of Service.
• •Corporate transactions — in connection with, or during negotiation of, any proposed or actual merger, acquisition, financing, reorganization, sale of assets, or other business combination.
• •Marketing communications — where you have opted in or where otherwise permitted by applicable law, sending you information about our products and updates. You may opt out at any time.
• •Other purposes for which you have given consent.

We may use information that does not identify you, including aggregated or de-identified information, for any purpose not prohibited by applicable law.

We may share information for the purposes described above with the following categories of recipients:

• •Service providers. Third parties that process information on our behalf and under our instructions, including providers of website hosting, analytics, email delivery, customer support, infrastructure, security, and data storage.
• •Affiliates. Our affiliates and related entities, including where they act as service providers or for internal business purposes.
• •Professional advisors. Our legal, accounting, audit, and other professional advisors, for purposes of advice and compliance with our legal obligations.
• •Regulatory and government authorities. Where we are legally obliged to do so, or where we believe disclosure is necessary or appropriate to comply with applicable law, respond to lawful requests, protect our rights or property, or protect the safety of any person.
• •Acquirers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, as described above.

Service providers and professional advisors generally act as processors on our instructions. In some cases, a professional advisor or service provider may process your personal data to comply with a legal obligation to which it is directly subject, and may act as a controller in its own right in respect of that processing.

We do not sell your personal information.

We may share information that does not identify you, including aggregated or de-identified information, except where prohibited by applicable law.

The Services may link to or integrate technologies operated by other parties, including third-party websites, wallet providers, blockchain networks, block explorers, and code repositories.

When you interact with these parties — including when you leave our website — they may independently collect information about you and solicit information from you. Information collected by them is governed by their own privacy policies and practices, not by this Privacy Policy. We encourage you to review those policies.

In particular, by using a third-party self-custodial wallet to interact with public blockchains, your relationship with that wallet provider is governed by that provider's terms of service and privacy policy.

What cookies are. A cookie is a small text file placed on your device by a web server. Cookies contain information that can later be read by a server in the domain that issued the cookie.

How we use them. We use Google Analytics, which sets cookies and similar identifiers to collect the analytics information described in Section 1(B). We may also use:

• •Strictly necessary cookies — essential for the Services to function, enabling basic features such as navigation and security. These do not collect personal information for marketing purposes.
• •Analytical and performance cookies — allowing us to understand how visitors use the Services so we can improve functionality and performance.
• •Functional cookies — enabling enhanced functionality and remembering your preferences, such as a previously connected wallet.

Your choices. You can control cookies through settings built into your web browser, including by blocking or deleting them, and you can install browser extensions designed to block analytics tracking. You may opt out of Google Analytics specifically by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. Most browsers also offer a “Do Not Track” or global privacy control setting. Blocking cookies may affect the functionality of some parts of the Services.

If you would like us to stop processing analytics information about you, or wish to object to this processing, contact us at founders@altana.network and we will action your request.

We implement and maintain reasonable administrative, physical, and technical safeguards designed to protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the security of information about you.

You remain solely responsible for the security of your private keys, session keys, wallet, and any credentials or infrastructure used to operate agents. We do not have access to your private keys and cannot recover them.

We retain information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, and as permitted or required by applicable law. Where you request deletion of your information, we may continue to retain and use it as permitted or required under applicable law, for legal, tax, regulatory, or legitimate business purposes.

We expect to delete personal data once there is no longer a legal or regulatory requirement or legitimate business purpose for retaining it.

We cannot delete or modify information recorded on a public blockchain.

We are incorporated in the United States and our service providers, including our analytics and hosting providers, are located in the United States and other jurisdictions. Information collected through the Services may therefore be transferred to, processed, stored, and used in the United States, the European Economic Area, and other jurisdictions.

Data protection laws in these jurisdictions may differ from those in your country of residence. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to a jurisdiction that has not been determined to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or on another lawful transfer mechanism.

By using the Services or providing information to us, you acknowledge these transfers.

A. Our role

The General Data Protection Regulation distinguishes between organizations that process personal data for their own purposes (“controllers”) and those that process it on behalf of others (“processors”). We act as a controller with respect to personal data collected through your interaction with the Services.

B. Lawful bases for processing

These disclosures apply to California residents under the California Consumer Privacy Act, as amended (“CCPA”).

A. Notice of collection. The categories of personal information we may collect are described in Section 1, the sources are described there, and the business purposes for which we collect and use it are described in Section 2. The categories of parties with whom we share personal information are described in Section 3.

B. We do not sell or share personal information as those terms are defined under the CCPA, and we have not done so in the preceding twelve (12) months. We do not sell or share the personal information of minors under sixteen (16) years of age.

C. Right to know and delete. You have the right to request:

• •the categories of personal information we have collected about you;
• •the categories of sources from which it was collected;
• •the categories of personal information we disclosed for a business purpose;
• •the categories of third parties to whom it was disclosed for a business purpose;
• •the business or commercial purpose for collecting it; and
• •the specific pieces of personal information we have collected about you.

You also have the right to request deletion of personal information we have collected from you, and to request correction of inaccurate personal information.

To exercise these rights, email founders@altana.network, specifying the right you are exercising and the scope of your request. We will confirm receipt within ten (10) days. We may require information from you to verify your identity; if we cannot verify your identity, we may deny your request.

D. Authorized agents. You may designate an authorized agent to submit requests on your behalf. We may require written proof of the agent's authority and may verify your identity directly.

E. Non-discrimination. You have the right not to receive discriminatory treatment for exercising your privacy rights.

F. Shine the Light. California residents may request a list of the categories of personal information we disclosed to third parties for those parties' own direct marketing purposes during the preceding calendar year, and the categories of those third parties. To make a request, email us and specify that you are making a “California Shine the Light Request.” We may require information to verify your identity and are required to respond only once per calendar year.

The Services are intended for a general audience and are not directed at children. To use the Services, you must be legally capable of entering into a binding contract. We do not knowingly collect personal information from children under the age of sixteen (16), or under thirteen (13) as defined by the U.S. Children's Online Privacy Protection Act (“COPPA”). If you are a parent or guardian and believe we have collected personal information from a child, contact us at founders@altana.network and we will delete it.

We may revise this Privacy Policy at any time. Changes are effective when the revised Privacy Policy is posted, and the “Last updated” date above will be amended accordingly. Your continued use of the Services after changes are posted constitutes acceptance of the revised Privacy Policy. Where required by applicable law, we will provide additional notice or seek your consent.

If you have questions or comments about this Privacy Policy, our data practices, or our compliance with applicable law, contact us at founders@altana.network.

Serendipity Global Inc.