PRIVACY POLICY

This Privacy Policy explains how [COMPANY LEGAL NAME] ("Stagflow", "we", "us"), [REGISTERED ADDRESS], handles information when you visit the Stagflow website and use its interface for viewing and trading tokenized stock assets on Robinhood Chain (together, the "Service").

Stagflow is a non-custodial interface. We do not hold your funds, cannot move your assets, and never see the private keys of any wallet you use with the Service. Most of what you do through the Service is recorded on a public blockchain that we do not operate or control.

We keep collection to what the Service needs to work:

• Account and login data. If you sign in, our authentication provider (Privy) processes the identifier you choose: an email address, an X (Twitter) or Discord account, or an external wallet address. We receive a user identifier, the linked login method and your wallet address(es).
• Wallet addresses. The public address of any wallet you connect or that is created for you. We use it to read balances and to prepare transactions you choose to sign.
• Technical data. Our servers and hosting provider process IP addresses, browser type, request timestamps and error logs to deliver pages, relay blockchain requests and keep the Service secure.
• Local preferences. Your browser stores a few settings on your device, such as which wallet is active and wallet connection state. These do not leave your device unless your browser syncs them.

We do not ask for your name, government ID, payment card details or bank information, and we do not run advertising or cross-site tracking.

Transactions you sign, including swaps and token approvals, are broadcast to Robinhood Chain. Blockchain data is public, permanent and can be linked to your wallet address by anyone. We cannot edit or delete it, and the rights described below do not apply to information recorded on-chain.

The market data shown in the Service (prices, pool balances, trade history) is read from public on-chain sources and is not personal data about you.

• to sign you in, keep your session active and show the wallets linked to your account;
• to display balances, quotes and positions for your wallet;
• to simulate and prepare transactions that you review and sign yourself;
• to operate, secure, debug and improve the Service, and to prevent abuse;
• to comply with legal obligations and respond to lawful requests.

Where data-protection law requires a legal basis, we rely on performance of our agreement with you (providing the Service you request), our legitimate interests in running a secure and reliable product, compliance with legal obligations, and your consent where we ask for it. You may withdraw consent at any time without affecting earlier processing.

We do not sell personal information. We share it only with providers that help run the Service:

• Privy — authentication and embedded-wallet infrastructure. Embedded-wallet keys are generated and secured by Privy's systems; Stagflow cannot access them. Privy processes data under its own privacy policy.
• Login providers — X (Twitter) or Discord, if you choose to sign in with them, under their own terms.
• Hosting and infrastructure — servers that serve the website and relay requests to the Robinhood Chain network.
• Blockchain network — signed transactions are sent to Robinhood Chain nodes and become public.

We may disclose information if required by law, to protect the rights and safety of users or the Service, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

The Service uses browser storage that is strictly necessary for it to function: keeping you signed in (set by Privy), remembering wallet connection state, and your active-wallet choice. We do not use advertising or analytics cookies. If we add analytics in the future, we will update this policy and, where required, ask for consent first.

We keep account data while your account is active and for a reasonable period afterwards to meet legal, security and dispute-resolution needs. Server logs are kept for a limited period for security and troubleshooting. On-chain data is retained by the blockchain indefinitely and is outside our control.

We use reasonable technical and organisational measures to protect information, including encrypted connections and restricted access to systems. No system is perfectly secure. You are responsible for protecting your devices, login methods, and any private key or recovery material you export from an embedded wallet.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to complain to a data-protection authority.

To exercise these rights, contact us at [CONTACT EMAIL]. We may need to verify your identity before acting. You can also unlink login methods or delete your account through the authentication flow where available. Deleting your account does not delete blockchain records and does not affect assets held in your wallets.

Our providers may process information in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us information, contact us and we will delete it.

We may update this policy as the Service evolves. We will change the effective date above and, for material changes, give notice through the Service. Continuing to use the Service after an update means the updated policy applies.

Questions or requests about privacy: [CONTACT EMAIL], [COMPANY LEGAL NAME], [REGISTERED ADDRESS].