Privacy notice (draft)
How keystoneprotocol.io handles personal information. Holder data in the product is covered separately.
Draft for counsel review. This document is a working draft prepared . It has not been reviewed or approved by counsel, is not in effect, and will change before it is published as final. Bracketed items are placeholders.
What this site collects today
The site loads no analytics, advertising, or tracking scripts and sets no cookies. Our hosting provider processes standard request data, such as IP address and browser type, to serve and protect the site. [Counsel: name the hosting provider and its retention period.]
When you book a demo or contact us, the form opens an email from your own email program. We receive what you choose to send, such as your name, work email, company, and message, and use it to respond and to discuss Keystone Registry with you.
Changes we plan to make
We plan to add privacy-focused analytics and a hosted contact form with bot protection. This notice will be updated, with the vendors named, before either goes live.
Data in Keystone Registry
Personal information about token holders that customers keep in Keystone Registry is processed on the customer's behalf under the customer agreement. It is encrypted in our database, never written to a blockchain, and covered by our Regulation S-P privacy and breach notification procedures where they apply. [Counsel: confirm processor role and cross-reference the customer agreement.]
Sharing, retention, and your choices
We do not sell personal information. We share it only with service providers who help us operate, under written obligations, or when the law requires. We keep contact emails for as long as needed to respond and for our business records. [Counsel: state retention period.]
You can ask to see, correct, or delete the personal information you have sent us by writing to privacy@keystoneprotocol.io. [Counsel: state-law rights and any required disclosures.]