What we collect
- Account data — name, work email, organization, role.
- Ledger activity — orders, transfers, retirements. All ledger data is public by design.
- Session telemetry — device type, coarse location, browser version.
- Support correspondence — anything you send to us directly.
What we do with it
- Operate the Registry and the Market.
- Meet reporting obligations to the Standards body and to U.S. regulators.
- Investigate suspected manipulation, fraud, or sanctions violations.
- Improve the product — always in aggregate, never sold to a third party.
What we do not do
We do not sell your data. We do not run behavioral advertising on this site. We do not share your account data with brokers, exchanges, or affiliates that are not bound by the same standards as this Registry.
Retention
Ledger records — issuances, transfers, retirements — are retained permanently as part of the public record. Account and session data are retained for as long as your account is active, plus seven years to satisfy audit obligations.
Your rights
- Access — request a copy of the personal data we hold on you.
- Correction — ask us to correct anything inaccurate.
- Deletion — ask us to delete your account data, subject to the ledger record which cannot be erased.
- Portability — receive your data in a common machine-readable format.
Send requests to privacy@captivaverde.com.
Where we operate
We are a U.S. company and host all data in U.S. regions. If you access the Registry from outside the U.S., you consent to the transfer of your data to the United States for processing.