Privacy Policy

We leverage industry-leading third-party infrastructure to process your identity and app interactions securely. Here is exactly what we collect:

• Authentication & Identity (Privy):

  To onboard smoothly, Privy processes and verifies your Web3 cryptographic public wallet address, email address, and mobile phone number via secure One-Time Passwords (OTP).

• Operational & Business Inputs:

  We collect your "Operational Strategy Canvas" inputs, including business concepts, project timelines, and requested funding milestones.

• On-Chain Data:

  Your public wallet address, metadata, and requested USDC funding distributions are captured when interacting with our smart contracts.

Your data is processed by the following third-party services to deliver core application functionality:

• Google Generative AI / Gemini:

  Your business ideas and canvas inputs are transmitted to Google's Generative AI APIs (@google/genai) to power the Gemini Underwriting Engine, validating business readiness and generating expense tranches.

• Privy:

  Manages your secure progressive onboarding data, linking contact information to web3 identities seamlessly.

• Vercel AI SDK:

  Orchestrates the text streaming pipelines between our frontend user interface and the Google AI computational backend.

We manage off-chain and on-chain storage distinctively to protect identity while ensuring consensus integrity:

• Off-Chain Profiles (MongoDB):

  Your verified contact profiles synced from Privy, alongside your system generated project assessments, are stored securely using MongoDB. We retain this profile data as long as your account remains active within our ecosystem.

• On-Chain Records (Base Network):

  Budgets logged on-chain via Coinbase Smart Wallets/OnchainKit are anchored directly onto the Base Mainnet network. This data is permanently written to a public distributed ledger and cannot be updated, modified, or deleted by any party.