Privacy Policy

We collect the following types of information:

• Account Information: Name, email address, password (hashed), and optional profile data (bio, country, language).
• Subscription Data: Membership tier, billing dates, and payment status. Payment card details are processed and stored exclusively by Stripe — we never see or store your card number.
• Usage Data: Posts, comments, reactions, mission progress, points, rank, referral activity, and AI feature usage (prompts and generated content).
• Plantation Data: Tree allocations, plot assignments, and environmental impact calculations associated with your membership.
• Technical Data: IP address, browser type, device information, and session cookies for authentication.

• To provide and maintain your GreenVault membership and services.
• To process subscriptions and payments through Stripe.
• To generate personalized AI content (posts, advisor responses, weekly reports) using Anthropic Claude API.
• To calculate points, ranks, missions, and leaderboard positions.
• To process MLM referral commissions.
• To send transactional emails (OTP verification, weekly reports) through Resend.
• To improve our services and user experience.

We share data with the following third-party processors:

• Stripe (stripe.com) — Payment processing. Subject to Stripe Privacy Policy.
• Anthropic (anthropic.com) — AI features (post generation, advisor). Your prompts and user context are sent to Claude API. Subject to Anthropic Privacy Policy.
• AWS (aws.amazon.com) — Media storage (S3) and content delivery (CloudFront).
• Resend (resend.com) — Transactional email delivery.

We use the following cookies:

• Authentication cookie (httpOnly, secure) — Stores your refresh token for session management. Essential for the service to function.
• Cookie consent (localStorage) — Records your acceptance of this cookie policy.

We do not use advertising cookies or third-party tracking cookies.

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data via your profile settings.
• Rectification: Update your profile information at any time in your account settings.
• Deletion: Delete your account permanently via the account deletion option in settings. This anonymizes your data and removes your personal information.
• Portability: Request an export of your data by contacting us.
• Objection: Object to processing of your data for specific purposes.

We retain your account data for as long as your account is active. Upon account deletion, personal data is anonymized within 30 days. Aggregated, non-personal data (point totals, anonymized activity metrics) may be retained for platform analytics.

We implement industry-standard security measures including: encrypted passwords (bcrypt), HTTPS everywhere, httpOnly cookies for authentication, rate limiting on all endpoints, and input validation on all user data. Payment data is handled exclusively by PCI-compliant Stripe.

GreenVault is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

For privacy-related inquiries, contact us at: [email protected]