Privacy Policy

Effective: [DATE] Who we are: Par & Reserve LLC (in formation), a wholly owned subsidiary of Block Bridge, Inc. ("we," "us"), publisher of the Stablecoin Risk Report (the "Service"). Contact: [privacy@DOMAIN], [postal address].

This policy explains how we handle personal information about subscribers, people who request a sample issue or contact us, and visitors to [website]. The Service is for adults in the United States, including individuals and people subscribing for their organizations.

1. What we collect

• Contact details you give us: your name and email address, and, if you choose to provide them, your role and organization, when you subscribe, request a sample, sign in or contact us.
• Subscriber record: to deliver the Report and control access, we keep a record for each subscriber containing your email address, your Stripe customer and subscription identifiers, your subscription status (for example, active, past due or canceled), the end date of your current paid period, the date the record was created and last updated, the date of any failed payment, and your issue-email preference (opted in or unsubscribed, with the date).
• Consent records: when you subscribe, the date and time you agreed to the automatic-renewal terms and the version of those terms, kept with your Stripe checkout and subscription records.
• Delivery records: which issue emails were sent to your address and when (a send log), so we do not send the same issue twice and can answer support questions.
• Payment information: collected and processed by our payment processor, Stripe. We do not receive or store full card numbers. Stripe provides us with billing details such as your name, email, billing country or postal code, and payment status.
• Usage and technical information: sign-in events, which issues or PDFs were opened or downloaded, IP address, device/browser type, and approximate location derived from IP, from server logs.
• Communications: emails, feedback, correction requests and right-of-reply submissions.
• Cookies: strictly necessary cookies for sign-in and security, and [privacy-friendly analytics, e.g., ___]. [We do not use advertising or cross-site tracking cookies.]

Please don't send us account numbers, wallet seed phrases, private keys, or details of your holdings; we don't need them. Organizations: don't send us information about your members or customers, including nonpublic personal information under the Gramm-Leach-Bliley Act. If we receive any of this by mistake, we will delete it.

2. How we use it

• To provide the Service: creating and managing your account, checking that your subscription is active before giving access to the portal and PDFs, emailing each new issue with a personal, expiring PDF link, and support.
• To bill: charging your subscription through Stripe, handling failed payments, sending receipts and required notices (renewal reminders, price changes, cancellation confirmations), keeping records of your renewal consent, and handling tax.
• To communicate about the Service: service, billing and policy notices, and (if you requested a sample or opted in) occasional emails about the Report. You can opt out of non-essential emails at any time (Section 5).
• To improve the Service using aggregated usage statistics.
• To comply with law, enforce our terms, and protect the security of the Service.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising. We do not use your information to give you personal investment recommendations; the Report is the same for every subscriber.

3. Who we disclose it to

• Service providers that process data for us under contract, only to provide their services to us:
  • Stripe (payments, subscriptions and the billing portal);
  • Resend (sending issue and account emails);
  • Upstash (the database that stores subscriber records, email preferences and send logs);
  • Vercel (website hosting and logs);
  • [analytics provider, if any]; [support or CRM tool, if any]. A current list is available on request at [privacy@DOMAIN].
• Our affiliates (including Block Bridge, Inc.), only for administrative, accounting and legal purposes. We don't give subscriber identity or usage data to our parent company's stablecoin-infrastructure business for its sales purposes without your consent.
• Legal and safety: when required by law, subpoena or regulatory request, or to protect rights and safety.
• Business transfers: to a successor in a merger, acquisition or asset transfer (for example, to a credit union service organization that takes over the Service), subject to this policy.

4. AI tools

We use AI-assisted research tools to help prepare content. We configure them not to use subscriber personal information for model training, and we don't put subscriber personal information into tools that would.

5. Your choices

• Issue emails: use the unsubscribe link in any issue email (one click), or turn issue emails off under Account in the portal. Your subscription and portal access continue. You can turn them back on at any time.
• Other non-essential emails: use the unsubscribe link or email [privacy@DOMAIN]. We honor opt-outs promptly and within 10 business days.
• Account and billing emails (sign-in links, receipts, renewal, price-change and cancellation notices) continue while you have an account.
• Cancel your subscription online at any time under Account > Billing.
• Access, correction, deletion: email [privacy@DOMAIN]. We'll respond within a reasonable time and as required by applicable law. We may keep records needed for billing, tax, consent-verification, legal and security purposes.
• State privacy rights: if a state privacy law applies to us, you may have additional rights (for example, to know, correct, delete or opt out). Contact us and we'll honor the rights that apply. We won't discriminate against you for exercising them.

6. Security

We use administrative, technical and physical safeguards appropriate to the limited data we hold, including encryption in transit, signed and expiring PDF and unsubscribe links, secret-protected administrative functions, multi-factor authentication on our provider accounts, and access limited to personnel who need it. No system is perfectly secure. If a security incident affects your personal information, we'll notify you as required by law.

7. Retention

• Subscriber records and billing records: while you are a subscriber, plus [7] years for tax and legal purposes.
• Renewal-consent records: at least 3 years, or 1 year after your subscription ends if longer.
• Email suppression (unsubscribe) records: for as long as needed to honor your choice.
• Send logs: [24] months.
• Sample requests and other contacts: until you opt out, or after [24] months of inactivity.
• Server logs: [12] months.
• Correspondence about corrections or right of reply: as long as the related publication remains available, plus [3] years.

8. International

The Service is intended for people in the United States. Data is stored and processed in the United States.

9. Children

The Service is for adults (18+). It is not directed to children, and we don't knowingly collect children's information.

10. Changes

We'll post updates here with a new effective date, and notify subscribers of material changes by email.

11. Contact

Par & Reserve LLC · [postal address] · [privacy@DOMAIN]