Privacy Policy

PrizeForge is a product of Positron. PrizeForge provides a crowdfunding marketplace. Individuals and businesses of all sizes use our technology and services to find opportunities to create value and make payments to value creators.

This Privacy Policy (“Policy”) describes the Personal Data that we collect, how we use and share it, and details on how you can reach us with privacy-related inquiries. The Policy also outlines your rights and choices as a Data subject, including the right to object to certain uses of your Personal Data.

Your privacy and our Policy is strongly influenced by the needs of our Payment Partner, Stripe. You are advised to read their policy.

Defined Terms

In this Policy, “Positron”, "PrizeForge", “we”, “our,” or “us” refers to the Positron entity responsible for the collection, use, and handling of Personal Data as described in this document.

“Personal Data” or "Data" refers to any Data associated with an identified or identifiable individual, which can include Data that you provide to us, and that we collect about you during your interaction with our Services (such as device data, IP address, etc.).

• Contributor - Contributors make payments
• Value Creator - Value creators ("Creators") recieve payments from Contributors
• User - Users are authenticated with our services. A User may be a Contributor or Value Creator or both.
• Visitor - When you interact with PrizeForge by visiting without being authenticated, or when your interaction with PrizeForge does not involve you being a Contributor or Value Creator, we refer to you as a “Visitor.”

"Authentication" or "authenticated" refers to our being able to establish the identity of a User across multiple sessions, via a logged in account. All Users of our services are authenticated.

"Payment Partners" refers to Stripe Connect and other Stripe services.

What Data Do We Collect?

• Data you provide to register for our service or express interest in obtaining data about us or our Services. All personal Data that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal Data.
• Data automatically collected when you visit, use, or navigate our Services. We collect network and client data whenever connections are made to our services. We use cookies and other similar authentication technologies. We collect the Data of all Visitors in order to protect the security and service availability of Users.

Payment Partners

Users who become a Contributor or Value Creator will share Data with our Payment Partners.

Data you provide our Payment Partners may be shared with us in order to assist in the maintenance of their legal requirements, such as "Know Your Customer" ("KYC") and Anti-Money Laundering ("AML") regulations.

Our Payment Partners collect Sensitive Data such as credit card numbers, passports, and other identifying data in order to provide their services. We do not store Sensitive Data, but we may store identifying data that enables us to share legally necessary data with our Payment Partners.

Legal bases for Processing Data

We process your data whenever it is necessary and we have a valid legal reason. Valid legal reasons include:

• Consent. When you choose to use our Services, you have given us implied consent to process your data as necessary to provide those services. You may withdraw consent by deleting your account.
• Legal Obligation. We may process your data when we believe it is necessary for compliance with our legal obligations. These obligations include cooperating with law enforcement and regulatory agencies, including excercising or defending our legal rights, and disclosing your data as evidence in litigation in which we are involved.
• Vital Interests. We may process your data to protect the vital interests of a third party, such as potential threats to the safety of any person.

When using our service as a Contributor or Value Creator, you give us consent to process your data to detect, prevent, investigate, and remedy (ie report to law enforcement) any fraud, unauthorized transactions, or financial abuse. This may involve cross-referencing data you have provided with data we are legally able to obtain from public records and our Payment Partners.

Fraud and financial abuse on PrizeForge includes methods designed to affect social decisions resulting from our Services, including social engineering, structuring, sock puppets, and other forms of disinformation. You give us consent to process your data relating to your interactions with other users to detect such patterns of behavior. You also give us consent to attempt to detect when you or your account may have been compromised or used in an attempt to carry out such fraud, unauthorized transaction, or financial abuse.

Sharing Your Data

• Business Transfers. We may share or transfer your data in connection with, or during any negotiations of, any merger, sale or company assets, financing, or acquisition of all or a portion of our business to another company.
• Payment Partners. We may share or transfer your data to our payment partners as necessary for them to provide services and satisfy legal requirements.
• Affiliates. Positron may share your data with wholly controlled entities that provide the same or similar products and Services or part of a product or Service. When you sign up for new products and services at entities wholly controlled by Positron, your data may be shared with that entity to expedite sign-up and synchronize data across all our products and services.

Cookies & Tracking

We use cookies to collect and store your data. We may use similar tracking technologies (like web beacons and pixels) to gather data when you interact with our Services. These help us maintain the security and robustness of our Services. We do not use 3rd party cookies or assist any 3rd parties in tracking besides those that may be used by our Payment Partners in order to provide Payment Services.

Single Sign-On

If you register or log in to our Services using an external account, we have have access to certain data about you. We will use this data to authenticate your account identity. We do not control data associated with these external accounts.

International Data Transfers

We may transfer, store, and process your data in countries other than your own. Our servers are located in Seoul, South Korea. When you make use of our payment partners, your personal data may be stored in other countries. These countries may not have data protection laws similar to or as comprehensive as those in your country. We will protect your data as specified in this Policy.

Security and Retention

We retain your data for as long as necessary to provide Services you use unless otherwise required by law. Tax, accounting, KYC, AML, and other legal requirements may lead to longer retention times. If we determine your data is no longer in use but must be retained, we will isolate it from further processing until deletion is possible.

Do We Collect Data From Minors?

We do not collect data or market to children under 18 years of age. By using the services, you represent that you are at least 18 yars of age or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Serivces. If we learn that personal data from users less that 18 years of age has been collected, we will take reasonable measures to delete the account and associated data from our records.

Your Rights

Depending on your location and applicable law, you may have some or all of the following rights regarding the Data we process about you as a Data Controller.

• Request confirmation of whether PrizeForge is processing personal data associated with you, the categories of data it has processed, the third parties or categories thereof with which your data is shared
• Request access to the data PrizeForge processes about you
• Request making corrections to your data
• Request deletion of your Data
• Request transfer your data to another company provided it is technically feasible
• Object to or request to restrict the processing of your data
• Not be discriminated against for excercising these rights; and
• Right to appeal any decision by PrizeForge relating to your rights by contacting relevant regulatory agencies

If our services do not provide a means to excercise these rights, you can make a request to our Contact.

Account Information

You can make corrections or delete your account. We may retain information as necessary to comply with legal obligations, continue an ongoing investigation into fraud or financial abuse, or as specified in [Security and Retention](#Security and Retention)

Do-Not-Track Features

We do not respond to Do-Not-Track ("DNT") features or settings across any of our products or services. There is no industry-standard approach to what this signal means.

In order to protect the robustness and security of our services, we consider all Visitor traffic or connections to be potentially malicious and do our best to monitor traffic patterns to prevent degredation service or breach of User security.

Other Regions

You may have additional rights based on the location you reside in.

Updates and Notifications

Changes to this notice may be made at any time. We will notify all affected Users, Value Creators, and Contributors by either prominently posting a notice or sending an email or other direct message.

Contact

You may email us at contact@prizeforge.com