GreenTigrePrivacy Policy

1. Application and Scope

1.1. This Privacy Policy describes how information is collected, used, disclosed, retained, and protected when you access or use the GreenTigre website, marketplace, account features, quote workflows, payment features, administrative tools, communications, and related services (collectively, the "Services" or "Marketplace").

1.2. Please read this Privacy Policy carefully. By accessing or using the Services or otherwise providing information to us, you acknowledge that you have read and understand this Privacy Policy.

1.3. This Privacy Policy applies to information collected through the Services and through email, support, sales, operational, or other communications concerning the Services. It does not apply to third-party websites, applications, registries, payment or banking providers, carbon credit producers, insurers, or other services that are not governed by this Privacy Policy, even when they are linked to or support the Services.

1.4. If you use the Services on behalf of a company, buyer, entity, administrator, or other organization, this Privacy Policy applies to information associated with that use. Your organization may also have agreements, policies, permissions, or administrator settings that affect how information is accessed, used, retained, or disclosed.

2. Marketplace Participants and Roles

2.1. Biochar Now (www.biocharnow.com) is the producer of the eligible insured, verified biochar carbon credits made available through the Marketplace and may provide carbon credit, project, inventory, availability, and supporting documentation information.

2.2. Insured Carbon Registry (www.insuredcarbonregistry.com) is the registry responsible for verifying the carbon credits and maintaining applicable registry, verification, issuance, tracking, and retirement records.

2.3. AgriCap (www.agricapgroup.com) is the insurance company providing insurance for the verified carbon credits and may provide insurance-related information and documentation applicable to those credits.

3. Information We Collect

3.1. Depending on how you interact with the Services, we may collect the following categories of information:

• Personal and Business Contact Information. Your name, business name, business address, email address, telephone number, job title, and account contact details.
• Account and Authentication Information. Your username, password or other authentication credentials, user ID, account status, role, permissions, administrator settings, and related account records associated with use of the Services.
• Entity and Organization Information. Information about the company, buyer, entity, sub-entity, administrator, authorized user, beneficiary, or other organization associated with your use of the Services, including business registration details and tax identification information such as an Employer Identification Number (EIN).
• Quote, Transaction, and Wallet Information. Quote requests, review, acceptance, expiration or cancellation; purchase activity; inventory and project or location selections; credit type, vintage, quantity, and pricing; wallet balances and ledger entries; payment, settlement, and retirement status; confirmation numbers; and related transaction records.
• Retirement, Registry, and Documentation Information. Information used to coordinate, document, or confirm carbon credit retirement, including buyer or beneficiary details, organization name, retirement purpose, reporting period, country, project and location details, credit details, quantity, retirement date, registry or retirement confirmations, and supporting records.
• Payment, Banking, and Settlement Information. Information used for payment flows, billing, authorization, settlement, failed payments, collections, reconciliation, and related financial operations. This may include limited bank account, payment, settlement, or verification information received from you, your organization, a financial institution, or a payment, banking, or settlement provider.
• Communications and Support Information. Information you provide through forms, support requests, sales or operational discussions, or other communications concerning the Services.
• Marketing and Preference Information. Communication preferences, newsletter or event signups, marketing interactions, and requests to receive or stop receiving communications.
• Technical, Device, and Usage Information. Browser, device, operating system, internet connection and IP address, pages and features used, timestamps, referring URLs, logs, diagnostics, and similar usage details.
• Security, Compliance, and Audit Information. Information used to secure the Services, verify activity, investigate fraud or misuse, enforce access controls, support compliance, and maintain operational or audit records.

3.2. Certain information may be considered sensitive personal information under applicable law, including account credentials, payment or financial information, business tax identifiers associated with an individual or sole proprietor, and information used for security or fraud prevention. We use sensitive personal information only as reasonably necessary to provide and secure the Services, process transactions, comply with law, prevent fraud, or as otherwise permitted by applicable law.

4. How We Collect Information

4.1. We collect information directly from you when you create an account, submit a form, request or accept a quote, initiate, place, or complete a transaction, provide payment or settlement information, submit retirement information, request support, or otherwise use the Services.

4.2. We may automatically collect certain technical, device, and usage information through the technologies described in Section 8, where deployed.

4.3. We may receive information from your organization or its authorized administrators.

4.4. We may also receive information from third parties that support Marketplace transactions and carbon credit workflows, including Biochar Now as the producer of the eligible insured, verified biochar carbon credits; Insured Carbon Registry as the registry responsible for verifying the carbon credits; AgriCap as the insurance company providing insurance for the verified carbon credits; and other hosting, security, fraud prevention, analytics, professional-service, and business partners as applicable.

5. How We Use Your Information

We may use information to:

• a. Provide, operate, maintain, secure, and improve the Services.
• b. Create, authenticate, administer, and manage accounts, roles, permissions, and entity relationships.
• c. Present Marketplace content, inventory, projects or locations, quotes, payment and settlement information, and administrative tools.
• d. Process and administer quotes, purchases, transfers, wallet and ledger activity, settlement, reconciliation, and related transaction records.
• e. Coordinate eligible carbon credit retirements and create, maintain, and support delivery of related registry confirmations, transaction and settlement records, documentation, audit, and reporting.
• f. Communicate about accounts, quotes, transactions, documentation, support, updates, security, legal notices, and changes to the Services.
• g. Process payments, authorization, billing, settlement, failed payments, collections, reconciliation, and related financial operations.
• h. Support internal operations, reporting, analytics where deployed, auditing, troubleshooting, quality assurance, and product development.
• i. Send marketing, educational, event, or promotional communications where permitted by law and consistent with your preferences.
• j. Prevent and investigate fraud, unauthorized access, misuse, errors, security incidents, and other unlawful or harmful activity.
• k. Comply with legal, regulatory, contractual, accounting, tax, audit, recordkeeping, registry, retirement, and other compliance obligations.
• l. Enforce our Terms of Use and other applicable agreements.
• m. Carry out another purpose disclosed when information is collected or with your consent.

6. Carbon Credit Retirement, Registry Records, and Documentation

6.1. The Services may support the purchase and retirement of eligible insured, verified biochar carbon credits. These workflows may require information to be shared with Biochar Now as the carbon credit producer; Insured Carbon Registry as the registry responsible for verifying and maintaining records for the carbon credits; AgriCap as the insurance company providing insurance for the verified carbon credits; GreenTigre solely as the Marketplace facilitator; and authorized representatives of your organization.

6.2. Retirement and registry records may identify the buyer or beneficiary, organization, project and location, credit type, vintage, quantity, retirement date, reporting period, retirement purpose, country, confirmation number, wallet or transaction reference, and other information required to evidence the retirement.

6.3. Certain registry and retirement records may be public, durable, or unchangeable after a retirement is confirmed. Their visibility, permanence, correction, or removal may be governed by the applicable registry, partner process, documentation workflow, or legal requirements.

6.4. Retirement, registry, and documentation records may be retained or made available to partners, registry participants, authorized users, auditors, or other parties as needed for confirmation, audit, reporting, reconciliation, legal, compliance, and anti-double-counting purposes.

6.5. Independent parties involved in production, verification, insurance, payment facilitation, and retirement workflows may process information under their own privacy policies, registry rules, insurance documentation, contractual obligations, and applicable law.

7. Disclosure of Information

7.1. We may disclose personal and business information as necessary to operate the Services and support Marketplace activity to the following categories of recipients:

• Service Providers. Vendors and contractors that support hosting, infrastructure, security, analytics where deployed, communications, customer support, software development, professional services, document management, reporting, and other business operations.
• Payment, Banking, and Settlement Providers. Third parties that support payments, authorization, banking, settlement, reconciliation, failed payments, billing, collections, and related financial operations.
• Marketplace and Transaction Partners. Parties involved in the production, verification, insurance, purchase, payment facilitation, retirement, documentation, confirmation, or reconciliation of eligible insured, verified biochar carbon credits, including Biochar Now as the carbon credit producer; Insured Carbon Registry as the registry responsible for verifying the carbon credits; and AgriCap as the insurance company providing insurance for the verified carbon credits.
• Your Organization and Authorized Users. Authorized representatives of a company, buyer, entity, administrator, or other organization associated with your account, who may receive relevant account, role, transaction, reporting, documentation, access, usage, or administrative information.
• Professional Advisors. Lawyers, accountants, auditors, consultants, insurers, and other advisors supporting our legal, compliance, accounting, tax, insurance, or audit functions.
• Legal, Compliance, and Safety Recipients. Courts, regulators, law enforcement, government authorities, auditors, or other parties when disclosure is reasonably necessary to comply with law or legal process, enforce agreements, protect rights or safety, investigate fraud or security issues, or prevent unlawful activity.
• Business Transaction Parties. Prospective or actual buyers, investors, financing sources, advisors, or other parties involved in a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar transaction.

7.2. We may use or disclose aggregated, de-identified, or anonymized information that does not reasonably identify you, as permitted by applicable law and while maintaining the information in the required form. Where required, we will not attempt to reidentify de-identified information except as legally permitted and will require recipients to comply with applicable restrictions.

7.3. Recipients acting as independent controllers govern their own processing. See Section 17.

8. Cookies, Analytics, and Similar Technologies

8.1. We may use cookies, log files, analytics tools where deployed, and similar technologies to operate and secure the Services, remember preferences, understand usage, improve performance, and measure communications or marketing.

8.2. Some cookies are necessary for the Services to function; others may support analytics, performance, personalization, or marketing. Browser settings may allow you to refuse or disable cookies, but doing so may affect certain features.

8.3. Third parties may use cookies or similar technologies on or through the Services, and we do not control all third-party tracking technologies. Where required by law, we will provide applicable cookie controls, consent options, or opt-out mechanisms.

8.4. Some browsers transmit "Do Not Track" signals, but no uniform industry standard governs responses to them. Where required by law, we will honor legally recognized opt-out preference signals for applicable processing activities.

9. Sale, Sharing, and Targeted Advertising

9.1. Personal information collected through the Services is not sold or shared for cross-context behavioral advertising, as those terms are defined under applicable law.

9.2. Personal information collected through the Services is not used for targeted advertising. Quote, transaction, payment, registry, insurance, or retirement documentation records are also not used for targeted or cross-context behavioral advertising.

9.3. If these practices change, we will update this Privacy Policy and provide any notices, rights, or controls required by applicable law before engaging in the applicable activity.

10. Data Retention

10.1. Contact, account, authentication, entity, organization, communication, and support information is generally retained while an account or business relationship remains active and afterward as reasonably necessary to provide and protect the Services, administer the relationship, meet contractual and legal obligations, resolve disputes, enforce agreements, and maintain required records.

10.2. Quote, transaction, wallet, ledger, payment, settlement, retirement, registry, and documentation information is retained as needed to complete, document, reconcile, and audit activity and to meet legal, regulatory, accounting, tax, contractual, registry, retirement, anti-double-counting, and anti-fraud requirements. These records may be retained after an account closes or a deletion request is submitted.

10.3. Technical, usage, security, compliance, and audit information is retained according to operational, security, troubleshooting, fraud-prevention, incident-response, legal, and compliance needs. Marketing and preference information is retained while relevant to our communications and as needed to record and honor opt-out choices.

10.4. As described in Section 6.3, public registry records or final retirement documentation maintained by Insured Carbon Registry or other independent parties may not be capable of deletion, alteration, or removal and may remain visible or verifiable indefinitely.

10.5. When information is no longer needed, we will delete, de-identify, aggregate, or otherwise handle it in accordance with applicable law and our retention practices.

11. Your Choices and Privacy Rights

11.1. Depending on your residence and applicable law, you may have the right to:

• a. Know or confirm whether we process personal information about you.
• b. Access the categories or specific pieces of personal information we collect about you.
• c. Obtain a portable copy of personal information you provided, where applicable.
• d. Correct inaccurate personal information.
• e. Request deletion of certain personal information.
• f. Obtain information about how we collect, use, disclose, sell, share, or otherwise process personal information.
• g. Opt out of certain processing, including sale, sharing, targeted advertising, or certain profiling, where applicable.
• h. Limit certain uses or disclosures of sensitive personal information, where applicable.
• i. Withdraw consent where processing is based on consent.
• j. Exercise applicable privacy rights without discrimination.
• k. Appeal a decision regarding a privacy request, where applicable.

11.2. We may verify your identity and authority before responding. If you act for another person or organization, we may require proof of authorization.

11.3. Privacy rights may be limited by legal, contractual, audit, security, operational, accounting, tax, registry, retirement, documentation, fraud prevention, wallet, settlement, or compliance obligations. We may retain records despite a deletion request when required or permitted for these purposes.

11.4. When responding to a valid deletion request, we will take the steps required by applicable law, which may include notifying relevant service providers, contractors, or other recipients. Information independently maintained by Insured Carbon Registry, Biochar Now, AgriCap, GreenTigre in its capacity solely as Marketplace facilitator, financial institutions, or other independent parties remains subject to those parties' legal obligations and applicable limitations, and you may need to contact them directly.

11.5. To exercise a privacy right, contact us as described in Section 19 and include "Privacy Request" in the subject line.

11.6. Where applicable law provides a right to appeal, you may appeal a denied privacy request by replying to our decision or contacting us as described in Section 19 with "Privacy Appeal" in the subject line. We will respond and provide any further complaint information required by applicable law.

12. California and Other U.S. State Privacy Rights

12.1. For California residents, this Privacy Policy is intended to serve as a notice at collection and to describe the categories of personal information we collect, the purposes for which we use it, the categories of sources, the categories of recipients, and the rights that may be available under the California Consumer Privacy Act, as amended.

12.2. The table below summarizes the categories of personal information we may collect and disclose. The examples are illustrative and may not apply to every user.

12.3. If personal information is disclosed to third parties for their own direct marketing purposes, California residents may request certain information about those disclosures where applicable law provides such a right.

12.4. Residents of other U.S. states may have similar or additional rights. Available rights vary by state and may depend on whether a law applies to the Services, the nature of your relationship with the Services, and the information involved.

13. Marketing Communications

13.1. You may opt out of promotional emails, newsletters, events, or educational communications by following the unsubscribe instructions or contacting us. We may still send transactional, operational, security, legal, or service-related communications.

14. Data Security

14.1. We use reasonable administrative, technical, and physical safeguards designed to protect information from accidental loss and unauthorized access, use, alteration, and disclosure.

14.2. You are responsible for keeping account credentials confidential and restricting access to your devices, accounts, and communications.

14.3. No internet transmission or electronic storage method is completely secure. Although we use reasonable efforts to protect information, we cannot guarantee absolute security.

15. Where We Transfer and Store Information

15.1. The Services are currently intended for users located in the United States.

15.2. Information may be stored, accessed, transferred, or processed in the United States or other locations where applicable service providers or transaction participants process information, subject to applicable law.

16. Children and Minors

16.1. The Services are intended for adults and business users. Individuals under 18 may not create an account, request or accept a quote, place a transaction, or otherwise use the Services.

16.2. We do not knowingly collect personal information from minors. If we learn that we collected personal information from an individual under 18, including a child under 13, we will take reasonable steps to delete it, subject to applicable legal, security, audit, transaction, registry, retirement, and compliance obligations.

16.3. We do not knowingly sell or share personal information of individuals under 16, as those terms are defined by applicable privacy laws. This statement addresses privacy-law requirements and does not permit individuals under 18 to use the Services.

17. Third-Party Links and Partner Services

17.1. The Services may link to, integrate with, or rely on third-party websites, platforms, registries, documentation portals, payment or banking providers, partner services, or other external services.

17.2. We are not responsible for the privacy or security practices, content, or terms of third-party services. Your use of those services is subject to their separate terms and privacy policies.

18. Automated Workflows

18.1. We may use automated workflows to route quote requests, apply Marketplace rules, calculate or display pricing, confirm or update inventory, update wallet balances, process transaction instructions, and coordinate settlement and retirement workflows.

18.2. These workflows support transaction execution and Marketplace administration. They are not used to make decisions based solely on automated processing, or to replace or substantially replace human decision-making, where those decisions produce legal or similarly significant effects concerning you as an individual, unless otherwise disclosed or permitted by law.

19. Changes and Contact Information

19.1. We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Privacy Policy and revise the "Last Updated" date.

19.2. To the extent permitted by law, your continued use of the Services after an updated Privacy Policy is posted means that you acknowledge the revised policy. This does not replace any notice or consent required by applicable law.

19.3. To ask questions, comment on this Privacy Policy or our privacy practices, or submit a privacy request, contact us at:

GreenTigre Privacy

info@greentigre.com