Privacy Policy

1. Information We Collect

We collect information you provide directly to us and information generated through your use of the Service:

2. On-Chain vs. Off-Chain Data

Intuition is a decentralized knowledge graph protocol built on the Intuition blockchain, a public network whose records anyone can read. Your activity on the Service creates two distinct categories of data with very different privacy properties. Understanding this distinction is critical.

We are not responsible for on-chain content that violates applicable law or these terms. While we may hide on-chain content from the Service's user interface, the underlying blockchain data remains permanently accessible through other means.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Process transactions and send related confirmations and receipts
• Authenticate your identity and manage your account and sessions
• Send technical notices, security alerts, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage patterns, and activities on the Service
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with applicable legal obligations
• Personalize your experience based on your preferences and settings

4. Information Sharing

We do not sell or share your personal information for money or other valuable consideration, and we do not use it for targeted advertising. We may share your information only in the following circumstances:

• Service providers: We share information with vendors, contractors, and other service providers who perform services on our behalf (e.g., hosting, analytics, email delivery, payment processing). These parties are bound by confidentiality obligations.
• Legal compliance: We may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Intuition, our users, or the public.
• Business transfers: If Intuition is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Blockchain (inherently public): On-chain actions are broadcast to and recorded on the Intuition blockchain by design. This is not a disclosure by us — it is an inherent property of public blockchains.
• With your consent: We may share information in other ways with your explicit consent.

5. Cookies

We use cookies and similar browser storage to operate the Service, remember your preferences, and—only after your choice—measure usage with PostHog. Our Cookie Policy is the single current inventory of authentication, wallet, preference, consent, error-monitoring, analytics, and first-party product-event storage.

6. Data Security

7. Data Retention

How long we keep off-chain data

We keep off-chain personal information only for as long as we need it for the purpose we collected it for, and then delete it or make it permanently anonymous. To decide how long that is, we weigh the amount, nature, and sensitivity of the information, the risk of harm from unauthorized use or disclosure, whether the purpose can be achieved another way, and the legal, accounting, or reporting obligations that apply to us — including establishing or defending legal claims and preventing fraud.

In practice:

• Account records (email, display name, avatar, preferences, wallet links) are kept for as long as your account exists, and for 30 days after you ask us to close it.
• Sign-in sessions expire automatically. Cached session state is kept for no more than 7 days.
• Your record of accepting these policies (the policy version, the date, and the IP address and browser you accepted from) is kept for 6 years so we can show which terms applied to your account. Unused sign-up records expire after 10 minutes and are purged automatically.
• Uploaded media is kept for as long as it is referenced by your account or by content you have published.
• Analytics and diagnostic records are kept for up to 7 years under our analytics provider's retention settings (see Section 10), after which they are deleted automatically.
• Support and other messages you send us are kept for 24 months.
• Your marketing opt-out record (your email address, how you opted out, and when — plus the IP address and browser only when you confirmed from an email footer link) is kept for as long as we need it to honour your opt-out, including after you ask us to erase everything else, so we never email you again by mistake.
• Administrative audit records are written when one of our team members — or, for invite redemptions, you yourself — acts on your account or your data, for example issuing or redeeming an invite or taking an email address off our marketing opt-out list. Each record names who acted, the action, when it happened, and the details needed to account for it, which can include your email address, your name, an invite code, the reason given, and any notes our team recorded. These records are kept for 6 years so we can show who did what, and they are kept even if the underlying record (such as an opt-out) has since been removed.

Where we cannot delete information immediately — for example because it sits in a backup archive — we isolate it from any further processing and delete it when the backup cycle allows.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information. These rights apply only to off-chain data we hold — they cannot extend to data recorded on a public blockchain.

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Ask us to erase your off-chain personal information — email address, sessions, marketing preferences, analytics identifiers, and support correspondence — by emailing the address below, since there is no self-service delete control today, subject to legal retention obligations. We keep a minimal marketing opt-out record and any administrative audit records (see Section 7) so we can keep honouring your opt-out and account for our own actions. On-chain records cannot be deleted.
• Data portability: Request your personal information in a structured, machine-readable format.
• Objection / opt-out: Object to certain types of data processing, including direct marketing.

How to exercise your rights

Email [email protected] with the subject “Privacy request” and tell us which right you want to exercise. We may ask you to confirm that the account is yours before we act — normally by replying from the email address on the account, or by signing a message with the wallet linked to it. If you use an authorized agent, we may ask for a copy of a valid power of attorney or equivalent written authorization.

If you are in the European Economic Area or the United Kingdom. Intuition Systems, Inc. is the controller of the personal information described in this Policy. Under the GDPR and UK GDPR you may ask us to give you access to your personal information, correct it, delete it, transfer a machine-readable copy of it, restrict how we process it, or object to processing we carry out on the basis of our legitimate interests — including profiling for direct marketing. Where we rely on your consent, you can withdraw it at any time without affecting anything we did before you withdrew it. We will answer within one month of receiving your request, and will tell you if we need up to two further months because the request is complex. If you are not satisfied with our answer, you can complain to the data protection authority where you live or work. For the United Kingdom that is the Information Commissioner's Office, Water Lane, Wycliffe House, Wilmslow, Cheshire SK9 5AF, +44 303 123 1113. This right to complain is not affected by anything in our Terms of Service.

If you are a resident of California or another U.S. state with a privacy law that applies to us. You may ask us what categories of personal information we have collected about you, where we got it, why we collected it, and which categories of third parties we disclosed it to; ask for a copy of it; ask us to correct or delete it; and appeal a decision if we refuse. We will confirm receipt within 10 business days and respond within 45 days, extending by a further 45 days where permitted if we tell you why. You will never be treated differently for exercising these rights.

We do not sell or share your personal information for money or other valuable consideration, and we do not use it for targeted advertising, including cross-context behavioral advertising. When your browser sends a Global Privacy Control signal, we treat it as an opt-out and we do not load optional analytics, even if you granted analytics earlier. We do not treat Do Not Track as a Global Privacy Control signal.

Automated screening. Before you can use the Service the wallet address you connect is checked against the Chainalysis sanctions oracle, a public on-chain registry, through our blockchain node provider, which receives the wallet address being checked, and we block accounts that match. This check runs automatically. If you believe a block is wrong, contact [email protected] and a person will review it.

Deletion and the blockchain

Data protection law gives you a right to have personal information erased. We can honour that right for everything we hold on our own servers. We cannot honour it for anything already written to the Intuition blockchain, because no one — including us — can alter or remove a confirmed blockchain record. That is a property of the technology, not a choice we make.

Put plainly, your data falls into two buckets. On-chain records — the cards and claims you create, your vault activity, and the wallet addresses written to the Intuition blockchain — are public and permanent, and cannot be deleted by us or by anyone else. Off-chain personal information — your email address, sessions, marketing preferences, analytics identifiers, and support correspondence — can be erased on request, except the minimal marketing opt-out record and the administrative audit records described in Section 7, which we keep so we can keep honouring your opt-out and account for our own actions. There is no self-service delete control today: email [email protected] with the subject “Privacy request” and we will act within the timeframes stated above, subject to the legal retention obligations described in Section 7.

When you ask us to erase your data, we will:

• delete or anonymize your account record, profile, preferences, uploaded media, and support correspondence;
• remove the link in our systems between your wallet address and your account identity, so that our off-chain records no longer identify you as the person behind those transactions;
• stop any further off-chain processing of your personal information, other than the minimum record we must keep to prove we handled your request and to meet our own legal obligations; and
• hide, where you ask and where it is technically possible, content associated with your wallet address from the Intuition interface.

We will not be able to:

• remove cards, claims, vault positions, or transactions from the blockchain; or
• prevent anyone else from reading that data through a block explorer, a node, or a copy of the chain that we do not control.

Treat every on-chain action as a publication you cannot retract. Do not put information into a card, claim, or profile you would not be willing to publish permanently.

Where the GDPR applies, we rely on Article 17(3) to decline erasure of on-chain records: deleting them is technically impossible for us, the blockchain is operated by independent nodes whose copies we do not control, and those records are needed to establish, exercise, or defend legal claims and to keep the shared ledger accurate. We will still erase every off-chain copy we hold, as described above.

Governing law and disputes

This Policy is governed by the law stated in Section 16 of our Terms of Service, and any dispute about it is resolved the way Section 14 of those Terms describes, including the arbitration agreement and the class action waiver.

Two things are unaffected by that. First, if you live in the European Economic Area or the United Kingdom, you keep the right to complain to your national data protection authority and to the protection of the mandatory consumer law of the country you live in — nothing here removes those. Second, if you live in a U.S. state whose privacy law gives you a right that cannot be waived by contract, that right still applies.

9. Children's Privacy

10. Third-Party Services

The Service relies on the providers below. Except where noted, they are third parties, and Intuition is not responsible for their data handling practices. We encourage you to review their respective privacy policies:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the effective date at the top of this Policy and, where appropriate, by sending an email notification or displaying a notice within the Service. We encourage you to review this Policy periodically to stay informed about how we protect your information.

Your continued use of the Service after any changes become effective constitutes your acceptance of the revised Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Intuition Systems, Inc.
1079 S Hover St, Ste 200
Longmont, CO 80501, United States
Email: [email protected]