Privacy Policy
Last updated: [Date]
This Privacy Policy explains how EcoChain, operated by Impact Link Asia (“EcoChain”, “we”, “us”, or “our”), collects, uses, and protects information when you use our platform (the “Service”).
1. Information We Collect
Account information — your name, email address, and password (stored as a secure hash, never in plain text) when you register.
Company profile information — details you or your organization submit about your company, such as industry, size, contact details, and supporting documents (e.g. business license) used for verification.
Usage information — how you interact with the Service, such as pages visited and actions taken, used to operate, secure, and improve the Service.
2. How We Use Information
- To create and maintain your account and your company’s profile
- To verify company information as part of our review process
- To send transactional communications, such as login codes, verification emails, and notifications about your account or company
- To maintain the security and integrity of the Service, including detecting and preventing abuse
- To comply with legal obligations
3. How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
- Service providers — we use trusted third-party providers to operate the Service, including Resend (for sending transactional email) and Cloudflare (for secure file storage). These providers process data only as needed to perform their services for us.
- Within your organization — information in a company profile is visible to authorized users of that company and to EcoChain administrators for verification and support purposes.
- Legal requirements — if required to comply with applicable law, regulation, or legal process.
4. Data Security
We use reasonable technical and organizational measures to protect your information, including password hashing, access controls, and encrypted transmission. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
6. Your Rights
Depending on your location, you may have rights to access, correct, or request deletion of your personal information. To make a request, contact us using the details below.
7. Cookies
We use essential cookies to keep you signed in and to remember your session. We do not use cookies for third-party advertising.
8. Children’s Privacy
The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as posting an update on this page or notifying you through the Service.
10. Contact
Questions about this Privacy Policy or your data can be sent to [Contact Email].