Privacy Policy

1. Introduction

The Concept Store ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all users of The Concept Store platform, including concept owners, investors, administrators, and visitors. By using our platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when using our platform:

• Account Registration: Name, email address, password, phone number, company name, job title, location, professional bio
• Profile Information: Profile photo, social media links, investment preferences, industry expertise, accreditation documentation
• Concept Information: Business plans, financial projections, team details, product descriptions, intellectual property documentation, pitch decks
• Communication Data: Messages sent through our platform, support tickets, feedback, survey responses
• Financial Information: Investment amounts, funding goals, revenue data (we do not store full credit card numbers or bank account details)
• Verification Documents: Government-issued ID, proof of accreditation, business licenses, tax documents

2.2 Information Collected Automatically

When you access our platform, we automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages viewed, time spent on pages, click patterns, search queries, concepts viewed, features used
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking: See our Cookie Policy for detailed information about cookies and similar technologies

2.3 Information from Third Parties

We may receive information about you from:

• Identity verification services confirming your accreditation status
• Payment processors providing transaction confirmation
• Social media platforms if you link your accounts
• Public databases and business registries validating company information
• Analytics providers helping us understand platform usage

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Core Platform Operations

• Creating and managing user accounts
• Facilitating connections between concept owners and investors
• Processing and displaying concept information
• Enabling communication through messaging features
• Authenticating users and preventing unauthorized access
• Providing customer support and responding to inquiries

3.2 Personalization and Recommendations

• Recommending relevant concepts based on investment preferences and viewing history
• Customizing dashboard content and notifications
• Matching investors with concepts aligned to their interests
• Providing personalized analytics and insights

3.3 Security and Fraud Prevention

• Detecting and preventing fraud, scams, and unauthorized transactions
• Verifying user identities and accreditation status
• Monitoring for suspicious activity and policy violations
• Protecting intellectual property and confidential information
• Enforcing our Terms of Service

3.4 Analytics and Improvement

• Analyzing platform usage patterns and user behavior
• Improving features, functionality, and user experience
• Conducting research and development for new features
• Testing platform performance and troubleshooting issues

3.5 Legal and Regulatory Compliance

• Complying with securities laws and investment regulations
• Responding to legal requests, court orders, and government inquiries
• Maintaining records required by law
• Enforcing our rights and defending legal claims

3.6 Marketing and Communications

• Sending transactional emails about account activity and platform updates
• Providing newsletters featuring new concepts and investment opportunities (with consent)
• Sending promotional materials about platform features and events (you can opt out anytime)
• Conducting user surveys and requesting feedback

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Between Platform Users

• Concept information (business plans, financial data, team profiles) is visible to registered investors
• Investor profiles (name, professional background, investment focus) may be visible to concept owners
• Messages and communications sent through our platform are accessible to intended recipients
• Users control privacy settings to limit information visibility

4.2 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud hosting providers (AWS, Google Cloud) for data storage and processing
• Identity verification services for accreditation checks
• Payment processors for transaction handling
• Email service providers for communications
• Analytics platforms for usage insights
• Customer support tools for ticket management

All service providers are contractually bound to protect your information and use it only for specified purposes.

4.3 Business Transfers

If The Concept Store is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred to the successor entity. We will notify you of any such change and provide options regarding your data.

4.4 Legal Requirements

We may disclose information when required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government or regulatory investigations
• Requests from law enforcement agencies
• Situations involving potential threats to safety
• Protection of our legal rights and property

4.5 With Your Consent

We may share information for other purposes with your explicit consent, such as featuring your success story in marketing materials or introducing you to strategic partners.

5. Data Security

We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security)
• Data at Rest: Sensitive information is encrypted using AES-256 encryption when stored
• Access Controls: Role-based access ensures employees can only access data necessary for their job functions
• Multi-Factor Authentication: Available for all accounts and required for high-value transactions
• Security Monitoring: 24/7 intrusion detection and automated threat response systems
• Regular Audits: Annual third-party security assessments and penetration testing

5.2 Operational Safeguards

• Employee background checks and security training
• Strict confidentiality agreements for all team members
• Incident response protocols and breach notification procedures
• Regular data backups and disaster recovery planning

5.3 Your Responsibilities

While we implement strong security measures, you also play a critical role in protecting your account:

• Use strong, unique passwords and change them regularly
• Enable multi-factor authentication
• Do not share your login credentials
• Log out from shared or public devices
• Report suspicious activity immediately

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

6.1 Active Accounts

Information associated with active accounts is retained indefinitely while your account remains active and in good standing.

6.2 Closed Accounts

When you close your account, we retain certain information for:

• Legal Compliance: 7 years for tax records, financial transactions, and regulatory requirements
• Fraud Prevention: 5 years to detect patterns of abuse and protect the community
• Dispute Resolution: Duration of any ongoing disputes plus applicable statute of limitations

6.3 Marketing Data

If you unsubscribe from marketing communications, we retain your email address to honor your opt-out preference.

6.4 Anonymous Analytics

Aggregated, anonymized data that cannot identify you may be retained indefinitely for research and platform improvement.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You can request a copy of your personal information in a structured, machine-readable format. We will provide this within 30 days of your request.

7.2 Correction

You can update most of your information directly through your account settings. For information you cannot modify yourself, contact us to request corrections.

7.3 Deletion

You can request deletion of your account and personal information. Note that we may retain certain information as required by law or for legitimate business purposes (fraud prevention, dispute resolution).

7.4 Objection and Restriction

You can object to certain processing activities (such as marketing) or request that we restrict processing in specific situations.

7.5 Withdraw Consent

Where we rely on consent to process your information, you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

7.6 Opt-Out of Marketing

You can unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing message or adjusting preferences in your account settings.

To exercise any of these rights, email privacy@theconceptstore.com

8. International Data Transfers

The Concept Store operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Binding corporate rules for intra-organizational transfers
• Your explicit consent for specific transfers

9. Children's Privacy

The Concept Store is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child without parental consent, we will delete that information immediately. If you believe we have inadvertently collected information from a child, please contact us at privacy@theconceptstore.com.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about personal information collected, used, disclosed, and sold in the past 12 months
• Right to Delete: Request deletion of personal information we have collected
• Right to Opt-Out: Opt-out of the "sale" of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Exercise privacy rights without discriminatory treatment

To exercise these rights, email privacy@theconceptstore.com or call [toll-free number]. We will verify your identity before processing requests.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

Our legal basis for processing your information includes:

• Contract Performance: Processing necessary to provide platform services
• Legitimate Interests: Fraud prevention, security, platform improvement
• Legal Obligation: Compliance with securities laws and regulations
• Consent: Marketing communications and certain data sharing

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Email notification to your registered email address
• Prominent notice on the platform homepage
• In-app notification upon your next login

We will provide at least 30 days' notice before any material changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all inquiries within 5 business days.