Privacy Policy
Effective date: 1 July 2026
Controller
SukukFi Labs Inc, incorporated in the Republic of Panama (company number 155754578), is the data controller for information collected through the Platform at app.sukuk.fi and docs.sukuk.fi.
1. Data We Collect
Wallet address. When you connect a wallet, your public address is associated with your session and on-chain activity. A wallet address is a pseudonymous identifier. It does not directly identify you by name but may become personal data if linked to your identity through other means.
IP address. Your IP address is collected at the infrastructure layer for security, fraud prevention, and jurisdictional geo-blocking (access restriction for FATF-blacklisted countries). IP addresses are not stored in application databases but may be retained in server and network access logs.
Usage analytics. The Platform uses Plausible Analytics, a privacy-respecting analytics service. Plausible does not use cookies, does not track users across sessions or websites, and collects no personal data such as name, email address, or device identifiers. Only aggregate page-view and referral data is collected.
On-chain transaction data. Transactions you submit are recorded on Berachain and are publicly visible on the blockchain. SukukFi does not control and cannot modify or delete on-chain data.
2. How We Use Your Data
We use the above data to: operate and secure the Platform; enforce eligibility requirements and geo-blocking; detect and prevent fraud and abuse; improve the Platform; and comply with applicable law.
3. Third Parties
Fuze Finance. Fuze Finance is a regulated financial institution providing the fiat settlement layer. If you are an obligee (an entity directed to pay invoice proceeds), your Know Your Business (KYB) information is collected and stored by Fuze Finance under their own privacy policy. SukukFi Labs Inc receives KYB status confirmation only and does not store KYB documents.
Plausible Analytics. Privacy-first, cookieless analytics. Data is processed on Plausible's EU-based servers. See plausible.io/privacy for their policy. No personal data is shared with Plausible.
Cloudflare. Infrastructure provider used for content delivery, DDoS mitigation, and geo-blocking. Cloudflare processes IP addresses at the network layer. See cloudflare.com/privacypolicy.
On-chain data. Transactions recorded on Berachain are public, immutable, and outside SukukFi's control.
4. Data Retention
| Data type | Retention period |
|---|---|
| Server access logs (IP addresses) | Up to 90 days, then deleted |
| Wallet addresses and vault interaction records | Duration of the relevant vault arrangement plus 7 years (legal and compliance purposes) |
| Plausible analytics data | Rolling 2-year aggregate data per Plausible's policy; no personal data stored |
| On-chain data | Permanent (blockchain; outside SukukFi's control) |
5. No Selling of Data
SukukFi Labs Inc does not sell, rent, or trade personal data to third parties for marketing purposes.
6. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, restrict processing of, or request deletion of personal data held about you. To exercise any of these rights, contact privacy@sukuk.fi.
Note: wallet addresses and on-chain transaction data are technically impossible for us to erase (they are permanently recorded on a public blockchain). Off-chain records will be addressed to the extent technically and legally possible.
7. Cookies
The Platform does not use cookies for tracking or analytics. Plausible Analytics is cookieless by design. Infrastructure providers (Cloudflare) may set technical cookies for security and load-balancing purposes; these are strictly necessary and cannot be opted out of.
8. Changes to This Policy
We may update this Privacy Policy by posting the revised version at docs.sukuk.fi/privacy-policy. Material changes will be communicated through the Platform. Continued use after the effective date of a revision constitutes acceptance.