Privacy Policy
LAST UPDATED: MAY 21, 2025
GrainChain, Inc. (“GrainChain”, “we”, “us”, or “our”) is committed to protecting your privacy. This
Privacy Policy applies to (i) the GrainChain Platform and GrainChain Software, (ii) the websites
owned and operated by us (the “GrainChain Website(s)”), and (iii) any services provided to you by us
in connection with the foregoing (clause (i) through (iii), collectively, the “GrainChain
Service”).For clarity, “GrainChain Service” has the same meaning as “Services” in our Terms of
Service. This Privacy Policy is a part of and incorporated into the GrainChain Terms of Service
Agreement (collectively, the “Terms”) entered into between GrainChain and you, or your employer, or
the entity that has provided you with credentials, or has otherwise authorized you, to access and
use the GrainChain Service. If any provision of this Privacy Policy conflicts with the Terms, this
Privacy Policy will control with respect to privacy and data-protection matters; the Terms will
control for all other matters.
Capitalized terms used in this Privacy Policy but not defined in this Privacy Policy have the
meanings given to them in the Terms. This Privacy Policy is intended to inform you about the kind of
information, including personally identifiable information, that we may collect from you in
connection with your use of the GrainChain Service and how, and for what purpose, we use that
information. Additional regional disclosures required by the California Consumer Privacy Act (as
amended by the CPRA), the EU/UK General Data Protection Regulation (“GDPR”), Virginia Consumer Data
Protection Act (“VCDPA”), and the Brazilian LGPD appear at the end of this notice.
YOU GIVE US CONSENT
Please read this Privacy Policy carefully to understand our policies and practices regarding your
information and how we will treat it. If you do not agree with our policies and practices, your
choice is not to use or access the GrainChain Service. By accessing or using the GrainChain Service,
or submitting information through the GrainChain Service, you agree to the terms of this Privacy
Policy and you expressly consent to the collection, use, and disclosure of your Personal Information
and Anonymous Information (as each term is defined below) in accordance with this Privacy Policy.
Where we rely on “consent” as a legal basis under GDPR Article 6(1)(a) (for example, for optional
marketing e-mails or geo-location), you may withdraw that consent at any time via the mechanisms
described below; withdrawal will not affect processing that has already occurred. You understand
that by providing us Personal Information, you allow us to identify you. Some of the services we
provide may be hampered if you do not provide us the necessary Personal Information.
DEFINING “INFORMATION” AND “USER DATA”
We collect Customer Data in connection with your use of the GrainChain Service, which includes both
Personal Information and Anonymous Information. “User Data” means content and information (including
Personal Information) submitted by users to, or through, the GrainChain Service. As further
explained below, User Data is controlled by the organization or other third party that entered into
the Terms with GrainChain (the “Customer”). When GrainChain collects or processes User Data, it does
so on behalf of the Customer. If you are using the GrainChain Service by invitation of a Customer,
whether that Customer is your employer, another organization, or an individual, that Customer
determines its own policies regarding storage, access, modification, deletion, sharing, and
retention of User Data which may apply to your use of the GrainChain Service. Please check with the
Customer about the policies and settings it has in place. “Personal Information” (sometimes called
“Personal Data” or “Personally Identifiable Information”) is information that allows someone to
identify or contact you, as well as any other non-public information about you that is associated
with or linked to any of the foregoing, and can include, for example, an individual's first and last
name, phone number, e-mail address and any unique online identifier such as an account ID, wallet
address, or Internet-Protocol (“IP”) address. “Anonymous Information” means data that is not
associated with or linked to your Personal Information; Anonymous Information does not, by itself,
permit the identification of individual persons. “Sensitive Personal Information” has the meaning
given in the CPRA and refers to data such as precise geolocation, Social Security number, and racial
or ethnic origin; we collect such data only as strictly necessary for regulatory compliance (e.g.,
Know-Your-Customer (“KYC”) checks) or where you expressly provide it.
PROTECTING YOUR PRIVACY
We do not share, rent or sell your account information to any third party, except as expressly set
forth in this Privacy Policy. Please help us protect your privacy by keeping your account
information safe. Do not disclose your account password or login information to anyone and keep
changing it periodically. We maintain appropriate administrative, technical, and physical safeguards
(see “Security” below).
Registration Information
When you register an account for the GrainChain Service, you are required to provide us Personal
Information. We collect and store the following Personal Information in connection with the
registration of an account: your email address and first and last name. If you register via a
federated-identity provider (Google, Microsoft, etc.), we will also receive the OAuth or OpenID
Connect token and any profile information that provider shares (for example, avatar URL or locale).
We may use the Personal Information you submit during the registration process to send you
services-related communications. In addition, we may also use such Personal Information to send you
electronic newsletters or promotional e-mails, unless you have requested not to receive such
promotional communications from us as described below. Legal bases (GDPR): (i) performance of a
contract Art. 6(1)(b), (ii) our legitimate interest in administering the Service Art. 6(1)(f), or
(iii) your consent Art. 6(1)(a) for marketing messages.
Payment and Transaction Information
When you submit information to establish your account for payment transactions in connection with
the GrainChain Service, our third-party payment processor (currently, Dwolla) will collect, on our
behalf, your name, billing address, and complete bank account information, that enables the
GrainChain Service to execute on the transaction. For certain regulated transactions we may also
collect government-issued identification numbers, date of birth, and a selfie image to satisfy
anti-money-laundering (“AML”) and know-your-customer (“KYC”) obligations. Our payment processing
service provider will retain this information to process your transactions in connection with the
use of the GrainChain Service. We do not have routine access to your full bank-card number; we store
only the last four digits and tokenized references supplied by the processor.
Services usage information; Geolocation Data
This is information about how you are accessing and using the Services, which may include
administrative and support communications with us, and what third party integrations you use (if
any). In addition, if you use the GrainChain Service, GrainChain may collect your geolocation data
(subject to your consent), and certain mobile device information, which includes: device/platform
type and version (iOS v4, Android, etc.). We collect precise geolocation only when you actively
choose features that require it (e.g., on-site commodity-drop verification). You may disable
location sharing in your device settings at any time; however, certain functionality may then be
unavailable.
Feedback and Communications
If you provide us Feedback or contact us via e-mail or through our “contact-us” forms, we will
collect your first and last name and e-mail address, any information requested in our Feedback or
contact-us forms, as well as any other content included in the e-mail, Feedback or contact-us forms
you send to us. Any Feedback you provide will be governed by the Terms. We may use Personal
Information submitted in your communications to contact and respond to you and otherwise in the same
manner as described above for registration information. We may also publish aggregated,
de-identified comments for marketing purposes (e.g., “95 % of users report faster settlement”), but
never in a manner that would identify you.
Log File Information
When you access or use the GrainChain Service, our service provider may collect, and share with us,
information such as your web request, IP address, access times, and other browsing information. This
information is used to (i) provide you the GrainChain Service and other services requested by you,
(ii) improve the GrainChain Service and other services provided to you by us, (iii) notify users
about updates to the GrainChain Service, and (iv) contact you for our own internal marketing
purposes. Log data is retained for up to 12 months for security-audit purposes and then either
deleted or fully anonymized.
Anonymous Information
We may create Anonymous Information records from Personal Information by excluding information (such
as your name) that would otherwise make such data personally identifiable to you. We may use
Anonymous Information at our discretion and for any purpose.
When we provide or use this information, we employ procedures so that the data does not identify you
and we contractually prohibit recipients of the data from manipulating the data in a way that would
re-identify it back to you. Aggregated statistics (e.g., throughput, price-feed latency) may be
published in white-papers, research, or marketing materials.
Financial Transactions Involving GrainChain
To make informed decisions on whether to participate in a transaction with you, through financing or
otherwise, GrainChain will review and analyze Customer Data we have collected from you, which may
include your name, address, email address, phone number, transaction history, inventory data,
customer contracts, and historical performance. We will use this data with utmost care and respect
for your privacy, and we will not share it with third parties without your explicit consent, except
(i) with regulated financing partners bound by confidentiality obligations, or (ii) as otherwise
required by law. We value the trust you have placed in us and will continue to work hard to protect
your personal information and use it responsibly. If you have any questions or concerns about our
privacy practices, please do not hesitate to contact us.
Other (Opt-In Communications)
We may provide certain additional services and/or communications if you select such additional
services and/or communications by opting-in to such additional services and/or communications using
certain buttons provided in the user interface of our services. We will collect your name, e-mail
address and telephone number (if provided) and any other information we specify in the user
interface of our services where you opt-in by clicking on such buttons. We may use such Personal
Information to send you the corresponding additional services and/or communications. You may
withdraw your consent at any time by using the unsubscribe link in the message or contacting us.
HOW WE SHARE YOUR INFORMATION
We will share your Personal Information with third parties only in the ways that are described in
this Privacy Policy. We consider this information to be a vital part of our relationship with you.
There are, however, certain circumstances in which we may share your Personal Information with
certain third parties without further notice to you, as set forth below.
Service Providers
We may provide your information to third-party service providers (such as, but not limited to,
cloud-hosting, analytics, communications, KYC verification, and logistics vendors) who need the
information to perform services for us. These third-party service providers are contractually
forbidden to use your Personal Information for any purpose other than to provide the services
requested by us and are bound by confidentiality obligations.
Payment and Transaction Processors
We may provide your banking and payment information to third-party service providers engaged on our
behalf, including payment and transaction processors, for the purposes of executing your
transactions, effecting payment and servicing your account. As part of mandatory
“know-your-customer” checks, we or our payment partners may be required by law to collect and verify
additional identity information (e.g., government-ID images) and to screen you against sanctions
lists.
Affiliates
To provide the GrainChain Service and related support we may share some or all of your Personal
Information with our parent company and any subsidiaries or joint ventures under common control with
GrainChain (collectively, “Affiliates”). When we do so, we require our Affiliates to handle your
information in a manner consistent with this Privacy Policy and applicable law.
Business Transfers
As we develop our business, we might sell or buy businesses or assets. In the event of a corporate
sale, merger, reorganisation, dissolution, or similar event, Personal Information may be part of the
transferred assets. You will be notified via e-mail and/or a prominent notice on our website of any
change in ownership or uses of your Personal Information, as well as any choices you may have
regarding your Personal Information.
Other Disclosures - Legal / Safety
Regardless of any choices you make regarding your Personal Information (as set forth below), we may
disclose your Personal Information (i) to respond to subpoenas, warrants, court orders, lawful
requests or legal process, (ii) to establish or exercise our legal rights or defend against legal
claims or protect other users, (iii) in order to investigate, prevent, or take action regarding
illegal activities, suspected fraud, security incidents, or as otherwise required by law, or (iv) to
investigate, prevent, or take action regarding any violation of this Privacy Policy or the Terms.
YOUR CHOICES
Changes and Deletion of your Data
If your Personal Information changes, or if you no longer desire to use or access the GrainChain
Service, you may correct, update, amend, delete or request deletion by making the change in your
registered account settings page, or by contacting us at [email protected]. We will retain your
information for as long as your account is active or as needed to provide you services, resolve
disputes, enforce agreements, and comply with legal obligations. GDPR / UK GDPR / CPRA Rights. See
“Regional Disclosures” below for additional rights (access, portability, restriction, objection,
non-discrimination, etc.).
Opting Out
We will periodically send you e-mails that directly promote the use of the GrainChain Service. Out
of respect for your privacy, you may choose to stop receiving our marketing emails and you will have
the opportunity to “opt-out” by following the unsubscribe instructions included in these emails or
you can contact us at [email protected].
Services-Related Communications
While you may “opt-out” of certain services-related communications by following the unsubscribe
instructions provided in the e-mail you receive or by contacting us at [email protected], you may
not, despite your indicated e-mail preferences, “opt-out” of other services-related communications
regarding your account or any payments made, or to be collected, by you, including receiving notices
of any updates to our Terms or this Privacy Policy, except by terminating your account.
SECURITY
GrainChain employs technical and administrative control and maintain the security of information
collected through the GrainChain Service. Although we follow generally accepted standards to protect
the Personal Information submitted to us, both during transmission and once we receive, no method of
transmission over the Internet, or method of electronic storage, is 100% secure and no company,
including GrainChain, can completely or effectively eliminate the risks connected to handling
information on the Internet. You acknowledge and agree that you provide your Personal Information at
your own risk. If you have any questions regarding our security measures please contact
[email protected].
CHILDREN
GrainChain does not knowingly collect or maintain Personal Information from or about children under
the age of 13 (or under 16 if you reside in the European Economic Area or the United Kingdom). If we
learn that Personal Information of persons under the applicable minimum age has been collected on or
through the GrainChain Service, then we may deactivate the account and/or make the user content
inaccessible. If you find that we have personal information about anyone below the relevant minimum
age, please inform us at [email protected].
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be amended by us from time to time. If we make material changes to this
Privacy Policy, we will notify you by posting the revised Privacy Policy on the GrainChain Website
or through the user interface of the GrainChain Platform or by notifying you at the email you
designated upon registration of your account. Your continued use of the GrainChain Service after
such notification of changes as described above will constitute your agreement to such changes. If
you object to any change, your sole recourse shall be to immediately terminate your account and
cease using the GrainChain Service.
QUESTIONS AND ADDITIONAL INFORMATION.
Please feel free to contact GrainChain at [email protected] if you have any questions about
GrainChain’s Privacy Policy, our Data-Processing Addendum, or our list of sub-processors.
REGIONAL DISCLOSURES.
California Consumers – CPRA
We do not sell Personal Information and have not done so in the preceding 12 months.
We do not share Personal Information for cross-context behavioural advertising.
Categories of Personal Information collected, sources, purposes, and disclosures are as described
above.
You have the right to know, delete, correct, and limit use of sensitive Personal Information;
exercise these rights via [email protected].
Virginia / Colorado / Utah / Connecticut Residents – similar rights are available; please contact
[email protected].
