Privacy Policy

What are cookies? Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and provide essential platform functionality.

You can manage cookie preferences through our cookie consent manager or your browser settings. Note that disabling certain cookies may affect platform functionality.

• Strictly Necessary Cookies: Required for site security, authentication, and core functionality. These cannot be disabled.
• Performance & Analytics Cookies: Help us measure usage patterns and analyze platform performance (e.g., Google Analytics).
• Functional Cookies: Remember your preferences, settings, and customization choices.
• Advertising & Targeting Cookies: Used only with your explicit consent for personalized marketing.

We do not sell your personal data. Your information is shared only with trusted partners under strict contractual agreements and appropriate safeguards.

• Service Providers & Processors: Payment processors, custodians, KYC/AML verification providers, cloud hosting services, and analytics platforms operate under contract with strict data protection requirements.
• Operating Partners: Infrastructure project operators, EPCs, O&M providers, and co-location partners receive only data strictly necessary for project operations, typically redacted or limited.
• Regulators & Law Enforcement: Financial authorities, tax agencies, courts, and law enforcement when required by law, legal process, or regulatory obligations.
• Affiliates & Corporate Partners: Within our corporate group for business operations, compliance, and consolidated reporting.
• Corporate Transactions: In the event of merger, acquisition, or insolvency, personal data may be transferred to a successor entity under appropriate protections.
• With Your Consent: Third parties for marketing, integrations, or other purposes where you have provided explicit consent.

As a global infrastructure investment platform, we work with partners and service providers in multiple jurisdictions. When personal data is transferred internationally, we implement appropriate safeguards:

• Standard Contractual Clauses (SCCs): EU-approved contractual protections for data transfers outside the EEA.
• Adequacy Decisions: Transfers to countries recognized by regulators as providing adequate data protection.
• Binding Corporate Rules: Internal data protection policies for transfers within our corporate group.
• Local Compliance Measures: Additional protections required by destination country regulations.

Important Notice: While we implement industry-leading security measures, no system is completely impervious to threats. We continuously update our security protocols to address emerging risks and maintain the highest standards of data protection.

If you suspect unauthorized access to your account or a security breach, contact us immediately at [email protected]. We maintain cyber insurance coverage and incident response procedures to address security events promptly.

Minimum Age Requirement: You must be at least 18 years old (or the age of majority in your jurisdiction) to use our platform. Infrastructure investment services require legal capacity to enter into binding contracts.

• We do not knowingly collect personal data from individuals under 18 years of age.
• If we become aware that personal data has been collected from a minor, we will delete it promptly.
• Parents or guardians who believe we may have inadvertently collected information from a minor should contact us immediately at [email protected].
• Account verification processes include age confirmation checks.

When you access third-party websites or services through our platform, you leave our controlled environment and are subject to the privacy policies and terms of those external services.

• No Control: We do not control third-party websites, services, or their data practices.
• No Endorsement: Links do not constitute endorsement of external privacy policies or security practices.
• User Responsibility: Review the privacy policies of any external service before providing personal data.
• Data Sharing: When you interact with third-party integrations (e.g., payment processors, custodians), data is shared as necessary to facilitate services.

Last Updated: December 23, 2025

• Notification: Material changes will be communicated via email, platform notifications, or prominent website notices at least 30 days prior to implementation.
• Continued Use: Continued use of services after the effective date of changes constitutes acceptance of the updated policy.
• Right to Object: If you disagree with material changes, you may close your account. Contact support for account closure procedures.
• Version History: Previous policy versions are archived and available upon request for transparency and compliance purposes.

Response Time: We aim to respond to all privacy inquiries within 30 days, as required by applicable data protection laws. Complex requests may require additional time, in which case we will notify you of the extension and reasons.

Supervisory Authority: If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. For EU residents, find your authority at EDPB Member List.