Privacy Policy

Effective Date: 20 Jan 2026
Last Updated: 30 April 2026

This Privacy Policy explains how RHIZOOM (“RHIZOOM,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects personal information when you access or use our website, platform, services, applications, digital products, tokenization tools, NFT-related services, DAO features, AI analytics tools, and any related services collectively referred to as the “Services.”

RHIZOOM is a platform designed for the tokenization, management, analysis, and monetization of intellectual property assets through blockchain technology, NFTs, smart contracts, DAO governance, and AI-powered tools.

By using our website or Services, you agree to the collection and use of information in accordance with this Privacy Policy.

This Privacy Policy is designed to reflect key privacy principles under applicable data protection laws, including the GDPR where relevant. The GDPR applies to organizations that process personal data of individuals in the EU/EEA, including certain organizations outside the EU/EEA that target individuals in the EU/EEA.


1. Information We Collect

We may collect different types of information depending on how you interact with RHIZOOM.

1.1 Information You Provide Directly

We may collect information that you voluntarily provide to us, including:

  • full name;
  • email address;
  • phone number;
  • company name;
  • job title;
  • country or region;
  • account registration details;
  • project or intellectual property information;
  • documents, files, descriptions, images, technical materials, or business materials uploaded to the platform;
  • communication history with our team;
  • investor, partner, or creator profile information;
  • KYC, KYB, or compliance-related information, if required for certain services;
  • payment or billing information, where applicable.

1.2 Intellectual Property and Project Data

Because RHIZOOM focuses on intellectual property tokenization, users may submit information related to:

  • patents;
  • copyrights;
  • trademarks;
  • software;
  • algorithms;
  • databases;
  • designs;
  • brand assets;
  • research materials;
  • technology descriptions;
  • licensing terms;
  • ownership records;
  • valuation materials;
  • investment documents;
  • commercial proposals.

Some of this information may be confidential, commercially sensitive, or legally protected. We treat such information according to this Privacy Policy, our Terms of Service, and any additional agreements that may apply.

1.3 Blockchain and Wallet Information

If you connect a digital wallet or interact with blockchain-based features, we may collect or process:

  • public wallet address;
  • transaction hashes;
  • smart contract interactions;
  • NFT ownership information;
  • token activity;
  • on-chain transaction history;
  • DAO participation records;
  • voting activity, where applicable.

Please note that blockchain networks are typically public, decentralized, and immutable. Information recorded on-chain may be visible to third parties and may not be removable or editable by RHIZOOM.

1.4 Automatically Collected Information

When you visit our website or use our Services, we may automatically collect certain technical information, including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • referring URLs;
  • pages visited;
  • time spent on pages;
  • clickstream data;
  • approximate location based on IP address;
  • cookies and similar tracking technologies;
  • analytics and performance data.

1.5 AI Analytics Data

RHIZOOM may use artificial intelligence tools to analyze intellectual property assets, market potential, risk factors, valuation indicators, partner matching opportunities, and possible infringement signals.

Depending on the feature used, AI processing may involve:

  • asset descriptions;
  • uploaded documents;
  • metadata;
  • market data;
  • user-provided project information;
  • publicly available information;
  • platform activity data.

We do not intentionally use confidential user-submitted IP materials to train public AI models unless explicitly stated and agreed by the user.


2. How We Use Information

We may use collected information for the following purposes:

  • to provide, operate, and improve the RHIZOOM platform;
  • to create and manage user accounts;
  • to enable intellectual property tokenization;
  • to support NFT minting and blockchain interactions;
  • to provide AI-powered analytics and valuation tools;
  • to enable smart contract functionality;
  • to support DAO governance and voting features;
  • to connect IP owners with investors, buyers, licensees, and partners;
  • to process payments, subscriptions, or platform fees;
  • to verify identity, ownership, or eligibility where required;
  • to provide customer support;
  • to communicate updates, notices, and service-related information;
  • to improve website performance and user experience;
  • to prevent fraud, abuse, unauthorized access, and illegal activity;
  • to comply with legal, regulatory, tax, accounting, and compliance obligations;
  • to enforce our Terms of Service and other agreements.

The European Commission explains that GDPR protects personal data regardless of the technology used for processing, including automated and manual processing where personal data is organized by criteria.


3. Legal Bases for Processing Personal Data

Where GDPR or similar data protection laws apply, we process personal data based on one or more of the following legal bases:

3.1 Performance of a Contract

We process personal data when it is necessary to provide our Services, manage user accounts, process transactions, or perform obligations under our Terms of Service or another agreement.

3.2 Consent

We may process personal data based on your consent, for example when you subscribe to newsletters, accept certain cookies, or agree to specific optional features.

You may withdraw your consent at any time, where applicable.

3.3 Legitimate Interests

We may process personal data where necessary for our legitimate business interests, including platform security, fraud prevention, service improvement, analytics, business development, and communication with users.

3.4 Legal Obligation

We may process personal data when required to comply with applicable laws, regulations, court orders, tax obligations, anti-money laundering requirements, sanctions screening, or other legal processes.

3.5 Protection of Rights and Safety

We may process information when necessary to protect the rights, property, safety, and security of RHIZOOM, our users, partners, investors, or third parties.


4. Cookies and Tracking Technologies

RHIZOOM may use cookies, pixels, tags, local storage, analytics tools, and similar technologies to:

  • operate the website;
  • remember user preferences;
  • improve performance;
  • analyze traffic;
  • understand user behavior;
  • secure the platform;
  • support marketing and communication campaigns.

You may control cookies through your browser settings or through our cookie consent tool, where available.

Some cookies are necessary for the website to function properly. Other cookies, such as analytics or marketing cookies, may require your consent depending on applicable law.


5. How We Share Information

We do not sell your personal information.

We may share information with trusted third parties only when necessary for legitimate business, technical, legal, or operational purposes, including:

  • hosting and cloud infrastructure providers;
  • payment processors;
  • analytics providers;
  • email and communication service providers;
  • blockchain infrastructure providers;
  • wallet connection providers;
  • legal, tax, accounting, and compliance advisors;
  • KYC/KYB and identity verification providers;
  • security and fraud prevention providers;
  • professional partners, where required to deliver a requested service;
  • regulators, courts, law enforcement, or public authorities where legally required.

If we share personal information with service providers, we require them to process it only according to our instructions and applicable data protection requirements.


6. Blockchain Transparency and Public Data

Certain RHIZOOM features may involve public blockchain networks.

When you mint, transfer, purchase, license, vote, or otherwise interact with blockchain-based assets, certain information may become publicly visible, including:

  • wallet address;
  • NFT metadata;
  • token ownership;
  • transaction history;
  • smart contract interactions;
  • DAO voting records;
  • timestamps and transaction identifiers.

Because public blockchains are decentralized and immutable, RHIZOOM may not be able to delete, modify, or hide information that has already been recorded on-chain.

You should not upload or publish confidential, sensitive, or personal information into public blockchain metadata unless you understand and accept the consequences.


7. Intellectual Property Confidentiality

RHIZOOM understands that intellectual property information may be commercially sensitive.

We take reasonable technical and organizational measures to protect user-submitted IP materials. However, users are responsible for deciding what information they upload, tokenize, disclose, publish, or make available to investors, partners, DAO members, or the public.

Publicly listed IP assets, NFT metadata, marketplace descriptions, investment profiles, and DAO proposals may become visible to other users or third parties.

For highly confidential materials, RHIZOOM may provide additional confidentiality terms, private access controls, or separate agreements where applicable.


8. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including:

  • providing the Services;
  • maintaining user accounts;
  • complying with legal obligations;
  • resolving disputes;
  • enforcing agreements;
  • preventing fraud or abuse;
  • maintaining business and transaction records.

Retention periods may vary depending on the type of data, legal requirements, contractual obligations, and the nature of the Services used.

Blockchain data may remain permanently available on public networks and is not controlled solely by RHIZOOM.


9. Data Security

We use reasonable technical, administrative, and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

  • encryption where appropriate;
  • secure hosting infrastructure;
  • access controls;
  • authentication systems;
  • monitoring and logging;
  • internal security procedures;
  • limited access to sensitive information;
  • regular review of security practices.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of any information transmitted through the internet or blockchain networks.


10. International Data Transfers

RHIZOOM may process and store information in countries other than your country of residence.

Where personal data is transferred outside the European Economic Area, the United Kingdom, or other jurisdictions with data transfer restrictions, we will take appropriate safeguards where required by law.

These safeguards may include standard contractual clauses, adequacy decisions, contractual protections, or other legally recognized transfer mechanisms. The European Commission notes that EU data protection rules include safeguards for transfers to third countries, such as adequacy decisions and standard contractual clauses.


11. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, including the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of your personal data;
  • object to certain processing;
  • restrict processing;
  • withdraw consent;
  • request data portability;
  • opt out of certain marketing communications;
  • file a complaint with a data protection authority.

Under GDPR, individuals have rights such as access to personal data and data portability, and organizations must provide information about processing purposes, categories of data, recipients, and related details when responding to access requests.

To exercise your rights, contact us at:

Email: [Privacy Email Address]

We may need to verify your identity before processing your request.

Please note that some data may be retained where required by law, for fraud prevention, dispute resolution, contractual obligations, or legitimate business purposes. On-chain blockchain data may not be erasable by RHIZOOM.


12. Marketing Communications

If you subscribe to RHIZOOM updates, newsletters, investor communications, or promotional materials, we may use your contact information to send you relevant communications.

You may unsubscribe at any time by using the unsubscribe link in our emails or by contacting us directly.

Even if you opt out of marketing communications, we may still send you important service-related, legal, security, or transactional notices.


13. Third-Party Links and Services

Our website and platform may contain links to third-party websites, wallets, exchanges, blockchain explorers, partner platforms, social media pages, or external services.

We are not responsible for the privacy practices, content, terms, or security of third-party services.

We encourage users to review the privacy policies of any third-party websites or services they access.


14. Children’s Privacy

RHIZOOM is not intended for children under the age of 18.

We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete such information where required by law.


15. KYC, AML, and Compliance

Certain RHIZOOM services may require identity verification, business verification, sanctions screening, anti-money laundering checks, or other compliance procedures.

In such cases, we may collect or process additional information, including:

  • identity documents;
  • proof of address;
  • company registration documents;
  • beneficial ownership information;
  • source of funds information;
  • wallet risk data;
  • compliance declarations.

This information may be processed directly by RHIZOOM or by authorized third-party compliance providers.


16. User Responsibilities

By using RHIZOOM, you agree not to upload or submit:

  • unlawful content;
  • stolen intellectual property;
  • confidential third-party information without authorization;
  • personal data of others without legal basis;
  • misleading ownership claims;
  • malware or harmful code;
  • content that violates third-party rights.

You are responsible for ensuring that you have the legal right to upload, tokenize, license, sell, or otherwise use any intellectual property submitted to RHIZOOM.


17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or business operations.

When we update this Privacy Policy, we will revise the “Last Updated” date above.

If changes are material, we may provide additional notice through the website, platform, email, or other appropriate channels.

Your continued use of RHIZOOM after an updated Privacy Policy becomes effective means that you accept the updated terms.


18. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us:

RHIZOOM

Email: info@rhizoom.net
Website: https://rhizoom.net