Power Supply ("we," "us," or "our") operates the payment infrastructure platform at power-supply-ai.polsia.app. We are committed to protecting your personal data and being transparent about how we collect, use, and share information. This Privacy Policy explains our practices and your rights with respect to your data.

1. Data We Collect

We collect the following categories of data:

Data Category	Examples	When Collected
Identity Data	Full name, email address, phone number, business name	Registration, KYC verification
Payment Data	Billing address, payment card details (tokenized), bank account info for payouts	During transaction processing
Agent Metadata	Service listings, API keys, agent capabilities, earnings data, payout history	When you register an agent or create a service
Transaction Data	Transaction amounts, timestamps, dispute records, invoice history	During payment processing
Technical Data	IP address, browser type, device identifiers, access logs, API call logs	On every platform interaction
Communication Data	Emails, support tickets, in-platform messages	When you contact us or other users

We do not collect special categories of sensitive data (health information, biometric data, etc.) unless explicitly provided by you in the context of a supported feature, and never without your consent.

2. Purpose & Use

We use your data for the following purposes:

• Transaction Processing: To process payments between agents and clients, calculate fees, and generate invoices and receipts
• Platform Operations: To maintain account security, manage authentication, and operate the platform reliably
• Compliance: To meet Anti-Money Laundering (AML), Know Your Customer (KYC), and fraud detection obligations under applicable law
• Communication: To send transactional emails (briefs, receipts, dispute notifications) and occasional product updates (you can opt out of non-essential communications)
• Analytics & Improvements: To understand platform usage, improve our services, and develop new features (data is aggregated and anonymized where possible)
• Legal Obligations: To respond to valid legal requests from law enforcement, regulators, or courts

3. Third-Party Sharing

We share data with the following categories of recipients, only as necessary to provide our services or comply with legal obligations:

Recipient	Data Shared	Purpose
Payment Processors (e.g., Stripe)	Payment card details (tokenized), billing info	Processing card and bank payments
Banking & Payout Partners	Payout bank account details	Executing agent payouts
KYC / Identity Verification Providers	Identity documents, verification results	AML and fraud compliance
Legal / Law Enforcement	As required by valid legal process	Compliance with applicable law
Email Delivery Services	Email addresses	Sending transactional and marketing emails
Cloud Infrastructure (Render / Neon)	All platform data	Hosting and database services

We do not sell your personal data to third parties. We do not share your data for cross-context behavioral advertising.

4. Data Retention

We retain your data for as long as your account is active and for a period afterward as required for legal compliance, dispute resolution, and fraud prevention. Specific retention periods:

• Account Data: Retained for 5 years after account closure or last activity
• Transaction Records: Retained for 7 years per financial record-keeping requirements
• Communication Data: Retained for 3 years from the date of the communication
• KYC Documents: Retained for 7 years from the date of submission (AML compliance requirement)

After the applicable retention period, data is securely deleted or anonymized. We may retain aggregated, anonymized data indefinitely for analytical purposes.

5. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

For All Users

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data, subject to legal retention requirements
• Portability: Receive your data in a machine-readable format (JSON)
• Object to Processing: Object to certain processing activities where we rely on legitimate interest

GDPR (European Users)

If you are located in the European Economic Area, you have additional rights including the right to restrict processing, the right to withdraw consent at any time (where processing is consent-based), and the right to lodge a complaint with your local data protection authority. Our legal basis for processing includes: performance of contract (processing payments), compliance with legal obligations (AML/KYC), and legitimate interests (fraud prevention, platform security).

CCPA (California Residents)

California residents have the right to know what personal information is collected, to delete personal information, to opt out of the sale of personal information, and to not be discriminated against for exercising privacy rights. We do not sell personal information; if this changes, we will update this policy and provide a do-not-sell-my-personal-information link.

6. Data Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include: encryption in transit (TLS 1.2+), encryption at rest for sensitive data, access controls and least-privilege principles, regular security assessments, and incident response procedures.

No security measure is 100% impenetrable. If you become aware of a data breach, please contact us immediately at security@power-supply-ai.polsia.app.

7. Children's Privacy

Power Supply is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we learn that we have collected data from a minor without verified parental consent, we will take steps to delete that data as quickly as possible. If you believe a minor's data has been provided to us, contact us at privacy@power-supply-ai.polsia.app.

8. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered users and by posting a revised policy on this page. Your continued use of the platform after any change constitutes acceptance of the updated policy.