> For the complete documentation index, see [llms.txt](https://mainstreet-finance.gitbook.io/mainstreet.finance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mainstreet-finance.gitbook.io/mainstreet.finance/legal-and-compliance/privacy-policy.md). # Privacy Policy **Last Revised on April 14, 2026** This Privacy Policy for Main St Finance Ltd (collectively, "Company", "we", "us", "our") describes how we collect, use, and disclose information about users of the Company's website (mainstreet.finance, the "Site"), and any related services, tools, and features, including the Main St Finance platform and msY-related functionality (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" means you as the user of the Services. Please read this Privacy Policy carefully. By using, accessing, or downloading any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Services. *** ### **UPDATING THIS PRIVACY POLICY** We may modify this Privacy Policy from time to time. When we do, we will update the "Last Revised" date. If we make material changes, we will use reasonable efforts to notify you (e.g., email, site notice, or other legally compliant methods). *** ### **COMPANY’S COLLECTION AND USE OF INFORMATION** When you access or use the Services, we may collect (directly or through third-party providers) certain categories of information about you from a variety of sources, including: #### **1. KYC / AML Information** * Name, address, date of birth, nationality, residence * Government-issued ID, proof of address * Tax ID, employment information * Organizational and beneficial ownership data * Financial background (income, assets, wealth verification) #### **2. Technical and Usage Data** * IP address, browser type, device identifiers * Session data, access times, usage logs * Wallet addresses and onchain interaction metadata * Interaction with msY-related smart contracts and interfaces #### **3. Transactional and Financial Data** * Wallet balances and transfers * msY minting, redemption, and holding activity * Yield accrual and distribution data * Interaction with supported exchanges (e.g., Deribit and other crypto venues) *** #### **HOW WE USE YOUR INFORMATION** We use your data for the following purposes: * identify you as a user in our systems * verify identity and comply with KYC/AML obligations * provide access to the Services and core functionality * **manage and process msY-related transactions**, including minting, redemption, accounting, and yield distribution * maintain accurate records of yield generation and allocation * improve trading models, execution infrastructure, and risk management systems * provide customer support and respond to inquiries * detect, prevent, and investigate fraud or unlawful activity * enforce our Terms of Service and policies * send administrative and service-related communications * send marketing or promotional communications (subject to applicable law) * comply with legal obligations and regulatory requirements We may also process your data for any other purpose disclosed at the time of collection. *** ### **HOW THE COMPANY SHARES YOUR INFORMATION** We may share your information in the following circumstances: #### **Service Providers & Infrastructure** * KYC/AML providers * analytics providers (e.g., Google Analytics) * blockchain monitoring services (e.g., TRM Labs) * cloud infrastructure and security providers #### **Trading and Execution Counterparties** * crypto exchanges and liquidity venues, including **Deribit and other supported exchanges**, for the purpose of executing msY strategy trades #### **Legal and Compliance** * regulators, law enforcement, or government authorities * courts or legal processes * to comply with applicable law or defend legal claims #### **Corporate Transactions** * mergers, acquisitions, restructurings, or asset sales #### **Affiliates and Partners** * subsidiaries, affiliates, and joint ventures * authorized partner protocols facilitating msY access We do **not sell personal data** to third parties. *** ### **LEGAL BASIS UNDER GDPR** For users in the European Economic Area (EEA), we process personal data under the following legal bases: * **Contractual necessity** (Art. 6(1)(b)) * **Legal obligation** (Art. 6(1)(c)) * **Legitimate interests** (Art. 6(1)(f)) * **Consent**, where applicable (Art. 6(1)(a)) *** ### **COOKIES AND TRACKING TECHNOLOGIES** We use cookies, web beacons, and similar technologies to: * operate and maintain the Services * analyze usage and improve performance * personalize user experience You may control cookies through your browser settings, though disabling them may impair functionality. *** ### **SOCIAL NETWORKS AND THIRD-PARTY LINKS** The Services may contain links to third-party platforms (e.g., Twitter, Discord, DeFi protocols). We are not responsible for their privacy practices. *** ### **THIRD-PARTY WALLET EXTENSIONS** Interactions with third-party wallets are governed by their own privacy policies. We are not responsible for their data practices. *** ### **PUBLIC BLOCKCHAIN DATA** We collect and analyze publicly available blockchain data, including: * wallet addresses * transaction history * token holdings * **msY participation, including minting, transfers, and yield accrual** This data may be associated with other information you provide. *** ### **DATA RETENTION** We retain your data: * for as long as necessary to provide Services * to comply with legal and regulatory obligations * to maintain accurate financial and operational records **Data related to msY transactions, yield generation, and distribution may be retained for extended periods** to ensure accuracy, auditability, and compliance. *** ### **DATA SECURITY** We implement appropriate technical and organizational safeguards to protect your data, including: * encryption and secure storage * access controls * monitoring and incident response systems However, no system is completely secure. You are responsible for securing your wallet and credentials. *** ### **RISKS RELATED TO DATA AND SYSTEMS** Despite safeguards, risks include: * cyberattacks or unauthorized access * smart contract vulnerabilities * exchange or infrastructure failures * data transmission vulnerabilities We continuously improve our systems but cannot guarantee absolute security. *** ### **YOUR RIGHTS (GDPR / CCPA)** You may have rights to: * access your data * correct inaccuracies * request deletion * restrict processing * request portability * withdraw consent You may exercise these rights by contacting us. Note: Blockchain data cannot be altered or deleted. *** ### **CHILDREN’S PRIVACY** The Services are not intended for users under 18. We do not knowingly collect data from children under 13. *** ### **CONTACT** For questions regarding this Privacy Policy: ****