Privacy Policy

Last updated: 2026-10-02

Controller and contact

Flox Fund is the controller. Its address is Trade Centre Rd, Dubai, Dubai, AE. For privacy questions, contact gokhan@flox.fund.

Scope and jurisdictions

Flox Fund helps people compare token and equity outcomes for Web3 ownership. Its website is https://flox.fund. The identified jurisdiction is the United Arab Emirates.

Data categories, purposes, and lawful bases

Users retain ownership of their uploaded data and content. The service processes uploaded data only under the following limited permission: A limited permission to host, process, reproduce, and transmit user content only as needed to provide the service and the outputs requested by the user. Personal data is not sold, used for targeted advertising, or shared for unrelated purposes.

| Data category | Purpose | Lawful basis | | --- | --- | --- | | Account details | Create and manage accounts, authentication, and access to the service | Performance of the user contract | | Project content | Provide the creation, management, and publishing features requested by the user | Performance of the user contract |

Users retain their rights in uploaded data and content. Flox Fund has limited permission to host, process, reproduce, and transmit user content only as needed to provide the service and the outputs requested by the user. Flox Fund does not sell personal data, use it for advertising, or share it for unrelated purposes.

Public MCP / Plugin data flows when enabled

The public MCP integration is not enabled. There are therefore no enabled public MCP data-access, authorization or approval, logging, disconnect, or deletion workflows to describe.

Subprocessors

Flox Fund uses a hosting provider to host and store service data, an email provider to send service communications, a payment processor to process transaction payments, and an analytics provider to analyze usage patterns.

International transfers

Flox Fund does not use international transfers.

Security

Security measures include access controls, encryption in transit, restricted operational access, and reasonable monitoring and backup practices appropriate to the service.

Retention

Account details are retained while the account is active and for up to 30 days after account closure, unless a longer period is required for security, dispute, or legal-record purposes. Project content is retained until the user deletes it or closes the account, subject to limited backup and legal-record retention.

Deletion may not apply to information that must be retained for security, fraud prevention, dispute resolution, or a verified legal obligation.

Individual rights and requests

You may request access, correction, deletion, or a copy or export of your information. You may also object to or restrict processing where applicable. To request deletion, email gokhan@flox.fund from the address associated with your account where possible. The response target is within 30 days, or sooner when required by applicable law.

Children

The service is not directed to children under 16.

Automated decision-making when applicable

Flox Fund does not use automated decision-making.

Changes and contact

For questions about this policy, contact gokhan@flox.fund.

© 2026 Flox Fund