Privacy Policy

Oaksvale Ventures is the operator of the Oaksvale platform. For the purposes of applicable data protection laws — including the EU and UK General Data Protection Regulation (GDPR), the Nigeria Data Protection Act, the South African Protection of Personal Information Act (POPIA), the Kenya Data Protection Act, and other applicable regimes — Oaksvale is the data controller of your personal information.

If you have questions about this Privacy Policy or how we handle your data, you can contact us at contact@oaksvale.com.

We collect personal information in three main ways: information you provide to us directly, information generated through your use of the Platform, and information we receive from third parties.

2.1 Information You Provide Directly

At account registration:

• Email address (used for authentication via Privy, our wallet infrastructure provider)

During KYC verification:

• Full legal name
• Date of birth
• Residential address
• Phone number
• Passport identification number
• Image or scan of your international passport
• Digital signature

During investment activity:

• Investment amounts
• Property selections
• Subscription confirmations
• Governance votes and proposals you submit

When you contact us:

• Email content, attachments, and any information you choose to share in support communications

2.2 Information Generated Through Platform Use

Wallet and transaction data:

• Public blockchain wallet address
• Property Unit holdings
• Transaction history (subscriptions, distributions, marketplace activity)
• Governance voting records

Technical and usage data:

• IP address
• Device type and operating system
• Browser type and version
• Pages visited and features used within the Platform
• Date and time of access
• Referring URLs

Cookies and similar technologies:

• Session cookies (to keep you logged in)
• Functional cookies (to remember preferences)
• Analytics cookies (to understand Platform usage patterns)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

2.3 Information from Third Parties

• Privy (wallet infrastructure): authentication confirmations, wallet creation events
• Blockchain networks: publicly available on-chain transaction data linked to your wallet address
• Analytics providers: aggregated usage patterns

We collect and use your personal information for the following purposes, each grounded in a legitimate legal basis:

3.1 To Provide the Platform. Creating and managing your account, processing your investments, executing marketplace transactions, distributing rental income, recording governance votes, and providing access to platform features. Legal basis: Performance of a contract with you (the Terms of Use and any Property Unit Subscription Agreement you enter into).

3.2 To Comply with Legal and Regulatory Obligations. Verifying your identity through KYC processes, complying with anti-money laundering requirements, fulfilling tax reporting obligations where applicable, and responding to lawful requests from regulatory authorities. Legal basis: Compliance with legal obligations to which Oaksvale is subject.

3.3 To Operate and Improve the Platform. Monitoring Platform performance and security, diagnosing technical issues, preventing fraud and abuse, analyzing usage patterns, developing new features, and improving the user experience. Legal basis: Our legitimate interests in operating a secure, functional, and competitive platform, balanced against your rights and reasonable expectations.

3.4 To Communicate With You. Sending transaction confirmations, account notifications, governance announcements, security alerts, and (where you have opted in) marketing or product updates. Legal basis: Performance of a contract for service-related communications; your consent for marketing communications.

3.5 To Protect Oaksvale, Our Users, and Third Parties. Detecting and preventing fraudulent or illegal activity, enforcing our Terms of Use, defending against legal claims, and protecting the rights and safety of our Users and Oaksvale. Legal basis: Our legitimate interests in protecting the Platform and our community, and in some cases, compliance with legal obligations.

We do not sell your personal information. We do, however, share certain information with third parties where necessary to operate the Platform, comply with the law, or as described below.

4.1 Service Providers. We share data with carefully selected third-party service providers who perform specific functions on our behalf:

• Privy — wallet creation and authentication infrastructure
• KYC and AML verification providers — identity verification, sanctions screening
• Cloud hosting and infrastructure providers — Platform hosting and data storage
• Email and notification providers — transactional and account communications
• Analytics providers — aggregated usage analysis
• Customer support tools — handling support requests

These providers process your data only on our instructions, only for the purposes we authorize, and under written agreements that require appropriate security and confidentiality protections.

4.2 SPVs and Oaksvale Property Management Entities. Where you invest in a Property DAO, we share information necessary for the SPV that holds title to the property, and for the Oaksvale property management subsidiary established in the relevant jurisdiction to operate the underlying property and execute DAO decisions, to maintain accurate beneficial ownership records, distribute income, and carry out day-to-day operations. This may include your name, KYC status, wallet address, and investment details.

4.3 Legal and Regulatory Disclosures. We may disclose your information where required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from regulatory authorities, law enforcement, or courts
• Cooperate with investigations into suspected fraud, money laundering, or other illegal activity
• Protect Oaksvale's legal rights, property, or safety, or the rights, property, or safety of others
• Enforce our Terms of Use

4.4 Business Transfers. If Oaksvale is involved in a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the relevant successor entity, subject to the same protections set out in this Privacy Policy.

4.5 With Your Consent. We may share your information for additional purposes where you have given us specific consent.

Some of your activity on the Platform is recorded on the Ethereum blockchain. Blockchain data is public, permanent, and cannot be deleted or modified once recorded. This includes:

• Your blockchain wallet address
• Property Unit holdings associated with your wallet
• Transactions involving your wallet (subscriptions, marketplace transfers, governance votes)

Although your wallet address is not directly linked to your personal identity on the blockchain, it can in some cases be associated with you through external information. You should be aware that blockchain transactions are not anonymous — they are pseudonymous, and they are permanently visible to anyone who examines the blockchain.

This is an inherent characteristic of blockchain technology and applies to all platforms operating on public blockchains. It is not something Oaksvale controls or can override.

Oaksvale operates internationally. Your personal information may be transferred to, stored in, and processed in countries other than your country of residence, including countries that may have data protection laws different from those in your jurisdiction.

Where we transfer personal information internationally, we take appropriate steps to ensure your data is protected.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Account information: for the duration of your account, plus a reasonable period afterward to handle any post-closure matters.
• KYC and compliance records: for the period required by applicable AML and financial regulations, typically a minimum of five (5) to seven (7) years following the end of your relationship with the Platform.
• Transaction records: for the period required by tax, accounting, and regulatory obligations.
• Communication records: for as long as needed to maintain a record of our communications with you.
• Blockchain data: indefinitely, due to the nature of blockchain technology.

After applicable retention periods expire, we delete or anonymize your personal information, except where ongoing legal obligations require continued retention.

We implement technical and organizational measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS) and at rest where appropriate
• Access controls limiting who within Oaksvale can access your data
• Security reviews and audits
• Vendor due diligence on third-party service providers
• Incident response procedures

However, no system is completely secure. You play a critical role in protecting your account by:

• Never sharing authentication codes
• Notifying us immediately if you suspect unauthorized access to your account

Depending on your jurisdiction of residence, you may have the following rights regarding your personal information:

• Right of access — to obtain confirmation that we hold your personal information and a copy of it
• Right of rectification — to request correction of inaccurate or incomplete information
• Right of erasure — to request deletion of your information, subject to legal retention obligations
• Right of restriction — to request that we limit the processing of your information in certain circumstances
• Right of data portability — to receive your information in a structured, machine-readable format
• Right to object — to object to processing based on our legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint — with the data protection authority in your jurisdiction

Limitations. Some rights may not apply or may be subject to limitations under applicable law. For example, we may be unable to delete information we are legally required to retain (such as KYC records under AML law), and we cannot delete data recorded on the public blockchain.

How to exercise your rights. To exercise any of these rights, contact us at contact@oaksvale.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing your request.

The Platform is not intended for, and we do not knowingly collect personal information from, individuals under the age of eighteen (18). If we become aware that we have collected information from a person under eighteen, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at contact@oaksvale.com.

We use cookies and similar technologies to operate the Platform, remember your preferences, analyze usage, and improve your experience.

Types of cookies we use:

• Strictly necessary cookies — required for the Platform to function (e.g., keeping you logged in)
• Functional cookies — remember your preferences and choices
• Analytics cookies — help us understand how the Platform is used
• Performance cookies — help us monitor and improve Platform performance

Managing cookies. Most browsers allow you to control cookies through their settings. You can choose to block or delete cookies, but doing so may affect Platform functionality.

Where required by applicable law, we obtain your consent before placing non-essential cookies.

The Platform may contain links to third-party websites, services, or content. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with any personal information.

Third-party services we integrate with (such as Privy and KYC providers) operate under their own privacy policies, which apply to the data they handle.

Where we send you marketing communications (such as newsletters or product updates), we do so only with your consent or as otherwise permitted by applicable law.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at contact@oaksvale.com

Opting out of marketing communications does not affect transactional or account-related communications, which are necessary to provide the Platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify Users through the Platform or by email and update the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Email: contact@oaksvale.com

Website: https://oaksvale.com