Privacy Policy

1. Introduction

GTCX Protocol ("Company", "we", "us") operates the FIFTY-FOUR platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. Information We Collect

2.1 Account Information

When you register via TradePass, we collect your name, email address, organization, role, and authentication credentials.

2.2 Usage Data

We automatically collect information about your interactions with the Platform, including pages visited, surfaces accessed, search queries, time spent, and feature usage patterns. This data is collected via Vercel Analytics and Sentry for performance monitoring.

2.3 Device Information

We collect device type, operating system, browser type, screen resolution, and IP address for security and optimization purposes.

2.4 Session Intelligence

The Platform maintains session-level context (corridors viewed, countries explored, session count) to personalize your experience. This data is stored locally in your browser and is not transmitted to our servers.

3. How We Use Your Information

• Provide, maintain, and improve the Platform
• Personalize intelligence briefings and recommendations
• Enforce subscription entitlements and access controls
• Monitor platform performance and resolve errors
• Communicate product updates, security alerts, and support
• Comply with legal obligations and enforce our Terms of Service

4. Intelligence Agent Processing

The Platform employs three intelligence agents (THESIS, RADAR, LEDGER) that process publicly available and licensed data to generate intelligence products. These agents do not process your personal information to generate market intelligence. Your interaction patterns may be used to improve agent relevance and briefing quality.

5. Data Sharing

We do not sell your personal information. We may share information with:

• Service providers — hosting (Vercel), error monitoring (Sentry), analytics, and authentication services
• Legal compliance — when required by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or asset sale

6. Data Retention

We retain account information for the duration of your account plus 12 months. Usage analytics are retained in aggregate form for 24 months. You may request deletion of your personal data at any time.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS 1.2+), secure session management (httpOnly cookies), content security policies, and regular security audits.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent where processing is based on consent

To exercise these rights, contact privacy@gtcxprotocol.org

9. International Transfers

Your data may be processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place for cross-border data transfers in compliance with applicable data protection laws.

10. Children

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Effective" date at the top indicates when the latest version took effect. Continued use of the Platform after changes constitutes acceptance.

12. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@gtcxprotocol.org