Privacy Policy
Last Updated: June 24, 2026
Bluegrass Capital Collective, LLC ("we," "us," or "our") is committed to protecting the privacy and security of the data processed within our private partner portal (the "Platform"). This Privacy Policy explains how we collect, use, store, and safeguard the information provided by authorized partners ("you" or "Partner") during your use of the Platform.
This Platform functions strictly as a private, secure administrative layout for verified corporate partners. We do not sell user data, utilize tracking pixels for behavioral advertising, or share internal ledger information with third-party marketing entities.
1. Information We Collect
To maintain secure, audited access to the collective ledger, the Platform processes two distinct categories of information:
A. Partner-Provided Profile Data
When you establish or update your profile via the account options interface, the Platform records the following fields directly to our secure database:
Account Identity: Usernames, encrypted account credentials, and email addresses.
Contact Information: Voluntarily provided phone numbers and physical street addresses.
Profile Imagery: User-uploaded profile photos or avatars processed via internal imaging libraries.
Directives & Mandates: Specialized textual records detailing your emergency and estate contingency instructions regarding capital units, beneficiaries, or asset liquidations in the event of incapacitation or death.
B. Automated Technical & Session Data
To defend the network architecture against unauthorized access or cross-tenant data exposure, our server environment automatically logs structural metadata, including:
Security & Session Cookies: The Platform drops essential HTTP cookies, specifically Django session identifiers and Cross-Site Request Forgery (CSRF) tokens, which are required to securely pass form payloads and maintain active login sessions.
2. How we use your information
We process the collected data strictly for operational, security, and administrative legal execution:
Authentication & Access Control: Validating session cookies to grant entry to internal message boards, document vaults, and trading strategy scorecards.
Ledger Attribution: Utilizing account identities to map member asset ownership percentages, track individual cash injections, and display personalized capital returns.
Emergency & Contingency Execution: Maintaining a static administrative record of your estate directives, accessible exclusively to platform administrators, to ensure asset continuity during an emergency event.
Network Infrastructure Defenses: Analyzing server logs and processing secure headers to identify malicious traffic, mitigate token drops, and prevent multi-tenant data leakage.
3. Data Sharing & Third-Party Disclosures
We do not sell, trade, rent, or distribute partner information to commercial brokers or consumer marketing firms. Your information is only shared with essential infrastructure service providers necessary to run the secure application architecture:
Cloud Infrastructure Providers: Your profile data, uploaded files, and relational databases reside on secure cloud servers managed via our virtualization host.
Network Security Proxies: Public-to-private domain mapping, data encryption layers, and SSL certificate pipelines are proxied through secure edge networks.
Payment & Banking Rail Gateways: If you initialize capital transactions or link banking accounts, data is securely passed directly to our commercial merchant processor under strict cryptographic tokenization rules.
4. Data Security and Enforcement
We implement industry-standard administrative and technical security layers to preserve data integrity:
Forced Encryption: All traffic hitting the domain is strictly forced over Secure Sockets Layer (SSL) / Hypertext Transfer Protocol Secure (HTTPS) channels.
Cryptographic Hashing: User passwords are encrypted using strong, irreversible cryptographic PBKDF2 hashing algorithms natively inside the application framework.
Session Protections: Session flags are explicitly configured to enforce HTTPOnly and SameSite data restrictions, blocking cross-site scripting (XSS) vectors and malicious client-side token extraction.
5. Data Management and Updates
As an authorized partner, you maintain absolute control over your personal contact properties. You may review, modify, or update your email, phone number, address, and estate contingency instructions at any time by navigating directly to the Account Options portal page.