Privacy Policy

This Privacy Policy describes how Reineira Labs FZE (“Reineira Labs,” “we,” “us,” or “our”), a company registered in the Ras Al Khaimah Digital Assets Oasis (RAK DAO), United Arab Emirates, collects, uses, and handles information when you access or use the ReineiraOS website at reineira.xyz, our documentation, and SDK (collectively, the “Services”). This policy does not cover your interactions with the on-chain protocol, which operates autonomously on public blockchain networks outside of our control.

Reineira Labs is the development company behind the ReineiraOS protocol. The protocol itself is fully decentralized, open-source software deployed on public blockchain networks. Reineira Labs does not operate, control, or administer the protocol once deployed. ReineiraOS is currently in an experimental testnet phase — no mainnet deployment exists and the protocol does not custody, hold, or transmit real monetary value.

1. Information We Collect

1.1 Information You Provide

Waitlist and contact forms. If you sign up for our waitlist or submit a contact form, we collect your email address and the category you select (personal or business). We use this solely to communicate updates about ReineiraOS.

Demo bookings. If you book a demo through our Calendly integration, your name, email, and scheduling information are processed by Calendly Inc. under their own privacy policy. We receive only the information you provide to schedule the meeting.

1.2 Information Collected Automatically

Analytics. We use Fathom Analytics, a privacy-focused, cookieless analytics service. Fathom does not use cookies, does not track individuals across sites, and does not collect personal data. We receive only aggregate, anonymized page-view statistics. No personally identifiable information is stored or processed by our analytics.

IP addresses. Your IP address may be collected when you submit a waitlist form. This is used for basic anti-abuse measures and is not linked to any other data or shared with third parties.

Server logs. Our hosting infrastructure may temporarily log standard HTTP request data (IP address, user agent, referrer, timestamp). These logs are retained for a limited period for security and operational purposes only.

1.3 Blockchain Data

ReineiraOS smart contracts are deployed on the Arbitrum Sepolia testnet. Testnet transactions are public by nature of the blockchain. However, ReineiraOS uses Fully Homomorphic Encryption (FHE) to encrypt sensitive transaction data (including amounts, ownership, and settlement status) client-side before it reaches the blockchain.

We do not control, collect, or store on-chain data. Wallet addresses and transaction identifiers that you submit to the blockchain are publicly visible on the testnet but are not collected or processed by us through the Services. Encrypted on-chain data cannot be read by us or any third party without the corresponding decryption keys, which are held solely by the transacting parties.

1.4 Information We Do Not Collect

We do not use tracking cookies, advertising pixels, or cross-site trackers. We do not collect financial information, government identifiers, or biometric data through the Services. We do not perform KYC/AML identity verification.

2. How We Use Information

We use the limited information we collect to:

• Operate and maintain the Services
• Respond to your inquiries and provide updates you requested
• Monitor aggregate usage patterns to improve the Services
• Detect and prevent abuse or unauthorized access
• Comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not use your information for profiling, automated decision-making, or targeted advertising.

3. Third-Party Services

The Services integrate with the following third-party providers:

• Fathom Analytics — cookieless, privacy-first website analytics. Fathom is GDPR, ePrivacy, PECR, and CCPA compliant. No personal data is transmitted.
• Calendly — meeting scheduling. Subject to Calendly's Privacy Policy.
• Vercel — website hosting and delivery. Subject to Vercel's Privacy Policy.

On the protocol level, ReineiraOS interacts with public blockchain infrastructure (Arbitrum, Circle CCTP, Fhenix) and the Reclaim Protocol for zero-knowledge proof verification. These are decentralized protocols; we do not control their data handling practices.

4. Data Retention

Waitlist data is retained until you request removal or the waitlist is no longer active. Server logs are automatically purged within 30 days. Analytics data is aggregated and contains no personally identifiable information. Testnet blockchain data is publicly available and immutable; however, testnets may be reset or deprecated by their respective networks at any time.

5. Data Security

We implement reasonable technical and organizational measures to protect the information we process. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

The ReineiraOS protocol itself is designed with privacy as a core property: all sensitive settlement data is encrypted using Fully Homomorphic Encryption before being submitted on-chain. This encryption is performed client-side and we never have access to plaintext transaction data.

6. Your Rights

We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations. Depending on your jurisdiction, you may also have rights under other applicable data protection laws (such as the GDPR or CCPA).

You may have the right to access, correct, delete, or port your personal information, or to object to or restrict its processing. To exercise any of these rights, contact us at the address below. We will respond within a reasonable timeframe, consistent with applicable law.

You may unsubscribe from communications at any time by following the unsubscribe link in any email or by contacting us directly.

7. International Users

The Services are operated from and data may be processed in jurisdictions outside your country of residence. By using the Services, you acknowledge that your information may be transferred to and processed in such jurisdictions. We rely on appropriate legal mechanisms for any cross-border data transfers.

8. Children's Privacy

The Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised policy on this page with an updated effective date. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, you may reach us at: