Data Privacy Policy
Last Updated: July 14, 2026
CanopyStride AI, a technology initiative managed by The Venture (Tamaraneh Initiatives) (“we,” “our,” or “us”), is deeply committed to protecting the data privacy of our frontline monitors, community groups, ecologists, and partners.
Data controller. The Venture (Tamaraneh Initiatives), based in Bio-Barrytown, Sierra Leone, is the data controller responsible for the personal information described in this policy. You can reach us at supprttmrnhinitiative@gmail.com.
This policy is constructed in strict compliance with the Sierra Leone Data Protection and Right to Access Information Act, the ECOWAS Supplementary Act on Personal Data Protection, the African Union Malabo Convention, and the EU General Data Protection Regulation (GDPR).
1.Information We Collect
To provide accurate, decentralized environmental auditing and silviculture verification while operating smoothly in low-bandwidth, high-glare environments, we collect:
- Account Registration Data: Name, email address, assigned profile role (e.g., Monitor, Scientist, Administrator), and secure validation credentials such as unique 6-digit alphanumeric Field Access Tokens used during closed testing phases.
- Field Observation Media: Photographs, video clips, and textual descriptive matrices submitted directly via your smartphone dashboard to track coastal or dryland ecosystems.
- Embedded Telemetry and EXIF Metadata: GPS geographic coordinates (latitude, longitude, altitude), device brand and sensor model, and precise timestamp of image capture parsed from uploaded media.
- User Feedback Data: Open-ended qualitative feedback via field forms, capped at 250 characters, with 3-tier categorized dropdowns to conserve local device storage and bandwidth.
- Billing and Payment Data: When you purchase a credit pack, our payment provider Paddle collects your billing name, billing address, country, and payment instrument details (such as card number, expiry, and security code) directly on their secure checkout. We never see or store your full card details. We receive from Paddle only the transaction identifier, purchase amount, currency, product purchased, billing email, billing country, and payment status, which we use to grant credits, issue receipts, and reconcile refunds.
2.How Your Data Is Processed
- AI Inference and Health Tracking: Local, quantized edge-inference model runs or serverless cloud requests that evaluate canopy density, spot early wildfire indicators, identify plant species (such as Rhizophora racemosa or Moringa oleifera), and identify environmental stress factors like salinity or subsurface waterlogging.
- Impact Verification Audits: Translating raw EXIF telemetry markers into verifiable tree survival rates, carbon mitigation curves, and ecological progress logs that map directly against UN SDG 13 (Climate Action), SDG 15 (Life on Land), and SDG 8 (Decent Work and Economic Growth), including our 2030 target of 25,000 restored trees.
- Workforce Tracking: Validating and certifying field hours in support of our mission to scale grassroots vocational training programs into 125 permanent green jobs within climate-vulnerable communities.
- System Optimization: Minimizing database weight, managing multi-device queues, and preventing network timeouts across low-bandwidth areas via automated context capture such as browser variables and current URLs.
3.Data Sharing, Provenance, and Non-Monetization
- No Commercial Data Sale: We do not sell, lease, rent, or trade your personal information or field telemetry to commercial third-party aggregators, advertising firms, or tracking corporations.
- Donor & Institutional Reporting: Aggregated, completely anonymized ecological telemetry is shared via secure pipelines with verified funding institutions, international climate grant juries (such as EU and Big Six Global Youth Mobilisation frameworks), and carbon credit registries to prove real-world restoration track records and prevent greenwashing.
- Legal Disclosures: We may disclose individual identifiers only if strictly required by an independent judicial authority operating under the laws of Sierra Leone, or to mitigate an imminent, documented environmental or human crisis (such as a wildfire or landslide hazard in Bio-Barrytown).
4.Data Protection, Security, and Storage
Your personal account data and telemetry are securely retained using cloud-based infrastructure managed via Supabase and integrated through Lovable.
- Row-Level Security (RLS) is enforced on our backend databases so that data rows cannot be accessed, modified, or deleted by unauthorized user tiers.
- In low-bandwidth field deployment frameworks, temporary data is handled locally within the client's browser cache using quantized ONNX WebAssembly/WebGPU modules, ensuring offline efficiency without introducing external security leaks.
5.Your Legal Rights (Data Subject Rights)
- Right to Access and Correction: Request a copy of the personal information associated with your account profile and correct any operational inaccuracies.
- Right to Erasure (Right to be Forgotten): Request the deletion of your account profile.
- Critical Operational Exception: To maintain institutional accountability and prevent carbon credit fraud or grant non-compliance, individual ecological site records and EXIF location metrics that have already been integrated into aggregated, multi-year funding audits or certified environmental baseline indexes cannot be retroactively destroyed or modified, as they constitute vital scientific records.
6.Payment Processing and Paddle (Merchant of Record)
Paid credit-pack purchases on CanopyStride AI are sold and processed by Paddle.com Market Limited (“Paddle”), which acts as the reseller and merchant of record for all such orders. Paddle handles the checkout, collects and processes your payment details, calculates and remits applicable sales tax and VAT, issues invoices and receipts, and administers refunds and chargebacks.
For these purposes Paddle acts as an independent data controller of your payment data. Their handling of your information is governed by the Paddle Privacy Notice and the Paddle Buyer Terms. We receive only the limited transaction metadata described in Section 1 (Billing and Payment Data) and use it to fulfil your order, deliver credits, provide customer support, and meet our tax and accounting obligations.
7.Legal Bases for Processing (GDPR)
- Performance of a contract: Creating and maintaining your account, granting purchased credits, running requested AI analyses, and delivering purchase receipts and refund notices.
- Legitimate interests: Securing the platform against fraud and abuse, improving analysis accuracy, monitoring service health, and producing aggregated ecological reporting for donors. We balance these interests against your rights and freedoms.
- Consent: Optional communications, cookies that are not strictly necessary, and any processing you separately opt in to. You can withdraw consent at any time.
- Legal obligation: Retaining transaction records for tax, accounting, and anti-fraud purposes, and responding to lawful requests from competent authorities.
8.Contact and Regulatory Communications
For any data privacy inquiries, or to exercise your statutory rights under regional data regulations, please contact the administrative team of The Venture (Tamaraneh Initiative):
📧 Legal & Compliance Desk: supprttmrnhinitiative@gmail.com
📍 Operational Focus Area: Bio-Barrytown, Sierra Leone.