Privacy Policy

1. Who we are

Softseco operates this website (softseco.com) and the PAPER Protocol project, including eUSD by Softseco — a confidential stablecoin that has not yet been issued. We are currently in our Foundation Phase, ahead of incorporating Softseco sp. z o.o. in Poland.

For the purposes of the GDPR (Regulation (EU) 2016/679), the data controller is:

Because Softseco sp. z o.o. is not yet incorporated, this policy will be updated to name the registered entity, its address, and — where required — a Data Protection Officer, once incorporation completes.

2. What data we collect and why

We collect the minimum needed to run the site and respond to you. Today that means:

Contact form submissions

When you use our contact form we collect your full name, email address, organization (optional), the selected topic, and your message. We use this solely to read and reply to your enquiry. Submissions are delivered through Web3Forms (see Section 4) and are not stored on Softseco's own servers — they arrive in our email inbox.

Legal basis: Article 6(1)(b) GDPR — taking steps at your request and communicating with you.

Document downloads

The whitepaper, litepaper, one-pager, and Investor & Grantor FAQ can be downloaded without registration, without an account, and without identity tracking. We do not require or collect any personal data to download a document.

Functional cookies

Small items stored in your browser to remember your language preference and your cookie choice. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in operating the site correctly. See Section 3.

Aggregate traffic data

Anonymous, aggregated statistics via Cloudflare (see Section 4), with no personally identifiable information.

What we do not collect

• No user registration and no accounts.
• No financial data.
• No KYC/AML data — eUSD is not yet issued and we do not onboard users.
• No advertising or marketing cookies.
• No third-party advertising or tracking pixels.

3. Cookies and tracking

In line with the ePrivacy Directive, we use only a small set of strictly necessary, functional cookies / local storage:

• cookie_consent — remembers your cookie choice so we don't ask again. Stored up to 1 year.
• lang_preference — remembers your selected language (EN / PL). Stored up to 1 year.

This site uses Cloudflare Analytics, which operates server-side without placing any cookies in your browser. No personal data is collected through analytics.

We do not use advertising cookies, cross-site trackers, or browser fingerprinting. You can review your cookie information at any time on our Cookie Notice page, and most browsers also let you block or delete cookies in their settings.

4. Third-party services

We rely on a small number of privacy-respecting providers. We do not sell your data and we do not share it with advertisers.

Web3Forms

Processes contact-form submissions and forwards them to our inbox. Your form data passes through Web3Forms' infrastructure for delivery, which may be located outside the European Economic Area (see Section 7).

Cloudflare

Hosts and delivers this website (Cloudflare Pages) and provides privacy-friendly, aggregate web analytics. Cloudflare's analytics do not use client-side state, cross-site tracking, or fingerprinting, and do not collect personally identifiable information.

5. Your rights under the GDPR

If you are in the EU / EEA, you have the right to:

• Access the personal data we hold about you (Art. 15);
• Rectify inaccurate data (Art. 16);
• Erase your data (Art. 17);
• Restrict processing (Art. 18);
• Port your data to another provider (Art. 20);
• Object to processing based on legitimate interest (Art. 21).

To exercise any of these, email hello@softseco.com. We will respond within the timeframe required by the GDPR (generally one month).

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office — Urząd Ochrony Danych Osobowych (UODO), uodo.gov.pl.

6. Data retention

• Contact messages — kept in our email inbox for as long as needed to handle your enquiry and any follow-up, and deleted on request.
• Cookies / local storage — session items are cleared when you close your browser; preference items (cookie_consent, lang_preference) last up to one year, or until you clear them.

We do not keep personal data longer than necessary.

7. International transfers

Our contact-form provider, Web3Forms, may process and store submissions on servers located outside the European Economic Area (for example, in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards under the GDPR — including the European Commission's Standard Contractual Clauses (SCCs) — so that your data receives an equivalent level of protection.

If you would prefer not to use the form, you can always email us directly at hello@softseco.com.

8. Changes to this policy

We may update this Privacy Policy as the project evolves — in particular once Softseco sp. z o.o. is incorporated, and as eUSD progresses toward issuance under the MiCA framework, at which point additional disclosures (including KYC / AML processing required for token issuance) will apply. When we make changes, we revise the "Last updated" date at the top of this page.

9. Contact

Questions about this policy or your personal data? Email hello@softseco.com and we'll get back to you.