Last Updated: October 29th, 2025

1. ACCEPTANCE OF THIS PRIVACY POLICY

Your use of Digital Freedom, digitalfreedom.network, and any affiliated websites, software, Member Portal(s), or venue utilities operated by Sovran Private Society (collectively, “DF” or the “Service”) is governed by this Privacy Policy (the “Policy”), the Terms of Use (the “Terms”), and any Program Notices posted in the Member Portal.

By accessing or using the Service, you acknowledge and agree to this Policy, the Terms, and the Sovran Private Society Articles of Association, which together govern usage within Sovran’s Private Venue and Indigenous Jurisdiction. If you do not agree, do not use the Service.

Policy Changes

We may amend this Policy at any time. Changes are effective upon posting in the Member Portal (and updating the “Last Updated” date above). Where changes are material, we will flag them within the Portal. Your continued use after any such posting constitutes acceptance on a go-forward basis.

2. SCOPE AND KEY DEFINITIONS

• Personal Information (or PI): Any information relating to an identified or identifiable natural person (Member), such as name, contact details, account identifiers, wallet addresses associated to a Member profile, device identifiers, and venue activity records.
• Metadata: Technical and acknowledgment data, including IP address, timestamps, device/user agent, and confirmation logs captured when you sign/acknowledge agreements or access DF systems.
• DF Venue Units: DF internal-use digital units (non-public, venue-restricted), including DFR, DFC, DFMC, SAU, SPG, SVN, together with any successors, upgrades, forks, or additional units later posted by Sovran.
• External Digital Assets: Any non-DF Venue Units (e.g., BTC, ETH, USDC, USDT), whether or not accessed via the Service.
• Program Notices: Official, dated venue postings that specify parameters (eligibility, fees, limits, elections, lockups, distribution procedures) and form part of Sovran Law upon posting.
• Internal Identifiers: Member IDs, device or session identifiers, and hashed device fingerprints used to maintain venue integrity.
• Inferred Data: Venue-generated indicators (e.g., eligibility/tier signals, risk scores, rate-limit flags) derived from activity and metadata within the Private Venue.
• Sovran Private Economy (SPE): Sovran-controlled infrastructure where DF data is stored and processed, encrypted at rest and in transit, and governed exclusively by Sovran Law irrespective of geographic location.

3. INFORMATION WE COLLECT

3.1 Information You Provide

• Registration data (name, email, phone, residency information, optional profile details).
• Membership materials and acknowledgments (digital signatures, opt-ins/consents, responses to questionnaires, declarations related to Indigenous Jurisdiction or venue eligibility).
• Support and correspondence content (tickets, chat messages, affidavits, or forms you submit).

3.2 Venue / Transaction Information

• DF Venue activity (DFR/DFC/DFMC/SAU/SPG/SVN balances, elections, conversions, lock statuses, inferred eligibility/tier signals, rate-limit and venue-risk indicators, distribution eligibility records) as recorded on DF ledgers and within the Member Portal.
• Wallet identifiers (self-custody wallet addresses you associate to your Member profile) and transaction references necessary to process your venue elections. DF does not control third-party blockchains.

3.3 Device / Usage and Metadata

• IP address, device/user agent, language/region, referrer, session and performance metrics, page interactions, hashed device fingerprints, and abuse-prevention tokens.
• Agreement/acknowledgment metadata (timestamps, hashed confirmations, version IDs) to ensure integrity of the agreement process and venue security.

3.4 Optional Signals and Cookies / Analytics

• Cookies or similar technologies may be used to maintain sessions, secure logins (including 2FA), remember preferences, and measure basic usage.
• You may manage cookies in your browser; disabling some cookies may degrade functionality.
• We do not use cross-context behavioral advertising and we do not sell or share Personal Information for targeted advertising.

DF does not collect information beyond what is necessary for stated purposes and makes reasonable efforts to keep records accurate and up to date.

4. HOW WE USE INFORMATION (PURPOSES OF PROCESSING)

Within Sovran’s private venue and under Sovran Law, DF uses information to:

1. Provide and operate the Service (member onboarding, authentication, session management, venue elections, DF Venue Unit records, tier tracking, and support).
2. Secure the venue (fraud/abuse prevention, anomaly detection, rate limits/queues, incident response, business continuity, audit logging).
3. Comply with Sovran governance (Articles of Association, Program Notices, Court of the People rulings, including DFMC rules and lock conditions).
4. Communicate with you (service notifications, policy or schedule changes, operational updates, responses to tickets, and Member education).
5. Improve the Service (quality assurance, diagnostics, performance tuning, analytics in aggregate/de-identified form).
6. Perform automated venue-integrity decisions (e.g., rate limits, anomaly blocks), with avenues for human review (see Section 9).
7. Generate aggregated, de-identified analytics for service health and planning.
8. Produce privacy-preserving attestations needed to interface with optional public-rails services without revealing plaintext Member data where avoidable (see Section 6).

5. OUR GROUNDS FOR PROCESSING (WITHIN SOVRAN LAW)

Processing is undertaken on one or more of the following private venue grounds:

• Contract / venue performance – to provide the Service you request as a Member.
• Consent – for specific optional features or communications; you may withdraw consent going forward via profile settings where available.
• Venue integrity and security – to protect Members, systems, and DF’s private economic records.
• Compliance with Sovran Law – including Articles of Association, Program Notices, and Court of the People rulings.

Where we rely on consent for optional features or communications, you may withdraw consent at any time via Portal settings; withdrawal does not affect processing already performed.

6. SHARING AND DISCLOSURE

DF does not sell or lease your Personal Information and does not share PI for cross-context behavioral advertising. We may disclose limited information as follows:

• Within Sovran. To authorized DF personnel, Society Overseers/Scribes, and vetted processors under confidentiality and access-controls, solely to operate the Service.
• Service Providers / Processors. Infrastructure, security, communications, support/ticketing, and analytics restricted to aggregated/de-identified outputs where feasible, under agreements with venue-appropriate safeguards and subprocessor controls.
• Venue Governance. To the Court of the People or for posted audits where required under Sovran Law.
• Safety & Integrity. Where reasonably necessary to protect Members, investigate abuse, prevent fraud, or secure systems.
• Public-Rails / External Requests (Privacy-Preserving). For optional interfaces with public financial rails or to meet a non-waivable legal obligation, we will first satisfy the requirement using cryptographic attestations, zero-knowledge proofs, hashed/tokenized references, or aggregated/de-identified outputs. Only if a narrowly scoped obligation cannot be met by those methods will we disclose the minimum necessary plaintext data, subject to Sovran governance approval, confidentiality, and Member notice where not legally prohibited.

7) SECURITY

We employ commercially reasonable and venue-appropriate safeguards, which may include: encryption in transit and at rest for sensitive data, key management controls, hardened infrastructure, role-based access, 2FA, network segmentation, logging/monitoring, and regular backups. No method is perfect; transmission over public networks (including email and public blockchains) entails risk you accept when using the Service.

Incident notices (where required by Program Notices) may be posted in the Member Portal and/or sent to your registered contact information.

8) DATA RETENTION

We retain Personal Information only as long as necessary for the purposes described above, for the duration of your active membership, and as needed for venue records, audits, dispute resolution before the Court of the People, business continuity, or as otherwise posted by Program Notices.

Upon cessation of membership, data may be securely archived or deleted per DF retention schedules. Some ledger entries and acknowledgment metadata may persist for integrity, audit, and anti-fraud. Immutable third-party blockchain entries cannot be altered or deleted.

9) YOUR CHOICES AND MEMBER RIGHTS (VENUE SCOPED)

Subject to Sovran Law and operational limits, you may:

• Access basic profile and venue records displayed in the Portal;
• Rectify/Update profile fields you control; request corrections of other records via Support;
• Portability of certain data you provided to us, where technically feasible and excluding proprietary fraud models, salts/keys, and confidential governance materials;
• Delete/Deactivate your profile (subject to required retention for venue integrity, audit, and dispute resolution; immutable or mandated records will be archived, not erased);
• Manage communications via preferences or Support;
• Automated Decisions: Request human review of venue-integrity automated actions that materially affect your access (e.g., persistent rate-limit blocks).

Requests can be initiated via the Member Portal or DF Support (Section 13). We will respond within a venue-appropriate timeframe posted in the Portal.

10) THIRD PARTY WEBSITES AND WEB3 WALLETS

Links to non-DF sites are provided for convenience only. DF does not control and is not responsible for third-party content, policies, or practices. When you use third-party Web3 wallets, those providers process data under their own terms. DF does not receive your private keys and is not responsible for wallet security or errors in transaction inputs.

11) BLOCKCHAIN SPECIFIC NOTICE

Public/third-party blockchains are transparent systems; on-chain data may be viewable by anyone and immutable. DF records only the minimum references needed to reconcile your venue elections and does not control third-party chains. You are responsible for safeguarding your wallet credentials. DF is not liable for losses resulting from mismanaged keys, compromised devices, or third-party chain events.

12) CHILDREN

The Service is intended for Members who are 18 years of age or older. We may require age verification where signals indicate under-age risk. DF does not knowingly collect Personal Information from individuals under 18. If you believe a minor has provided Personal Information, contact DF Support so we can investigate, delete the information, and restrict access per Program Notices.

13) CONTACT

For privacy questions, requests, or complaints within Sovran’s private venue, contact DF Support via the Member Portal or the contact method posted on the DF website.

14) JURISDICTION AND VENUE

This Policy forms part of Sovran Law as applied to DF. All privacy matters relating to the Service are governed exclusively by Sovran Law (Articles of Association, Program Notices, and rulings of the Court of the People). Disputes shall be resolved solely within the Court of the People, as set out in the Terms. This Policy operates solely within Sovran’s Private Venue and does not seek public recognition or enforcement.

15) DATA LOCATION & CROSS-BORDER PROCESSING

DF processes data within the Sovran Private Economy (SPE). Where data is mirrored across geographic facilities for resilience, it remains subject exclusively to Sovran Law and the Court of the People regardless of physical location.

“Without prejudice all rights reserved”

©410 (Sovran calendar; civil year 2025 CE) Digital Freedom and related technologies are owned and operated by Sovran Private Society, under the Indigenous Jurisdiction of Sovran Private Society and the Anishinabe Nation of The Great Turtle Island, governed by the rulings of the Court of the People.