Privacy Policy.

This Privacy Policy describes how Street Labs, Inc., a Delaware corporation (“Street,” “we,” “us”), collects, uses, shares, and protects personal information when you visit our websites, including street.app and streetfdn.com, join our waitlist, create an account, or otherwise interact with our services (together, the “Services”). It applies alongside our Terms of Service. If regulated brokerage services become available to you in the future, additional privacy notices may apply at that time.

Information you provide directly:

• Registration and waitlist data — name, email address, password, account type (individual, fund, or company), and, depending on the flow, fund name and type, assets under management range, investment experience, primary interest, and company details.
• Verification data — where required for access to gated features: identity (KYC) and accreditation information, which may include government-issued ID, date of birth, address, and supporting financial documentation, collected by us or through verification providers.
• Communications — messages you send us, including to legal@street.app or secondaries@street.app.

Information collected automatically:

• Usage and device data — IP address, browser type, operating system, pages viewed, referring URLs, and timestamps, collected through server logs and cookies or similar technologies necessary for the Services to function (such as authentication session cookies).

We use personal information to:

• provide and operate the Services, including managing the waitlist and your account;
• verify identity, accreditation, and eligibility, and comply with know-your-customer, anti-money-laundering, sanctions, and securities-law obligations;
• communicate with you about the Services, including onboarding, platform availability, and material updates;
• maintain security, prevent fraud, and debug and improve the Services; and
• comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not share it with third parties for their own cross-context behavioral advertising.

We share personal information only with:

• Service providers that process data on our behalf under contract — including cloud hosting and database infrastructure (such as Supabase and our web hosting provider), authentication, email delivery, and identity- and accreditation-verification providers;
• Regulators, self-regulatory organizations, and legal authorities where required by law, regulation, subpoena, or to protect the rights, safety, or property of Street, our users, or the public;
• Professional advisers such as auditors and counsel, under confidentiality obligations; and
• Successors in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We retain personal information for as long as needed to provide the Services and for legitimate business purposes, and thereafter as required by law. Records connected to identity verification, accreditation, and securities activity are subject to statutory retention periods — in many cases six years or longer under federal securities regulations — and are retained accordingly even after an account is closed.

We protect personal information with technical and organizational measures appropriate to its sensitivity, including encryption in transit, access controls, and segregated infrastructure, and we limit access to personnel who need it. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by law. See our Security page for how protection is built into the platform itself.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. Residents of California and certain other U.S. states, and of the EEA, UK, and Switzerland, have specific statutory rights.

To exercise any of these rights, email legal@street.app. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights. Note that we may be legally required to retain certain records — including KYC and transaction records — even after a deletion request.

We are based in the United States and process information there and in other countries where our service providers operate. Where we transfer personal information from jurisdictions with data-transfer restrictions, we rely on appropriate safeguards such as standard contractual clauses.

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date; for material changes we will provide additional notice, such as by email. Your continued use of the Services after changes take effect constitutes acceptance.

Privacy questions and requests go to legal@street.app. Street Labs, Inc., Delaware, United States.