# Welcome to Nara Credit for the Digital Era ### What is Nara? Nara is a digital dollar protocol that connects on-chain liquidity with short-duration payment financing opportunities. The protocol is designed around two core assets: NaraUSD, a synthetic digital dollar, and NaraUSD+, the yield-bearing staked version of NaraUSD.
ProductDescriptio
NaraUSDA digital dollar designed for liquidity, composability, and access across supported DeFi and payment ecosystem
NaraUSD+A yield-bearing staked version of NaraUSD designed to accrue returns from Nara's short-term financing portfolio
### Who do we serve? Nara exists because two markets have complementary needs. On-chain users, protocols, and treasuries need dollar-denominated assets that can generate sustainable yield. At the same time, payment businesses often need short-term capital to support settlement, prefunding, liquidity management, and transaction growth. Nara connects these needs through short-term financing, a category of financing tied to real payment activity. Instead of relying primarily on token emissions or speculative crypto lending cycles, Nara is designed to source yield from payment financing premiums. These premiums are generated when businesses pay for efficient access to short-duration capital. Nara brings this opportunity on-chain through a transparent, composable, and risk-managed digital dollar system. # Why Nara? #### Sustainable Yield for DeFi, Backed by the Real World Nara addresses a critical flaw in DeFi: the absence of sustainable yield disconnected from market speculation and token emissions. Introducing NaraUSD, a yield-bearing asset backed by payment financing. By tokenizing payment flows from payment transactions, Nara generates non-correlated, double-digit USD returns. Nara bridges the gap between the need of instant liquidity in DeFi and yield generation of real-world assets. This is the next evolution of stablecoins utility, not just for payments, but for generating native yield of payment flows. #### Key Highlights Nara offers a unique value proposition that combines the best of both on-chain and off-chain finance: • High, uncorrelated yield: Earn double digit APY from short-term financing fully detached from crypto market volatility. • High liquidity: Built-in buffers and a 7‑day redemption or unstaking period ensure flexible access to capital. • DeFi native: NaraUSD and NaraUSD+ are composable primitives across DeFi, combining stability and yield. ### Why Short-Term Financing is Ideal for DeFi The short-term financing (like PayFi) market has several characteristics that make it a perfect fit for a DeFi protocol like Nara: **Short Duration**: The short-term nature of the financing (typically under 7 days) aligns well with the liquidity needs of DeFi users. This is in stark contrast to traditional private credit products that often require capital to be locked up for years. **High Volume**: The high volume of transactions provides a consistent and scalable source of yield. With billions of dollars in payments happening every day, there is no shortage of opportunities. **Low Correlation**: The returns from short-term financing are not correlated with the volatility of the crypto markets, providing a stable and reliable source of income. This makes it an ideal diversification tool for crypto investors. **Strong Credit Quality**: The financing is backed by real-world payment flows, which have a historically low default rate. Payment service providers and remittance companies have strong incentives to repay their financing to maintain their operations. By tapping into the short-term financing market, Nara is able to offer a truly unique and sustainable yield product that is poised to become a cornerstone of the DeFi ecosystem. # What is PayFi? PayFi is financing for payment flows, settlement gaps, and transaction-driven working-capital needs. PayFi is short for payment finance. It refers to financing that supports payment flows, settlement timing gaps, liquidity needs, and transaction-driven working capital. In simple terms, PayFi helps businesses access capital when money is expected to arrive, but has not yet fully settled or become available for use. Payment businesses often operate at high volume and low margin. Even short settlement delays can create meaningful liquidity needs. PayFi exists because businesses are often willing to pay for faster access to capital, more predictable settlement, or more efficient liquidity management. ### A New Frontier for On-Chain Yield **Payment Financing (PayFi)** represents the market for providing short-term capital to facilitate high-volume, payment transactions. This is a multi-trillion dollar industry that has traditionally been dominated by banks and large financial institutions. Nara is bringing this market on-chain, creating a new and powerful source of sustainable, real-world yield for the DeFi ecosystem. ### Market Opportunity The demand for PayFi is immense and growing. With the rise of global commerce and remittances, the volume of cross-border payments is expected to continue its upward trajectory. According to industry research, stablecoin usage for cross-border payments is growing at 35% year-over-year, but penetration is still only 1% of the global FX payment flow ($1.9 trillion annually out of an estimated $194 trillion FX payment market). This creates a consistent and expanding need for short-term financing, making PayFi an attractive and sustainable source of yield. By tokenizing these payment flows, Nara is able to offer DeFi users access to a market that was previously out of reach. This not only provides a high-yield opportunity for investors but also brings greater efficiency and liquidity to the global payments industry. ### How PayFi Works At its core, PayFi involves bridging the time gap between when a payment is sent and when it is received. In a typical payment transaction, it can take several days for the funds to clear through the traditional banking system. During this time, the payment provider needs liquidity to continue its operations. PayFi providers step in to offer this short-term financing, charging a small fee or interest rate for the service. The process can be broken down into the following steps: **Transaction Initiation**: A payment is initiated from one country to another, such as a remittance from the United States to the Philippines. **Liquidity Need**: The payment provider requires immediate capital to fund the transaction while waiting for the original funds to clear through the SWIFT system or other traditional channels. **Financing**: A PayFi provider (such as Nara's partners) provides the necessary liquidity, typically for a period of a few days to a week. This is often done using stablecoins like USDT for instant settlement. **Transaction Settlement**: The original funds clear, and the payment provider repays the financing with a small premium. **Yield Generation**: This premium represents the yield generated from the financing activity, which is then passed on to the investors in the Nara protocol. # How Nara generates yield ### Demand for short-term financing and PayFi Short-term financing demand and PayFi can appear anywhere businesses need short-term capital to support payment activity. Cross-border settlement is one example, but it is not the only one. Short-term financing can also support merchant settlement, payment processor liquidity, card acquiring, B2B payouts, stablecoin liquidity, treasury operations, and platform disbursements.
PayFi use caseWhat creates the financing need
Merchant settlementMerchants may want faster access to receivables before payment networks fully settle.
Payment processorsProcessors may need liquidity to manage settlement timing across merchants, banks, and payment networks.
Credit Card acquiringAcquirers may bridge timing gaps between customer payments, network settlement, and merchant payouts.
B2B payoutsPlatforms may need capital to pay vendors, contractors, or suppliers before incoming funds fully clear.
Stablecoin liquidityDigital asset businesses may need short-term liquidity to support inflows, outflows, and treasury operations.
Remittance settlementRemittance providers may need prefunding or settlement liquidity across corridors and partners.
### How short-term financing generates yield Short-term financing yield is generated when borrowers or counterparties pay for access to short-duration liquidity. The financing premium may reflect the value of faster settlement, reduced prefunding burden, improved capital efficiency, or more reliable transaction execution.Nara is designed to route this payment-financing opportunity into an on-chain asset system. Capital backing NaraUSD can be allocated between liquid reserves and PayFi assets. Returns from the PayFi portfolio are then designed to accrue to NaraUSD+ holders, subject to the protocol’s fees, reserves, risk controls, and applicable terms. ### Why short-term financing is different from typical DeFi yield Short-term financing yield is intended to be linked to payment activity and working-capital demand. This makes it different from yield that depends mainly on token incentives, crypto leverage, or speculative trading demand. While Short-term financing can provide a differentiated source of return, it also introduces its own risks, including borrower performance, liquidity timing, operational execution, legal structure, and concentration risk. For this reason, Short-term financing should be evaluated through both a yield lens and a risk lens. Nara’s documentation should make the underlying asset sources, portfolio allocation, transparency reports, and capital protection mechanisms easy to review. # FAQ ### What is NaraUSD? NaraUSD is a synthetic digital dollar issued on the blockchain that is backed by real-world, short-term payment financing (PayFi) assets sourced from payment transactions. It is designed to maintain a 1:1 value with the US Dollar. NaraUSD can be used for payments, integrated into various DeFi applications, and serves as the foundational asset within the Nara ecosystem. ### What is NaraUSD+? NaraUSD+ is the yield-bearing, staked version of NaraUSD. Users can stake their NaraUSD to receive NaraUSD+, which represents their proportional share of the yield-generating vault. The NaraUSD+ token automatically appreciates in value as yield accrues from the underlying PayFi assets, allowing users to earn passive returns without manual intervention. ### What is PayFi? Payment Financing (PayFi) represents the market for providing short-term capital to facilitate high-volume, payment transactions. In traditional finance, it can take several days for cross-border funds to clear. PayFi bridges this time gap by providing immediate liquidity to payment providers. By tokenizing these payment flows, Nara brings this multi-trillion dollar industry on-chain, creating a sustainable, real-world yield source for the DeFi ecosystem. ### What is the APY for NaraUSD+? NaraUSD+ targets a high, uncorrelated yield, currently exceeding 10% APR. Unlike many DeFi protocols that rely on token emissions or market speculation, this yield is generated directly from the premiums paid on real-world payment financing. ### How is the yield generated? The yield is generated through the financing of payment transactions. When payment providers require immediate capital to fund transactions while waiting for traditional bank settlements, Nara provides this short-term liquidity. The payment providers repay the financing with a small premium. This premium is the yield that flows directly into the NaraUSD+ staking contract, continuously increasing the value of NaraUSD+ tokens. ### Who are the borrowers on Nara? Nara facilitates lending to established fintechs looking to take advantage of stablecoins to do payments. These borrowers include remittance companies and payment service providers who need short-term liquidity to bridge bank settlement times. Nara conducts rigorous underwriting and manages the financing for these fintechs. ### How is my principal protected? Nara prioritizes capital preservation through stringent risk management and the inherent nature of PayFi. The underlying financing is backed by real-world payment flows, which historically exhibit very low default rates. Payment service providers have strong incentives to repay their short-term financing to maintain their core operations. Nara employs active collateral management and rigorous underwriting processes to protect lender funds. ### What are the liquidity terms for NaraUSD and NaraUSD+? Nara provides flexible access to capital through a dynamic liquidity management system:•Instant Redemptions: Nara maintains a liquid buffer funded by matured PayFi assets to service immediate redemption requests. If the requested amount is within this buffer, the transaction is processed instantly.•Queued Redemptions: For larger requests that exceed the liquid buffer, the protocol queues the withdrawal. These are fulfilled within a standard 7-day processing window as the underlying short-term financing assets mature (average payment cycles are around 2 days). ### How do I mint and redeem NaraUSD? Minting and direct redemption of NaraUSD are available exclusively to "Authorized Users" who have completed the necessary KYC/KYB procedures with the protocol. Authorized Users can mint NaraUSD by depositing USDT. For everyday users, NaraUSD can be acquired and traded freely on the secondary market through various decentralized exchanges (DEXs) and liquidity venues. ### What price do I receive on redemption? Authorized Users can redeem NaraUSD directly through the protocol for underlying liquid assets at a 1:1 USD value. When unstaking NaraUSD+, users receive their proportional share of NaraUSD based on the current, appreciated exchange rate, capturing all accrued yield up to the point of withdrawal. ### What makes Nara's yield sustainable compared to other DeFi protocols? Nara's yield is entirely disconnected from crypto market volatility and token speculation. The returns are driven by tangible economic activity, the multi-trillion dollar payments industry. Because the demand for global payments and short-term financing is consistent and growing, Nara provides a highly reliable, non-correlated, and sustainable source of yield that traditional DeFi lending protocols cannot match. # Nara Protocol # How Nara works Nara converts short-duration payment financing opportunities into on-chain digital dollar yield. The protocol is built around NaraUSD, the base synthetic digital dollar, and NaraUSD+, the yield-bearing staked version of NaraUSD. At a high level, users access NaraUSD, Nara allocates capital between liquid reserves and PayFi assets, payment financing generates returns, and those returns accrue to NaraUSD+ holders. The system is designed to balance yield generation with liquidity management, transparency, and capital protection. ### The Nara lifecycle | Step | What happens | | ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **1. Capital enters Nara** | Authorized participants can mint NaraUSD by depositing eligible assets, subject to onboarding and compliance requirements. Other users may access NaraUSD through supported secondary markets and integrations where available. | | **2. Nara manages reserves** | Nara allocates backing assets between liquid reserves and short-duration PayFi opportunities according to its portfolio and liquidity policies. | | **3. PayFi assets generate returns** | Payment businesses and financing counterparties pay premiums for short-duration capital that supports settlement, liquidity, and transaction flows. | | **4. Yield accrues to NaraUSD+** | Users can stake NaraUSD into NaraUSD+. Returns generated by the PayFi portfolio are designed to accrue to NaraUSD+ through the protocol’s vault or share mechanics. | | **5. Users unstake or redeem** | NaraUSD+ holders can unstake into NaraUSD according to the applicable unstaking process. Direct redemption of NaraUSD may be limited to authorized participants and subject to liquidity conditions. | | **6. Risk controls apply** | Nara uses liquidity buffers, portfolio diversification, underwriting, transparency reporting, and capital protection mechanisms to manage risk. | ### What users should understand NaraUSD and NaraUSD+ have different roles. NaraUSD is designed to function as the base synthetic digital dollar, while NaraUSD+ is designed for users who want exposure to short-term finance backed yield. Users should understand the difference between holding NaraUSD, staking into NaraUSD+, unstaking back into NaraUSD, and redeeming NaraUSD through authorized channels.Users should also understand that short-term finance yield is not risk-free. Payment financing involves credit, liquidity, operational, legal, and market risks. Nara’s documentation should therefore be read together with the sections on Portfolio Allocation, Transparency, Risks, and Capital Protection. # NaraUSD ### NaraUSD NaraUSD is the base synthetic digital dollar in the Nara ecosystem. It is designed for liquidity, composability, and access to PayFi-backed digital dollar infrastructure. NaraUSD is backed by a portfolio that may include liquid reserve assets and short-duration PayFi assets. Liquid reserves help support redemptions and operational flexibility, while PayFi assets are intended to generate returns from payment financing opportunities. #### Minting NaraUSD NaraUSD minting is only for KYC-ed users ("Authorized Users"). Authorized Users can mint NaraUSD by depositing USDT, which is then allocated to conduct short-term payment financing. The value of NaraUSD is directly backed by the economic value of these underlying payment flows. NaraUSD is designed to be valued at 1:1 with USD value. NaraUSD can also be acquired on the secondary market through various decentralized exchanges and liquidity venues. ### Redeeming NaraUSD NaraUSD redemptions are available to users who have completed the necessary KYC/KYB procedures with the protocol. Authorized Users can redeem NaraUSD for underlying liquid assets at a 1:1 USD value. Upon redemption, the protocol burns the corresponding NaraUSD tokens and transfers the equivalent value in a designated liquid asset to the user. #### Liquidity Management The protocol utilizes a dynamic liquidity management system to optimize the allocation of capital between the underlying PayFi assets and a liquid reserve, ensuring both high yield generation and timely redemption availability. * **Instant Redemptions:** A liquid buffer, funded by matured PayFi assets, is maintained to service immediate redemption requests. Transactions are processed instantly when the requested amount is within the available buffer. The liquid buffer may be placed into liquid assets, such as onchain Tbills, USDS (Sky Money) or Aave to maintain sufficient liquidity while obtaining yields. * **Queued Redemptions:** For redemption requests that exceed the current liquid buffer, the protocol queues the request. These are fulfilled within a standard 7 day processing window as the underlying short-term financing assets mature, ensuring the stability of the entire system. # NaraUSD+ #### Earning Yield with NaraUSD+ NaraUSD+ is the yield-bearing staked version of NaraUSD. It is designed for users who want exposure to returns generated by Nara’s short-term financing portfolio. When users stake NaraUSD, they receive NaraUSD+. As Nara’s short-term financing portfolio generates returns, those returns are designed to accrue to NaraUSD+ through the protocol’s vault or share mechanics. This means NaraUSD+ is intended to represent a claim on staked NaraUSD plus accumulated yield, subject to fees, reserves, risks, and applicable terms. #### Unstaking Process When unstaking, NaraUSD+ tokens are burned, and users receive their proportional share of NaraUSD based on the current, appreciated exchange rate. To ensure there is sufficient time to unwind the underlying assets in an orderly manner, the protocol may enforce a cooldown period before withdrawals can be executed. #### Yield Accrual Mechanism 1. **Staking NaraUSD:** Users deposit NaraUSD into the staking contract, which in turn mints NaraUSD based on the current exchange rate (initial rate: 1 NaraUSD+ = 1 NaraUSD). 2. **Yield Distribution:** Yield generated from the real-world assets continuously flows into the staking contract, increasing the total NaraUSD reserves held within it. 3. **Passive Growth:** As the vault's reserves grow, the value of each naraUSD+ token appreciates proportionally. This mechanism ensures that returns are automatically reflected in the increasing value of NaraUSD+, requiring no manual intervention from the user. #### Unstaking Process When users unstake, their NaraUSD+ tokens are burned, and they receive their proportional share of NaraUSD calculated at the current exchange rate. To ensure orderly unwinding of the underlying assets, the protocol enforces a 7-day cooldown period before withdrawals can be completed. # Portfolio Allocation Nara’s portfolio is designed to balance liquidity, yield generation, diversification, and capital protection. The portfolio may include liquid reserves and short-duration PayFi assets. Liquid reserves support redemptions and operational flexibility, while PayFi assets are intended to generate returns from payment financing opportunities. The allocation between liquid reserves and PayFi assets may change over time based on market conditions, redemption activity, borrower demand, risk limits, and treasury policy. ### Portfolio Components | Component | Purpose | Key considerations | | ------------------------------------ | ------------------------------------------------------------------------ | ---------------------------------------------------------------------------------- | | **Liquid reserves** | Support redemptions, liquidity management, and operational flexibility. | Asset quality, availability, liquidity depth, custody, and on-chain accessibility. | | **Short-term financing assets** | Generate returns from short-duration payment financing opportunities. | Asset quality, tenor, repayment performance, concentration, and legal structure. | | **Insurance or protection reserves** | Help absorb certain losses before they affect other parts of the system. | Funding source, current balance, coverage rules, and loss waterfall design. | # Transparency Transparency is central to Nara’s design. Because Nara connects on-chain assets with real-world payment financing, users need clear information about reserves, portfolio allocation, performance, risks, audits, and incidents. Nara’s transparency framework should help users answer four questions: what backs NaraUSD, how capital is allocated, how the PayFi portfolio is performing, and what risks or incidents have occurred. #### Transparency reports and evidence | Evidence | What it should show | Update cadence | | ------------------------- | ------------------------------------------------------------------------------------------ | -------------------- | | **Reserve dashboard** | Current reserve assets, supported chains, contract addresses, and relevant balances. | Real time update | | **Portfolio report** | Liquid reserves, PayFi exposure, allocation ranges, tenor, concentration, and performance. | Every 7 days | | **Insurance fund report** | Current balance, funding source, coverage rules, and loss waterfall role. | Every 7 days | | **Incident log** | Material incidents, impact, response, remediation, and current status. | Updated as required. | # Risks ### A Transparent Approach to Risk Management Nara is designed to connect on-chain digital dollars with real-world payment financing opportunities. This creates potential benefits, but it also introduces risks. Users should understand these risks before holding NaraUSD, staking into NaraUSD+, providing liquidity, or integrating Nara into another product. The purpose of this section is to describe the main risks, explain how Nara seeks to mitigate them, and identify what information users should review when evaluating the protocol. #### Risk Categories The risks associated with the Nara protocol can be broadly categorized as follows: | Risk | Description | Potential user impact | Mitigants | | ----------------------- | ------------------------------------------------------------------------------------ | --------------------------------------------------------------------------- | ----------------------------------------------------------------------------- | | **Credit risk** | A borrower or counterparty may fail to repay a PayFi obligation. | Portfolio losses may reduce returns or affect capital protection layers. | Underwriting, diversification, monitoring, exposure limits, insurance fund. | | **Liquidity risk** | Redemptions may exceed immediately available liquidity. | Redemptions may be queued or delayed. | Liquid reserves, maturity management, redemption windows, liquidity policy. | | **Smart contract risk** | Code vulnerabilities may affect accounting, transfers, staking, or redemptions. | Funds or balances may be affected in severe cases. | Audits, testing, bug bounty, access controls, multisigs, timelocks. | | **Operational risk** | Off-chain processes, partners, or service providers may fail to perform as expected. | Reporting, settlement, repayment, or redemption processes may be disrupted. | Operational controls, reconciliations, partner monitoring, incident response. | | **Omnichain risk** | Cross-chain messaging or chain-specific issues may affect transfers. | Transfers may be delayed, paused, or affected by chain-specific failures. | Supported-chain controls, rate limits, monitoring, LayerZero configuration. | | **Regulatory risk** | Legal or regulatory changes may affect access, transferability, or redemption. | Some users or jurisdictions may face restrictions. | KYC/KYB controls, legal review, jurisdictional policies. | #### Mitigation Strategies Nara employs a multi-faceted approach to risk management, with specific strategies in place to address each of the risk categories: **Credit Risk Mitigation** **Rigorous Partner Due Diligence**: As outlined in the 'Nara's Asset Manager section, we conduct extensive due diligence on all our PayFi partners to ensure their creditworthiness and operational integrity. **Diversification**: We diversify our investments across multiple PayFi partners and a wide range of underlying payment flows to minimize the impact of any single default. **Overcollateralization**: In some cases, we may require our PayFi partners to provide collateral to further secure the financing. **Liquidity Risk Mitigation** **7-Day Redemption Period**: The 7-day redemption period for unstaking NaraUSD+ allows the protocol to manage its liquidity in a predictable and orderly manner. **Liquidity Buffers**: We maintain a portion of our reserves in highly liquid stablecoins to ensure that we can meet redemption requests even during periods of high demand. **Secondary Market Liquidity**: We are working with partners to provide a liquidity facility on a DEX for users who wish to redeem their NaraUSD and NaraUSD+ instantly. **Smart Contract Risk Mitigation** **Audits**: The protocol's smart contracts undergo regular audits by reputable third-party security firms to identify and address potential vulnerabilities. **Bug Bounties**: We plan to launch a bug bounty program to incentivize security researchers to find and report vulnerabilities in our codebase. **Best Practices**: Our development team follows industry best practices for secure smart contract development. **Operational Risk Mitigation** **Institutional-Grade Custody**: We use institutional-grade custody solutions, such as Hex Trust, to safeguard the protocol's assets. **Multi-Signature Wallets**: Critical protocol functions are controlled by multi-signature wallets to prevent unauthorized access. **Contingency Planning**: We have developed contingency plans to address a variety of potential operational disruptions.
# Capital Protection **Nara's Three-Tiered Approach to Capital Protection** Nara employs a structured, three-tiered loss waterfall to safeguard its ecosystem and maintain the stability of the NaraUSD stablecoin. This sequential mechanism is designed to absorb losses in a predefined order, ensuring that each layer of capital provides a buffer before the next is impacted. The waterfall prioritizes the protection of the core stablecoin, NaraUSD, by distributing risk across different components of the ecosystem. Here is the order in which losses are absorbed: #### 1. First Layer of Defense: The Insurance Fund The first tier to absorb any financial losses is the Insurance Fund. This fund is a dedicated pool of capital accumulated from various protocol-generated revenue streams. Its primary purpose is to act as the initial buffer against unforeseen events or negative yield, thereby protecting the yield-bearing assets. The Insurance Fund is capitalized through several sources: * Performance Fees: A percentage of the yield generated by the protocol's strategies is allocated to the Insurance Fund. * Protocol Fees: Revenue from minting and redemption fees for NaraUSD contributes directly to the fund. * Arbitrage Revenue: Profits generated from arbitrage activities, which occur when the protocol capitalizes on price discrepancies of NaraUSD to bring it back to its $1 peg, are channeled into the fund. By using protocol revenue as the first line of defense, Nara ensures that day-to-day operational risks are covered without immediately impacting its users' principal. #### 2. Second Layer of Defense: NaraUSD+ If losses exceed the capacity of the Insurance Fund, the second tier of the waterfall is activated: NaraUSD+. Users who stake their NaraUSD are entitled to receive all the yield generated from the protocol's underlying stablecoin strategies. In exchange for capturing this yield, NaraUSD+ holders agree to bear the next level of risk. This aligns the interests of yield-seekers with the overall health of the protocol. If a significant loss event occurs, the value of naraUSD+ positions would be used to cover the shortfall. In the future, staked NARA tokens will also participate in this tier, sharing both the yield and the risk of loss equally with NaraUSD+. #### 3. Third Layer of Defense: NaraUSD The final layer in the loss absorption hierarchy is the NaraUSD stablecoin itself. This tier is only affected in the event of a catastrophic loss that completely depletes both the Insurance Fund and the value of all staked assets. The primary design goal of NaraUSD is to maintain a stable value of US$1. The preceding two layers of the waterfall are specifically designed to protect this peg. Only under severe and exceptional market conditions, where the losses are substantial enough to overwhelm the first two buffers, would the value of NaraUSD be impacted. This makes NaraUSD the most protected asset within the Nara ecosystem. # Omnichain Infrastructure Nara is leveraging LayerZero's cutting-edge Omnichain Vault (OVault) technology and its Omnichain Fungible Token (OFT) standard to revolutionize its Nara's vault, making them truly cross-chain. This strategic integration allows Nara to offer its users unparalleled flexibility and accessibility in the multi-chain ecosystem. ### Nara OVault At its core, LayerZero's OVault is an advanced ERC-4626 vault product designed to overcome the limitations of traditional single-chain vaults. Historically, ERC-4626 vaults restricted liquidity and user experience to a single blockchain, meaning their shares were confined to their originating chain and interacting with them often required complex, multi-step transactions. OVault addresses these challenges by transforming vault shares into OFTs and incorporating a sophisticated vault composer. ### One Click Cross Chain UX For Nara, this means any users can deposit stablecoins from any chain and are no longer siloed; they become Omnichain Fungible Tokens, capable of seamlessly moving and being utilized across any blockchain connected to the LayerZero network. This dramatically expands the reach and utility of Nara's vault to any users. Furthermore, the integrated vault composer provides a "One-Click Cross-Chain UX," allowing Nara's users to deposit or redeem their assets from *any* supported chain with a single, simplified transaction. This eliminates the need for cumbersome manual bridging or the acquisition of specific gas tokens on a hub chain, significantly enhancing the user experience.
Ultimately, by adopting LayerZero's OFT standard and OVaults, Nara is empowering its users with a frictionless experience, enabling them to interact with Nara's tokens from any chain without network switching or concerns about gas fees. This not only simplifies access and engagement with Nara's offerings but also significantly expands Nara's market potential, attracting a broader base of underlying assets and increasing the Total Value Locked (TVL) within its RWA ecosystem. Nara's anyone to earn yield from a single vault while retaining the flexibility to use their tokens on any LayerZero-connected chain, maximizing the utility and value proposition of their Nara's vault. # Legal Learn more about the legal framework underpinning Nara and view important legal agreements such as our Terms & Conditions and Privacy Policy. ### Summary The legal structure for Nara’s Treasury Management & Yield Product involves secured lending to a bankruptcy-remote Nara SPV, which is managed by an independent board of directors and a regulated investment firm. # Terms of Use ## Nara Terms of Use TERMS AND CONDITIONS Last Updated: April 17, 2026 These Terms of Use (these "Terms") govern your use of the website at (the "Website") and related services provided by Nara Finance Management Corp. ("Nara", "we", "our" or "us"). The Website and our services provide you with access to the Nara Protocol (the "Protocol"), a decentralized, peer-to-peer set of blockchain-based smart contracts that we do not own or control. These Terms constitute a legally binding agreement between you and Nara. By connecting your digital asset wallet or address to the Platform, registering for an Account, accessing the Platform, using the Services, and/or purchasing or holding any NaraUSD or NaraUSD+, you agree that you have read, understood, and accepted these Terms, together with any additional documents or terms referred to herein, including the Privacy Policy and the Risk Disclosure Statement. You acknowledge and agree that you will be bound by and will comply with these Terms, as updated and amended from time to time. If you do not understand and accept these Terms in their entirety, you should not register for an Account or use the Platform or any Service. We reserve the right, at our sole and absolute discretion, to amend, supplement or replace any part of these Terms at any time. We will notify you of any changes by updating the revised Terms via the Website or the Platform, and changing the "Last Updated" date on this page. Any changes to these Terms will be effective immediately upon publication. We encourage you to frequently review these Terms to ensure you understand the terms and conditions that apply to your access to, and use of, the Services.
NOW IT IS HEREBY AGREED as follows: ### 1. DEFINITIONS AND INTERPRETATION #### 1.1. Definitions In these Terms, unless the context otherwise requires: "Account" means one or more accounts in your name opened with Nara. "Applicable Laws" means any and all applicable laws, statutes and regulations, and any and all directives, notices, guidelines codes, practice notes, circulars, policy statements, rules, ordinances, orders, requests, requirements, judgements, decrees or writs (in each case whether or not having the force of law) of any governmental, regulatory or judicial body or agency having jurisdiction over any of the parties to these Terms (including any and all Users and Nara) or any of the subject matters of these Terms. "Blockchain" means a distributed, immutable ledger of transactions, such as the Ethereum blockchain, on which the Protocol and Nara Assets may operate. "Blocked Addresses" means digital asset addresses that have been identified by Nara as being associated with prohibited activities, sanctioned persons, or other restricted parties. "Credit Assessor" means any independent third-party service provider engaged by Nara to conduct credit assessments of borrowers. "Default Event" means the occurrence of any event, condition, or circumstance which Nara, in its sole and absolute discretion, determines has occurred or is reasonably likely to occur, and which, in Nara's judgment: (a) materially and adversely affects the operational integrity, security, or solvency of the Nara Protocol; (b) results in, or could reasonably be expected to result in, a material impairment of the value or liquidity of the Reserves; (c) threatens the ability of Nara to honor its redemption obligations under these Terms, whether now or in the future; (d) involves a deviation in the market price of NaraUSD from its U.S. Dollar reference value that Nara deems significant, for any duration; (e) arises from a Force Majeure Event, a material disruption in the broader financial or digital asset markets, or a change in Applicable Law that makes the continued operation of the Protocol commercially impracticable or legally unviable; or (f) involves any security breach, exploit, or vulnerability, whether affecting the Nara Protocol directly or any third-party protocol, network, or service on which it relies.The determination of whether a Default Event has occurred shall be made by Nara in its sole and absolute discretion, and such determination shall be final and binding. "Digital Assets" means any digital representation of value based on a cryptographic protocol of a computer network, including but not limited to cryptocurrencies, stablecoins, and digital tokens. "Eligible Collateral" means a variety of Digital Assets (which may include, but are not limited to, fiat-backed stablecoins, tokenized real-world assets, and other cash equivalent digital assets) as determined by Nara in its sole discretion from time to time, provided that such assets are selected with the intention of supporting the stability and reference value of the Nara Protocol. "Force Majeure Event" means any event or circumstance beyond Nara’s reasonable control, including but not limited to acts of God, fire, flood, war, terrorism, government action, labor disputes, and failures of telecommunication or internet services. "Indemnified Persons" means (a) Nara, (b) Nara's shareholders, members, joint venture parties, subsidiaries, affiliates, and related corporations, foundations and entities, (c) any Credit Assessors or administrative agent engaged by Nara and (d) the officers, directors, employees, representatives, agents, attorneys, suppliers, contractors, and service providers of all the persons and entities described in (a),(b) and (c). "Insurance Fund" means the on-chain reserve fund maintained by the Nara Protocol and funded by protocol revenues to act as the first buffer against losses in the Reserves before any loss is allocated to NaraUSD+ holders. "Loss Waterfall" means the three-tiered, sequential loss absorption mechanism described in Section 13.2, which dictates the order in which losses incurred by the Reserves are socialized. "Minting" means the process of creating new Nara Assets by depositing Eligible Collateral into the Protocol. "Nara Assets" means NaraUSD, NaraUSD+ and any other Digital Assets that Nara may issue from time to time. "NaraUSD" means a transferable digital asset issued by the Nara Protocol which is designed to reference the value of the U.S. Dollar. The ability of NaraUSD to maintain this reference is dependent on the value and liquidity of the assets held in the Reserves, as more fully described in these Terms. "NaraUSD+" means a digital token that represents a pro-rata share of the Nara Protocol's Reserves. The quantity of underlying assets in the Reserves attributable to each NaraUSD+ token may fluctuate over time based on the net performance of the Reserve's assets and liabilities. "Nara Protocol" or "Protocol" means our protocol for the issuance, redemption, and staking of NaraUSD. "Person" means an individual, corporation, partnership, joint venture, association, trust, or any other legal entity. "Platform" means the platform operated by Nara that provides you with access to the Services. "Primary User" means any user of Services provided by Nara in respect of the Account. "Privacy Policy" means Nara’s privacy policy, available at (or such other URL as we may provide from time to time), as may be amended. "Redemption" means the process of exchanging Nara Assets for Eligible Collateral from the Protocol. "Reserves" means the portfolio of assets (which may include Eligible Collateral, cash, cash equivalents, and other permitted investments) held by Nara or its designated custodians to back the value of NaraUSD. "Restricted Jurisdictions" means (i) any jurisdiction listed on the Financial Action Task Force (FATF) Grey list or Black list, European Union Sanctions list, United Nations Sanctions list, or the U.S. Office of Foreign Assets Control (OFAC) Sanctions list, as such lists may be amended from time to time; (ii) the United States of America; (iii) China (including Hong Kong S.A.R.), (iv) Panama, or (v) any jurisdiction in which accessing or using the Nara Protocol is prohibited by Applicable Laws, or where the distribution, issuance, or holding of NaraUSD or NaraUSD+ may require Nara to hold a license or obtain an approval from a local regulator. "Restricted Person" means any Person that is the subject or target of any sanctions, including a Person that is: (a) named in any sanctions-related list maintained by the U.S. Department of State, U.S. Department of Commerce, U.S. Department of the Treasury, or any similar list maintained by any other relevant governmental authority; (b) located, organized or resident in a Restricted Jurisdiction; or (c) owned or controlled by any such Person or Persons. "Risk Disclosure Statement" means the statement of risks associated with the Services, which is incorporated by reference into these Terms. "Secondary User" means any holder of NaraUSD or NaraUSD+ that does not have access to purchase or redeem them directly with Nara until they open and are approved for an Account. "Services" means the services offered by Nara, including the Minting and Redemption of NaraUSD, the Staking of NaraUSD to receive NaraUSD+, and account management. "Smart Contract" means a self-executing contract with the terms of the agreement directly written into code, which is stored and replicated on a Blockchain. "Staking" means the process of locking up NaraUSD in a Smart Contract to receive NaraUSD+. "Third-Party Protocols" means decentralized finance lending and borrowing protocols, including but not limited to Aave, Superstate, Sky Protocol, and any other blockchain-based protocols to which Nara may supply assets from the Reserves. "User" or "you" means a Primary User and/or Secondary User as the context requires. "U.S. Person" means any of the following: (i) a U.S. Citizen or U.S. Resident, which includes: (A) U.S. citizens; (B) U.S. lawful permanent residents; (C) individuals who meet the "substantial presence" test described in section 7701(b)(3) of the U.S. Internal Revenue Code of 1986 (as amended); (D) protected individuals under section 1324b(a)(3) of the U.S. Immigration and Nationality Act; or (E) individuals who hold a passport issued by the United States Government; (ii) a corporation, partnership, or other entity established or organized in or under the laws of the United States; (iii) any estate of a decedent who was a citizen or a resident of the United States; (iv) any trust if a court within the United States is able to exercise primary supervision over the administration of the trust and one or more United States Persons have the authority to control all substantial decisions of the trust; and (v) any Person organized or incorporated outside the United States and its territories or insular possessions in which any of the foregoing, whether singularly or in the aggregate, directly or indirectly: (A) holds a 50 percent or greater equity interest by votes or value; (B) holds a majority of seats or memberships on the board of directors of the entity; or (C) authorizes, establishes, directs, or otherwise controls the actions, policies, personnel decisions, or day-to-day operations of the Person. "Wallet" means a digital wallet or address for holding Digital Assets. "Website" means Nara's website at or as may be changed from time to time. #### 1.2. Interpretation In these Terms, unless the context or subject otherwise requires: (a) any reference to time and/or date shall be construed as a reference to the time in Panama; (b) the headings are for convenience only and shall not affect the interpretation hereof; (c) the words "written" and "in writing" include any means of visible reproduction; (d) references to the singular number shall include references to the plural number and vice versa, references to natural persons shall include bodies corporate, and the use of any gender shall include all genders; (e) references to "Sections" and "Schedules" are to be construed as references to the sections and schedules of/to these Terms; and (f) any reference to a statutory provision shall include such provision as from time to time modified or re-enacted and any regulations made in pursuance thereto as from time to time modified or re-enacted after the date of these Terms and shall also include any provision in any other statute which replaces that present statutory provision. ### 2. NARA ASSETS #### 2.1. NaraUSD NaraUSD is a transferable digital asset issued by the Nara Protocol which is designed to reference the value of the U.S. Dollar. It functions as the primary digital asset for interacting with the Nara Protocol. The ability of NaraUSD to maintain its U.S. Dollar reference is not guaranteed and is dependent on the value, liquidity, and performance of the assets held in the Reserves. The use of "USD" in the name "NaraUSD" is for denomination purposes only and does not imply a direct peg, backing by, or claim on U.S. Dollars. #### 2.2. NaraUSD+ NaraUSD+ is a digital token that represents a pro-rata share of the Nara Protocol's Reserves. The quantity of underlying assets in the Reserves attributable to each NaraUSD+ token may fluctuate over time based on the net performance of the Reserve's assets and liabilities. For the purposes of these Terms, "net performance" means the gross yield or returns generated by the Reserves, minus any applicable fees, costs, and expenses (including, but not limited to, administrative expenses, enforcement costs, fees owed to Credit Assessors and other service providers, and allocations to the Insurance Fund). As a holder of NaraUSD+, you receive this net performance in exchange for your position being subordinated to NaraUSD holders, meaning it acts as first loss capital in the event of a Reserve loss, as detailed in the Loss Waterfall in Section 13. ### 3. SERVICES #### 3.1. Available Services To the extent you have an Account in good standing, you may, on the Platform: (a) mint NaraUSD by depositing Eligible Collateral; (b) redeem your NaraUSD for Eligible Collateral; (c) stake your NaraUSD to receive NaraUSD+; (d) unstake your NaraUSD+ to receive NaraUSD; (e) view information about the Reserves and the performance of NaraUSD+; and/or (f) generate yield by staking NaraUSD; and/or (g) enrol and participate in any other services we offer to you. #### 3.2. Conditions on Use of Services You acknowledge that your ability to use the Services is conditional on (i) you maintaining an Account in good standing, (ii) no violation of these Terms, and (iii) no restrictions imposed by any Applicable Laws. Nara reserves the right to suspend all or part of the Services or your right to use the Services at any time and for any reason. #### 3.3. Ownership and Title to Digital Assets You agree, represent, and warrant with respect to any Digital Asset you sell, transfer or deliver to Nara that, (i) you are the lawful owner of such Digital Asset with good and marketable title thereto, and you have the absolute right to sell, assign, convey, transfer and deliver such Digital Asset, and all transactions with such Digital Assets are proprietary. Such Digital Asset is free and clear of any and all security interests, liens, pledges, claims (pending or threatened), charges, escrows, encumbrances or similar rights, (ii) you are the lawful owner of each Wallet address you provide to us and have good title thereto and (iii) each of your Wallets is owned and operated solely for your benefit, and no Person, other than you, has any right, title or interest in any Wallet. #### 3.4. Blockchain Technology Risks By using any of the Services, you acknowledge and agree that the availability and functionality of these Services may be subject to limitations, delays, and other issues inherent in the use of Blockchain technology and Digital Assets. Under no circumstances shall any of the Indemnified Persons be responsible for any losses or damages arising from such issues, and your use of the Services is at your own risk. #### 3.5. Our Role and Relationship with You You acknowledge and agree that Nara is a technology service provider that has contributed to the development of the Protocol and provides access to it via the Website and related interfaces. Your use of the Services and receiving NaraUSD or NaraUSD+ do not represent a claim, participation interest, economic right, voting right, or other similar right associated with Nara or any of its affiliates. Nara, Credit Assessors, administrative agent and other service providers are not, and shall not be construed as, a bank, broker-dealer, custodian, investment adviser, financial institution, money services business, lender, borrower, or fiduciary. We do not provide investment, financial, legal, tax, or other professional advice, and you should seek independent professional advice before using the Services. Credit reports, performance monitoring or any other data or information produced by Credit Assessors should not be considered investment advice, legal advice or tax advise. #### 3.6. Legal Title to Reserves While Nara holds full legal title to the assets in the Reserves for the purpose of backing NaraUSD, this does not create a custodial relationship with users and Nara is not acting as custodian on behalf of users. Users do not have a direct legal claim to specific assets in the Reserves. Instead, users have the right to redeem NaraUSD for their notional value in supported Digital Assets, subject to these Terms. For the avoidance of doubt in case of bankruptcy all assets in the Reserves shall be considered as Nara’s assets rather than users’ assets. #### 3.7. No Fiduciary Duties These Terms are not intended to, and do not, create or impose any fiduciary duties, obligations, or responsibilities on us or any Indemnified Person. To the fullest extent permitted by law, you acknowledge and agree that we owe no fiduciary duties or liabilities to you or any other party, and that to the extent any such duties or liabilities may exist at law or in equity, they are hereby irrevocably disclaimed, waived, and eliminated. You further agree that the only duties, obligations, and rights owed or granted in connection with these Terms and the Services are those expressly set forth herein, and you shall hold the Indemnified Persons harmless from any claims, losses, or liabilities arising from any purported fiduciary relationship. #### 3.8. Your Control of Assets and Smart Contract Administration We do not provide custody services in the traditional sense, as we do not take possession of your private keys. You retain sole control over the assets in your digital Wallet. However, you acknowledge and agree that the NaraUSD Smart Contract contains administrative functions that allow Nara, in certain limited circumstances as set forth in Section 8, to freeze the transferability of NaraUSD balances. Except for the freeze function described herein, we cannot initiate other transactions, reverse transactions, or recover lost or stolen assets on your behalf. #### 3.9. Secondary Users If you acquire NaraUSD or NaraUSD+ on secondary markets or from third parties without registering for an Account and completing our required identity verification (KYC) procedures (a "Secondary User"), your access to the Services is strictly limited. Secondary Users cannot directly mint or redeem NaraUSD with Nara, nor can they access certain yield-generating features or staking mechanisms that require a verified Account. While Secondary Users may hold or transfer NaraUSD or NaraUSD+ on supported Blockchains, Nara makes no representations, warranties, or guarantees regarding the ability of Secondary Users to utilize the Platform. To fully access the Services, including direct redemption, a Secondary User must register for an Account, successfully complete all compliance and onboarding checks, and become a Primary User. Nara assumes no liability to Secondary Users for any losses, including those resulting from an inability to redeem assets directly or participate in the Nara Ecosystem. ### 4. FEES AND CHARGES #### 4.1. Fee Types We reserve the right to charge you fees in connection with the use of your Account and/or Services. These may include, but are not limited to: (a) Minting Fees: A fee charged when you purchase NaraUSD. (b) Redemption Fees: A fee charged when you redeem NaraUSD. (c) Performance Fee: A fee charged on the yield generated by the Reserves. (d) Insurance Fund Fee: A portion of the yield generated by the Reserves that is allocated to an insurance fund to protect against negative performance. #### 4.2. Fee Adjustments You also acknowledge and agree that we shall have sole and absolute discretion to impose new fees or adjust any existing fees at any time. If you do not agree to any changes in fees, you may terminate your Account and cease using the Services. #### 4.3. Third-Party Fees We pass-through transactional and other fees from third parties, Credit Assessors and service providers to Users. This can include, but is not limited to transfer fees related to Blockchain transactions. You are solely responsible for paying any transactional fees. In addition, fees may be imposed for transacting on the Blockchain or by a third-party service provider that operates your funding source. Any fees imposed by your third-party service provider may not be reflected on the Platform as these fees are not imposed by us. You are solely responsible for paying any fees imposed by the third-party service provider on you. ### 5. ACCOUNT REGISTRATION #### 5.1. Eligibility To be eligible to use any of the Services, the following conditions must be satisfied at all times: 1. if you are an entity, you are duly incorporated, duly organised and validly existing under the laws of your jurisdiction and have full power to conduct your business, and if you act as an employee or agent of a legal entity, and enter into these Terms on their behalf, you represent and warrant that you have all the necessary rights and authorizations to bind such legal entity; 2. if you are an individual, you are at least 18 years old or of legal age to form a binding contract under all Applicable Laws, and have full mental capacity to enter into these Terms and any other agreement entered into pursuant to, or in connection with, these Terms, and to make decisions regarding your investments or transactions; (c) you have not previously been suspended or removed from using the Services; (d) you are not an individual or entity sanctioned by any authority; (e) you are not incorporated or residing in a Restricted Jurisdiction; (f) you are not prohibited from using the Services by any Applicable Laws and is at all times compliant with Applicable Laws, including but not limited to regulations on anti-money laundering, anti-corruption, and counter-terrorist financing; (g) all of your representations and warranties set out in these Terms and any and all agreements entered into pursuant to, or in connection with, these Terms, being true, accurate, correct, complete, complied with, and not misleading, in all respects and at all times; (h) you have performed and discharged, or will perform and discharge at all times, all of your covenants, agreements, obligations, or undertakings under these Terms and any and all agreements entered into pursuant to, or in connection with, these Terms. #### 5.2. Restricted Locations, Access and Services (a) You may not use the Services if you are located in, or a citizen or resident of any Restricted Jurisdictions or any state, country, territory or other jurisdiction where your use of the products and services would be illegal or otherwise violate any Applicable Laws. (b) You may not use the products and services if you are located in, or a citizen or resident of, any state, country, territory or other jurisdiction where we have determined, at our discretion, to prohibit use of the Services. (c) Services are only available to Users in countries where they are permitted to be offered. (d) We may implement controls to restrict access to the Services from any jurisdiction prohibited pursuant to these Terms, including implementing technical and automatic geo-blocking and IP filtering measures to prevent access from Restricted Jurisdictions. (e) You accept and agree that you shall not attempt to access or otherwise engage in any Services that have been restricted in accordance with these Terms. A breach of this restriction constitutes a breach of these Terms and we may at our sole discretion terminate your Account in accordance with these Terms. (f) You acknowledge and agree that neither NaraUSD nor NaraUSD+ and related services have been marketed, promoted, or actively offered to you within the Restricted Jurisdictions, the United States and European Union. Any decision to acquire or use NaraUSD, NaraUSD+ and/or the Services have been made solely at your own initiative. You confirm that you requested access to information and services related to NaraUSD, NaraUSD+ and/or the Services without having been solicited by Nara, its affiliates, or any distributors. #### 5.3. Account Information (a) When registering your Account, you must provide current, complete, true and accurate information as required. You agree to provide us with any additional information, documents and/or materials we may request at any time that would facilitate our performance of customer due diligence, or compliance with Applicable Laws and/or detection of money laundering, terrorist financing, fraud, or any other offences. In providing us with such information, you confirm (i) its accuracy, authenticity, and completeness, and (ii) you have not withheld any information, document or material that may influence our evaluation of you for the purposes of registering or maintaining your Account or providing Services to you. (b) You hereby agree to permit us to keep a record of all such information for so long as we are required or permitted to do so under Applicable Laws, including after the termination of your Account. We will collect, use, disclose, process and/or store such information in accordance with our Privacy Policy. (c) By signing up for an Account, you hereby authorise us to make inquiries, whether directly or through third parties, to verify your identity or perform screening, or to protect you and/or us against fraud or other financial crimes, and to take any action that we reasonably deem necessary based on the results of such inquiries. When we carry out these inquiries, you acknowledge and agree that the information, documents and materials provided by you may be disclosed to credit bureaus, fraud prevention or financial crime agencies, operators of commercial databases or such other third-party background screening or identity verification operators, law enforcement agencies or other competent authorities. (d) Post-Account opening, you must ensure that such information provided to us continues to be truthful, accurate, complete, and up to date. You agree and undertake to keep us promptly updated in writing if any of the information you provided to us changes, or if there is any change in circumstance that may cause any such information provided to become outdated, false, inaccurate, or incomplete. Such updates in writing shall be provided no later than 5 calendar days after such changes have occurred. (e) Any failure on your part to comply with any of the above requirements will constitute a breach of these Terms and we shall have the right to demand rectification of your information, or terminate, suspend or restrict your access to your Accounts, terminate the provision of all or part of the Services to you, as well as take any other action as we deem fit, whether for a specified period of time or indefinitely. ### 6. ACCOUNT SECURITY #### 6.1. Security Obligations You must maintain the security and confidentiality of your account information, including Account number, registered name, password, email or phone number and any other sensitive information related to your Accounts (the "Account Credentials"). #### 6.2. Responsibility for Account Activity You are solely responsible for all activities that occur under your Account, whether or not you have authorized such activities. You will not allow any third party to access or use your Account. #### 6.3. Notification of Unauthorized Use You must notify us immediately of any unauthorized use of your Account or any other breach of security. We will not be liable for any loss or damage arising from your failure to comply with this section. #### 6.4. Additional Security Measures We may, in our sole discretion, require you to use two-factor authentication or other security measures to access your Account. ### 7. ACCOUNT SUSPENSION AND TERMINATION #### 7.1. Right to Suspend or Terminate You agree that Nara shall have the right in its sole and absolute discretion, without prior notice and liability to you or any other third party, to refuse to allow the Minting, issuance or Redemption of any Digital Asset, immediately suspend, terminate or restrict your access to your Accounts, and/or suspend, terminate or restrict your access to any of the Services, whether for a specified period of time or indefinitely, for any reason or for no reason whatsoever, including where: (a) we are, in our sole opinion, required to do so by any Applicable Laws; (b) we reasonably believe that we need to do so in order to protect our reputation or goodwill; (c) you have not complied with, or we reasonably suspect you of acting in breach of, any terms, conditions or provisions in these Terms, including but not limited to conducting any prohibited activities under Section 15; (d) we detect any unusual activity in or unauthorized access to your Accounts; (e) we have determined or suspect that any transaction is erroneous, unauthorised, fraudulent or unlawful or we suspect your Accounts and/or the Services are being used in a fraudulent, unlawful or unauthorised manner; (f) we have concerns about the security of your Accounts; (g) we have determined or suspect that there is any occurrence of money laundering, terrorist financing, fraud, or any other financial crime, or if your activities are in breach of any sanctions related laws, regulations, orders, rules or code of conduct; (h) we have determined or suspect that there is any occurrence or involvement of unlicensed gambling, scams, high risk business, purchase of drugs, conduct of multi-level marketing, ransomware, transactions in darknet market, transactions in high-risk exchanges, and/or transactions with sanctioned countries, individuals or entities or politically exposed persons; (i) use of your Account is subject to any pending litigation, investigation, and/or government proceeding, and/or we perceive a heightened risk of legal or regulatory non-compliance associated with your Account; (j) we have determined or suspect that you have directly or indirectly registered any Account in another person's name; (k) any information that you have provided to us is untruthful, inaccurate, outdated or incomplete; (l) these Terms have been amended, and you are unwilling to accept any of the terms, conditions or provisions of the amended Terms; (m) you have requested that we terminate or suspend the provision of any Services to you; and/or (n) any other circumstance (including due to external market movements and conditions) has arisen where we consider it necessary to terminate or suspend any of its Services. #### 7.2. Damages You agree that you will continue to be responsible for all debts obligations related to your Account even after it is closed. Under no circumstances shall any of the Indemnified Persons be responsible or liable to you or any other person or entity for any direct, indirect, special or consequential losses (including loss of profits, business, or opportunities), damages or costs by reason of, or arising from, or as a consequence of the cancellation, suspension or termination of your Account and/or your access or use of our Services and Platform. #### 7.3. Access to Services Upon termination of an Account, whether by you or by us, you will lose access to all Services and features provided by the Platform. Under no circumstances shall any of the Indemnified Persons be liable for any losses, damages, or consequences resulting from the termination of any Account. #### 7.4. Effect of Termination on Digital Assets In the event your Account is suspended or terminated by Nara pursuant to Section 7.1, particularly due to a breach of these Terms or suspected illegal activity, Nara reserves the right, in its sole and absolute discretion, to determine the disposition of any NaraUSD, NaraUSD+, or other Digital Assets associated with your Account. Such actions may include, but are not limited to: (a) freezing the transferability of the assets indefinitely; (b) automatically redeeming the assets for Eligible Collateral (less any applicable fees, costs, or damages owed to Nara); (c) requiring you to withdraw the assets to an external Wallet within a specified timeframe, provided such withdrawal is permitted by Applicable Laws; or (d) transferring, disposing, forfeiting, withholding, converting, or handling the assets in accordance with the instructions of competent authorities including but not limited to law enforcement agencies, regulators, and the judicial authorities. You acknowledge that in cases of severe breach, fraud, or legal compulsion, you may forfeit any rights associated with your NaraUSD or NaraUSD+. ### 8. ASSET FREEZING AND BLOCKED ADDRESSES #### 8.1. Right to Freeze You acknowledge and agree that we explicitly reserve the right, in our sole and absolute discretion, to freeze the transferability of any NaraUSD and NaraUSD+ held in any blockchain address. This action may be taken without prior notice to you and is a critical tool to protect the integrity of the Protocol, its users, and to comply with legal obligations. #### 8.2. Grounds for Freezing We will only exercise this right under specific, limited circumstances. These circumstances include, but are not limited to: (a) Security Incidents and Hacks: If we receive a verifiable report or have reason to believe that an address is associated with a security breach, hack, or exploit of the Protocol or any other protocol. (b) Sanctions Compliance: If an address is owned, controlled by, or associated with any person or entity that is the subject of sanctions administered or enforced by any country or government (including but not limited to the U.S. Department of Treasury's Office of Foreign Assets Control (OFAC), the United Nations Security Council, the European Union, or the Hong Kong Monetary Authority), or is located, organized, or resident in any country or territory that is the subject of comprehensive country-wide or territory-wide sanctions. (c) Suspected Illegal Activity: If we have a good faith belief that an address is being used for, or contains the proceeds of, illegal activities, including but not limited to money laundering, terrorist financing, fraud, theft, ransomware attacks, or any other criminal conduct. (d) Legal and Regulatory Orders: In response to a valid court order, subpoena, warrant, or other legal or regulatory directive from a court or government agency with competent jurisdiction (i.e., enforcement by courts). #### 8.3. Effect of Freeze A freeze will prevent the affected NaraUSD and NaraUSD+ from being transferred, redeemed, or otherwise used. We will make reasonable efforts to notify the apparent owner of the address, where possible, but are under no obligation to do so. The freeze may be temporary or permanent, as determined by us in our sole discretion based on the underlying circumstances. #### 8.4. Blocked Addresses Nara reserves the right to “block” certain addresses that it determines, in its sole discretion, may be associated with illegal activity or activity that otherwise violates these Terms (“Blocked Addresses”). In certain circumstances, Nara may deem it necessary to report such suspected illegal activity to applicable law enforcement agencies and you may forfeit any rights associated with your NaraUSD or NaraUSD+, including the ability to redeem them for any permitted assets. Nara may also be required to surrender associated assets held in the Reserves in the event it receives a legal order from a valid government authority requiring it to do so. #### 8.5. No Liability You agree that we shall not be liable to you or any third party for any losses, damages, or claims of any kind, whether direct or indirect, arising out of or in connection with our decision to freeze any assets or the Blocked Addresses in accordance with these Terms. You hereby waive any and all claims against us and the Indemnified Persons related to any such freeze or Blocked Addresses. ### 9. TRANSACTION LIMITS AND CONTROLS #### 9.1. Transaction Limits Nara reserves the right to establish transaction limits on the size or number of transactions you can initiate. #### 9.2. Suspicious Transactions We may delay any transaction if we believe it is suspicious or violates these Terms or applicable laws. The transaction may be delayed for a certain time as determined by us in our sole discretion based on the underlying circumstances. #### 9.3. No Liability You agree that we shall not be liable to you or any third party for any losses, damages, or claims of any kind, whether direct or indirect, arising out of or in connection with our decision to delay or limit on any of your transaction in accordance with these Terms. You hereby waive any and all claims against us and the Indemnified Persons related to any such delayed or limited transaction. ### 10. ISSUANCE AND REDEMPTION #### 10.1. Purchase (Issuance) You may purchase NaraUSD on the Platform at the prevailing price, which will be based on the target fiat currency value plus any applicable fees. The specific fiat currencies or Digital Assets accepted for purchase, as well as any applicable exchange rates or valuation methodologies for conversions, will be displayed to you on the Platform at the time of the transaction. #### 10.2. Redemption You may request to redeem your NaraUSD through the Platform. The redemption value will be based on the target fiat currency value less any applicable fees. The specific fiat currencies or Digital Assets available for redemption, and any applicable conversion rates, will be determined by Nara and displayed on the Platform at the time of your redemption request. ### 11. STAKING AND UNSTAKING #### 11.1. Staking You may stake your NaraUSD to receive NaraUSD+. The exchange rate will be determined by the current value of the staking pool. #### 11.2. Unstaking You may unstake your NaraUSD+ to receive NaraUSD. This process may be subject to a waiting period as stated on the Website from time to time. ### 12. RISK DISCLOSURES Your use of the Services is entirely at your own risk. This section outlines the significant risks associated with purchasing, holding, and using NaraUSD and NaraUSD+. This does not purport to disclose all possible risks. You are solely responsible for making your own independent appraisal and investigation into the risks of any transaction. If you do not understand the risks involved, you should not use the Services. #### 12.1. General Disclaimer This Risk Disclosure Statement outlines various risks associated with NaraUSD, NaraUSD+, and the Services. However, it does not cover all potential risks or considerations. You are responsible for understanding the risks before engaging with our Services. Indemnified Persons will not be liable for any direct, indirect, special, or consequential damages, including loss of profits, business, or opportunities, arising from your reliance on this Risk Disclosure Statement or use of our Services. #### 12.2. No Advice Information provided by Nara is for informational purposes only and does not constitute investment, financial, legal, tax, or other professional advice. You are solely responsible for making decisions based on your own judgment and independent advice. Any reliance on information provided by Nara is at your own risk. #### 12.3. Protocol and Smart Contract Risks (a) Smart Contract Vulnerabilities: The Nara Protocol is composed of Smart Contracts on various Blockchains. While these Smart Contracts have been audited, there is a risk of undiscovered vulnerabilities, bugs, or exploits that could lead to the loss of your funds. (b) On-chain transactions irreversible: when digital assets are sent to a third-party wallet address, such transaction is completed on supported blockchains. This means that such a transaction is irreversible and Nara does not have the ability to reverse or recall any transaction once initiated. You bear all responsibility for any losses that might be incurred as a result of sending your digital assets to an incorrect or unintended wallet address. (c) Protocol Changes: We may need to upgrade or modify the Protocol, which could introduce new risks or unforeseen consequences. (d) Blockchain Congestion and Failures: Network congestion, high transaction fees (gas costs), or Blockchain-level failures could prevent you from accessing your funds or using the Services. (e) Copy, wrapper: parties unaffiliated with Nara may create an alternative, equivalent version of NaraUSD or NaraUSD+ (a “Copy”) that operate independently or may create a new asset incorporating or collateralized with NaraUSD or NaraUSD+ (a “Wrapper”). In both case Nara shall not be obligated to support this Copy or Wrapper and assume no liability for any value that might be lost as a result. No such Copy or Wrapper should be considered approved, sold, distributed, or promoted by Nara unless explicitly stated. (f) Fork: As a result of the decentralized and open source nature of the blockchains on which NaraUSD and NaraUSD+ is supported, it is possible that a party unaffiliated with Nara could create an alternative version of the blockchain (a “Fork”). Note that in the event of a Fork of one of the NaraUSD or NaraUSD+ supported blockchains, Nara may be forced to suspend all activities (including tokenizing assets, redeeming for supported assets, or sending and receiving assets) for an extended period of time until Nara has determined in its sole discretion that such functionality can be restored (“Downtime”). This Downtime will likely occur immediately upon a Fork, potentially with little to no warning, and during this period of Downtime you will not be able to conduct various activities involving NaraUSD and NaraUSD+. In the event of a Fork of one of the supported blockchains, Nara shall, in its sole discretion, determine which Fork it will support, if any. (g) Migration: Nara reserves the right to migrate NaraUSD or NaraUSD+ to another blockchain or protocol in the future at its reasonable discretion. Upon Nara’s request, you agree to take any and all actions reasonably necessary to effectuate the migration of your NaraUSD or NaraUSD+ to another blockchain or protocol identified by Nara. Nara will not be responsible or liable for any damages, losses, costs, fines, penalties or expenses of whatever nature, whether or not reasonably foreseeable by the parties, which you may suffer, sustain or incur, arising out of or relating to your failure to effectuate such migration to another blockchain or protocol identified by Nara. #### 12.4. Depeg Risk NaraUSD may experience depegging where its value deviates from its pegged value. This risk may stem from various factors such as market fluctuations, liquidity issues, loan defaults, regulatory constraints, erosion of market trust, financial events, operational difficulties, and technical problems like hacks, security breaches or network congestion. Under no circumstances shall any of the Indemnified Persons be responsible or liable to you or any other person or entity for any losses by reason of, or arising from, or as a consequence of, any risks associated with the depegging of NaraUSD. #### 12.5. Risks Related to Financing (a) Borrower Default Risk: Borrowers engaged in financing strategies may default on their loans. These borrowers may be undercollateralized or uncollateralized, and their ability to repay may depend on the success of their business operations. A borrower default could result in a total loss of the principal lent to them, leading to a reduction in the value of the Reserves. (b) Operational Risk of Borrowers: Borrowers may face operational failures, fraud, or business risks that are outside of Nara's control. The success of their financing strategies is not guaranteed. (c) Third-Party Credit Assessment Risk: You acknowledge that the Nara Protocol relies exclusively on credit assessments of borrowers conducted by independent third-party service providers, such as independent third-party service providers (each, a "Credit Assessor"). Nara does not conduct its own credit assessments, nor does it verify the assessments performed by the Credit Assessor. The Credit Assessor's models may be flawed, their data may be incomplete, or borrowers may provide false or misleading information. Nara and any Credit Assessor make no representation or warranty as to the accuracy or effectiveness of the process and expressly disclaims all liability for any losses arising from a borrower default, regardless of the quality of the credit assessment. (d) Concentration Risk: The Reserves may be concentrated in loans to a small number of borrowers. The default of a single large borrower could have a material impact on the value of the Reserves. (e) Lack of Collateral: Unlike typical DeFi lending protocols, loans to borrowers may not be fully collateralized by on-chain assets. In the event of a default, Nara may have limited or no recourse to recover the lent funds. (f) Fraud and Authenticity Risk: Collateral or receivables provided by borrowers may be fraudulent, invalid, misrepresented, or otherwise unenforceable. Nara's ability to verify the authenticity, value, and enforceability of off-chain collateral is limited. In the event that collateral proves to be fraudulent or invalid, the Reserves may suffer losses, which would directly impact the value of NaraUSD and NaraUSD+. Under no circumstances shall any of the Indemnified Persons be responsible for losses arising from fraudulent or invalid collateral provided by borrowers. (g) Priority of Claims and Distribution: In the event of a Default Event, any proceeds from the liquidation of the Reserves will be applied first to enforcement costs, administrative expenses, and fees owed to Credit Assessors and other service providers. Only after such costs and expenses are paid will remaining funds (if any) be distributed to holders of NaraUSD and NaraUSD+ on a pro-rata basis. You acknowledge that you may not recover all or any portion of your funds, and you may receive nothing if liquidation proceeds are insufficient to cover all costs and expenses. #### 12.6. Legal and Regulatory Risks (a) Uncertain Regulatory Landscape: The regulatory landscape for Digital Assets, including stablecoins, is evolving and uncertain. New laws and regulations may be enacted that could impact Blockchain technology, Digital Assets, and related services. There is no assurance that such changes will not negatively affect our Services. (b) Classification as Regulated Financial Instruments: NaraUSD or NaraUSD+ may be classified as regulated financial instruments in certain jurisdictions, potentially requiring licensing or registration. Regulatory actions could force Nara to restrict, suspend, or cease the Minting, issuance, or Redemption of its assets. (c) Not Legal Tender: Nara Assets are not legal tender and are not backed by any government or central bank. They do not benefit from government-sponsored insurance or protections. #### 12.7. Cybersecurity and Operational Risks (a) Cybersecurity Risks: Using online platforms involves risks like hardware/software failures, internet issues, malware, and cyberattacks. Unauthorized access to your assets or information is possible. (b) Platform Operational Risks: Technical issues may restrict your access to the Platform. Hardware or software failures, connectivity problems, or transmission errors may prevent you from submitting instructions or transactions. (c) Third-Party Risk: Nara has no control over, and assumes no responsibility for, third-party services. Disputes with third parties must be resolved directly with them. Third parties may elect to support NaraUSD or NaraUSD+ on their platforms without any authorization or approval by Nara. The availability of NaraUSD or NaraUSD+ on any third-party platform does not imply that such services are valid, legal, stable, or otherwise appropriate. Nara does not control or endorse any products, services, or platforms offered by third parties using the Nara Services or supporting NaraUSD or NaraUSD+. Nara is not liable for any losses, issues, or consequences that may arise from third-party transactions or the use of NaraUSD or NaraUSD+ on third-party platforms. #### 12.8. User Acknowledgment of Risks By proceeding to utilize our Services, you hereby acknowledge and confirm that you and/or your representatives (i) have carefully read the above Risk Disclosure Statement; (ii) have fully analysed, understood and appreciated the risks associated with transacting in or otherwise engaging in our Services; (iii) have sought and obtained all professional advice (including tax, legal, financial, investment, accounting and other professional advice) as may be relevant and/or necessary; and (iv) are authorised and permitted, under all Applicable Laws, to enter into such transactions. #### 12.9. Yield Generation and Lending Risks You acknowledge that a primary method for generating returns on the Reserves involves lending assets. These activities carry significant risks that directly impact the value of the Reserves and, consequently, the value of your NaraUSD+ position. These lending activities fall into two main categories: (a) Private Credit Lending: As described in Section 12.5, Nara may lend assets to borrowers based on credit assessments performed by third-party Credit Assessors. These loans are subject to borrower default risk. (b) On-Chain Protocol Lending: Nara may also supply assets to various decentralized finance ("DeFi") lending and borrowing protocols, such as Aave, Superstate, Sky Protocol, or others (collectively, "Third-Party Protocols"). This activity, while often automated, exposes the Reserves to a unique and complex set of risks that are distinct from traditional credit risk. These risks include, but are not limited to: (i) Smart Contract Risk: The Third-Party Protocols are governed by complex, autonomous smart contracts. A bug, vulnerability, or exploit in a Third-Party Protocol's code could result in a partial or total loss of any assets Nara has supplied. (ii) Liquidation Engine Risk: DeFi lending is typically over-collateralized and relies on automated liquidation engines to manage risk. These engines may fail or perform sub-optimally during periods of high network congestion, extreme market volatility, or due to oracle failures, potentially leading to bad debt within the Third-Party Protocol that could be socialized across all lenders, including Nara. (iii) Third-Party Governance Risk: Many Third-Party Protocols are governed by token holders who can vote to change the protocol's rules, such as collateral factors, interest rate models, or even freeze assets. A governance decision on a Third-Party Protocol could negatively impact Nara's position without Nara's consent. (iv) Systemic and Contagion Risk: The DeFi ecosystem is highly interconnected. A failure at one major protocol, the de-pegging of a major stablecoin used as collateral, or a large-scale liquidation event on a Third-Party Protocol could cause a cascade of failures across the industry, impacting the value and liquidity of assets held by Nara in otherwise sound protocols. (v) Oracle Risk: Third-Party Protocols rely on data feeds ("Oracles") to determine the value of collateral. If an Oracle is manipulated or provides inaccurate data, it could lead to improper liquidations and a loss of Nara's funds. You acknowledge and agree that Nara is not responsible for the security, operation, or governance of any Third-Party Protocol. By using the Services, you accept that your funds are exposed to all of the risks described above, and you agree to indemnify Nara for any losses incurred as a result of its interaction with Third-Party Protocols. ### 13: RESERVE MANAGEMENT AND LOSS WATERFALL ### 13.1. The Insurance Fund The Nara Protocol maintains a separate, on-chain fund of assets known as the "Insurance Fund." The Insurance Fund is capitalized by a portion of the protocol's revenues, which may include performance fees, minting and redemption fees, and arbitrage profits. The sole purpose of the Insurance Fund is to serve as the first line of defense to absorb any losses incurred by the Reserves. Nara makes no representation as to the sufficiency of the Insurance Fund, and it may be depleted entirely by a significant loss event. ### 13.2. The Loss Waterfall In the event of a liquidation of the Reserves or a Default Event, any proceeds will first be applied to cover enforcement costs, administrative expenses, and fees owed to any Credit Assessor, administrative agent, or other service providers. Following the payment of these expenses, the Nara Protocol employs a sequential, three-tiered loss absorption mechanism (the "Loss Waterfall") to protect the reference value of NaraUSD. In the event the net Reserves incur a loss from any source (including, but not limited to, negative asset performance, borrower defaults, smart contract exploits, or operational incidents), the loss will be covered in the following strict order: (a) First, by the Insurance Fund: The full value of the Insurance Fund will be used to absorb the loss. (b) Second, by Staked NaraUSD (NaraUSD+ Holders): If the loss exceeds the value of the Insurance Fund, the remaining loss will be socialized on a pro-rata basis across all holders of NaraUSD+. This will result in a reduction in the value of your NaraUSD+ position. This tier will absorb losses until it is fully depleted. (c) Third, by NaraUSD Holders: Only in a catastrophic scenario where both the Insurance Fund and the entire value of all NaraUSD+ positions are depleted would holders of NaraUSD be impacted. ### 13.3. Acknowledgment of First Loss Risk By choosing to stake NaraUSD to receive NaraUSD+, you explicitly acknowledge, agree, and consent to the following: (a) You are voluntarily taking on a subordinated, first loss position in exchange for the potential to receive the net performance of the Reserves (calculated as the gross yield generated by the Reserves minus applicable fees, costs, and expenses, including but not limited to administrative expenses, enforcement costs, and fees owed to service providers). (b) You understand that your staked assets are at risk and will be used to cover protocol losses before any losses are allocated to holders of NaraUSD. (c) You accept that the entire value of your NaraUSD+ position may be lost. (d) You represent that you are a sophisticated user with the financial knowledge and resources to understand and bear the risks associated with this first loss capital position. ### 13.4. Reserve Transparency While Nara retains sole discretion over the composition and management of the Reserves, Nara will endeavor to provide periodic transparency reports or real-time dashboards on the Website detailing the general composition of the Reserves, the total supply of NaraUSD, and the current value of the assets backing the protocol. Such information is provided for informational purposes only and does not constitute a guarantee of specific asset allocation or minimum buffer ratios unless explicitly stated otherwise by Nara. ### 14. REPRESENTATIONS, WARRANTIES, AND COVENANTS By creating an Account and/or using the Services, you represent, warrant, and covenant that: (a) You have full legal capacity and authority to enter into these Terms; (b) All information you provide is accurate, complete, and current; (c) You will comply with all Applicable Laws; (d) You are not a Restricted Person and are not located in a Restricted Jurisdiction; (e) You will not use the Services for any illegal purpose; (f) You understand the risks associated with Digital Assets and Blockchain technology and the risks specifically detailed in section 12 of these Terms; (g) You have sufficient knowledge and experience to evaluate the risks of using the Services. ### 15. PROHIBITED ACTIVITIES AND PROHIBITED TRANSACTIONS #### 15.1. Prohibited Activities In connection with the Minting, issuance, holding and Redemption of Nara Assets, you agree that you will not: (a) violate (or assist any other party in violating) any Applicable Laws; (b) intentionally try to defraud (or assist in the defrauding of) Nara or other Users; (c) provide or disseminate false, inaccurate, or misleading information, document or material; (d) take any action that interferes with, intercepts, or expropriates any system, data, or information; (e) partake in any transaction involving the proceeds of illegal activity, money laundering, terrorist financing, prohibited gambling, fraud, blackmail, extortion, ransomware, unlicensed moneylending activity, sale of any weaponry, drugs or darknet material; or (f) transmit or upload any virus, worm, or other malicious software or program; (g) attempt to gain unauthorized access to other Accounts, the Website, or any related networks or systems; (h) use the Services on behalf of any third party or otherwise act as an intermediary between us and any third parties; (i) defame, harass, or violate the privacy or intellectual property rights of Nara or any other Users; (j) upload, display or transmit any messages, photos, videos or other media that contain illegal goods, violent, obscene or copyrighted images or materials. (k) use any deep linking, web crawlers, bots, spiders or other automatic devices, programs, scripts, algorithms or methods, or any similar or equivalent manual processes to access, obtain, copy, monitor, replicate or bypass the Platform; (l) forge headers, impersonate, or otherwise manipulate identification, to disguise your identity or the origin of any messages or transmissions you send on the Platform; (m) use, or attempt to use, any service, protocol, or technology designed to obscure the source, destination, or path of funds, including but not limited to blockchain mixers, tumblers, privacy coins (such as Monero or Zcash), or privacy-enhancing wallets and protocols; (n) use any virtual private network (VPN), proxy service, Tor, or other means to obscure your true IP address or location, or to otherwise bypass any geographic restrictions or access controls implemented by Nara; or (o) engage in any other activity that, in Nara's sole and absolute discretion, poses an unacceptable risk to the integrity, security, or legal compliance of the Platform or its Users. #### 15.2. Prohibited Transactions Using Nara Assets for transactions related to the following is strictly prohibited, and we reserve the right to monitor and, if appropriate, block or otherwise prevent transactions that relate to: (a) any U.S. Persons; (b) weapons, controlled substances, gambling activities, adult content and pornography, or money-laundering/terrorist financing; (c) ponzi schemes, pyramid schemes, or multi-level marketing programs; (d) goods or services that infringe on copyright, trademark, or proprietary rights; (e) credit repair services or other services that may present consumer protection risks; (f) court-ordered payments, structured settlements, tax payments, or tax settlements; (g) unlicensed money transmitter activity, layaway systems, or annuities; (h) counterfeit goods or fraudulent activities, such as wash trading or market manipulation; or (i) purchasing goods from "Darknet" markets or any other service or website that acts as a marketplace for illegal goods. #### 15.3. Consequences of Prohibited Activities In the event we learn or reasonably suspect that you are engaging in any prohibited transactions, the measures set out in Section 7, including but not limited to suspension or termination of your Account, shall apply, potentially leading to the forfeiture of any Digital Assets otherwise eligible for Redemption. We may also be required by Applicable Laws to inform authorities about such transactions and follow court orders regarding information and assets held in the Account. #### 15.4. U.S. Persons Prohibition The Nara Assets are not offered or sold, and will not be offered or sold, in the United States or to U.S. Persons. In addition, the Nara Assets have not been registered under the Securities Act of 1933, as amended (the "Act") or the securities laws of any other jurisdiction, and may not be offered, sold or otherwise transferred in the United States or to U.S. Persons unless the securities are registered under the Act, or an exemption from the registration requirements of the Act is available. You agree not to use the Services to engage in any illegal activities, money laundering, fraud, or any activity that violates these Terms. ### 16. DISCLAIMER OF WARRANTIES TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAWS, THE SERVICES AND ANY MATERIALS, PRODUCT, SERVICE OR OTHER ITEM PROVIDED BY OR ON BEHALF OF NARA AND/OR ITS AFFILIATES IN CONNECTION WITH THE SERVICES (THE "MATERIALS"), WHETHER BY A THIRD PARTY OPERATOR OR OTHERWISE, ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS AND NARA EXPRESSLY DISCLAIMS, AND YOU WAIVE, ANY AND ALL OTHER WARRANTIES OF ANY KIND, WHETHER EXPRESS, STATUTORY OR IMPLIED, ORAL OR IN WRITING, INCLUDING WARRANTIES OF MERCHANTABILITY, ADEQUACY, ACCESSIBILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE OR NON-INFRINGEMENT OF THIRD PARTY RIGHTS OR WARRANTIES ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING OR USAGE IN TRADE. WITHOUT LIMITING THE FOREGOING, NARA DOES NOT REPRESENT OR WARRANT THAT THE WEBSITE, THE SERVICES AND/OR THE MATERIALS ARE ACCURATE, COMPLETE, RELIABLE, CURRENT, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. EXCEPT FOR THE EXPRESS STATEMENTS SET FORTH IN THESE TERMS, YOU HEREBY ACKNOWLEDGE AND AGREE THAT YOU HAVE NOT RELIED UPON ANY OTHER STATEMENT OR UNDERSTANDING, WHETHER WRITTEN OR ORAL, WITH RESPECT TO YOUR USE AND/OR ACCESS OF THE PLATFORM OR THE SERVICES. YOUR USE OF THE SERVICES IS AT YOUR OWN RISK AND DISCRETION. #### 16.1. Specific Disclaimers for User-Initiated Errors and Blockchain Risks WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, NARA IS NOT RESPONSIBLE OR LIABLE FOR ANY LOSSES, DAMAGES, OR CLAIMS ARISING FROM: (A) USER ERRORS, INCLUDING FORGOTTEN PASSWORDS, LOST PRIVATE KEYS, INCORRECTLY CONSTRUCTED TRANSACTIONS, OR MISTYPED WALLET ADDRESSES; (B) SERVER OR NETWORK FAILURES, DATA LOSS, OR CORRUPTED FILES; (C) UNAUTHORIZED ACCESS TO YOUR WALLET OR ACCOUNT; OR (D) ACTIONS OF THIRD PARTIES, INCLUDING VIRUSES, PHISHING, BRUTE-FORCE ATTACKS, OR OTHER MALICIOUS ACTIVITY AFFECTING BLOCKCHAIN NETWORKS OR THE PLATFORM. ### 17. LIMITATION OF LIABILITY #### 17.1. Exclusion of Consequential Damages TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ANY OF THE INDEMNIFIED PERSONS BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, CONSEQUENTIAL OR SIMILAR DAMAGES OR LIABILITIES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF DATA, INFORMATION, REVENUE, PROFITS OR OTHER BUSINESSES OR FINANCIAL BENEFITS) ARISING OUT OF OR IN CONNECTION WITH THE SERVICES, ANY PERFORMANCE OR NON-PERFORMANCE OF THE SERVICES, OR ANY OTHER PRODUCT, SERVICE OR OTHER ITEM PROVIDED BY OR ON BEHALF OF NARA, WHETHER UNDER CONTRACT, STATUTE, STRICT LIABILITY OR OTHER THEORY EVEN IF NARA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. #### 17.2. Liability Cap TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE TOTAL AGGREGATE LIABILITY OF THE INDEMNIFIED PERSONS ARISING OUT OF OR IN CONNECTION WITH THE SERVICES, ANY PERFORMANCE OR NON-PERFORMANCE OF THE SERVICES, OR ANY OTHER PRODUCT, SERVICE OR OTHER ITEM PROVIDED BY OR ON BEHALF OF NARA, WHETHER UNDER CONTRACT, STATUTE, STRICT LIABILITY OR OTHER THEORY, SHALL NOT EXCEED THE GREATER OF (A) ONE HUNDRED U.S. DOLLARS ($100.00) OR (B) THE TOTAL FEES PAID BY YOU TO NARA IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM FOR LIABILITY. YOU ACKNOWLEDGE AND ACCEPT THAT DAMAGES ARE AN ADEQUATE REMEDY AND THAT YOU SHALL NOT BE ENTITLED TO ANY OTHER CLAIMS OR REMEDIES AT LAW OR IN EQUITY, INCLUDING ANY CLAIM IN REM, INJUNCTION, AND/OR SPECIFIC PERFORMANCE. #### 17.3. Basis of the Bargain You acknowledge that the limitations of liability in this Section 17 are a fundamental basis of the bargain and that Nara would not provide the Services without such limitations. ### 18. INDEMNIFICATION 18.1 Obligation to Indemnify To the fullest extent permitted by Applicable Laws, you agree to fully indemnify, defend, and hold completely harmless the Indemnified Persons from and against any and all claims, actions, proceedings, investigations, demands, suits, costs, charges, expenses, damages (including reasonable attorneys' fees and disbursements, expert witness fees, court costs, and fines or penalties imposed by any regulatory authority or governmental body), losses, and liabilities of any kind whatsoever, whether direct or indirect, which any of the Indemnified Persons may incur, suffer, or which may be made or brought against them, as a result of, in relation to, in connection with, or arising out of: (a) your access to, use of, or conduct in connection with, the Services, the Platform, the Website, or your Account; (b) your breach or alleged breach of any representation, warranty, covenant, agreement, or undertaking made by you under these Terms, or Nara's enforcement of these Terms or exercise of any rights or remedies under these Terms; (c) your violation or alleged violation of any Applicable Laws, regulations, or the rights of any third party, including but not limited to intellectual property rights, privacy rights, or publicity rights; (d) your violation of the rights of any other Person or entity, including but not limited to any other User; (e) any act, omission, negligence, breach, offence, default, or misconduct committed or attributable to you or any person acting on your behalf; (f) your gross negligence, fraud, willful misconduct, or criminal conduct; (g) any sum or obligation expressed to be payable or required to be performed under these Terms not being paid or performed by you by the time, on the date, and otherwise in the manner specified in these Terms; (h) any inaccurate, incomplete, or misleading information, documentation, or materials provided by you to Nara or any Indemnified Person; (i) any unauthorized use of your Account or Account Credentials, whether or not such unauthorized use was authorized by you; and/or (j) any circumstances beyond Nara's reasonable control, including but not limited to any Force Majeure Event, third-party service provider failure, Blockchain network failure, or Smart Contract vulnerability. (k) any dispute between you any other third-party service provider engaged by Nara. 18.2 Control of Defense If you are obligated to indemnify any of the Indemnified Persons pursuant to this Section 18, Nara shall have the right, in its sole and absolute discretion, to assume control of the defense, settlement, or other disposition of any claim, action, proceeding, or investigation subject to indemnification. In such event, you agree to cooperate fully with Nara in the defense or settlement of such claim, and you shall not settle any such matter without Nara's prior written consent. The obligations set forth in this Section 18 shall survive the termination or expiration of these Terms and your use of the Services. 18.3 Indemnification at the User’s Expense You acknowledge and agree that any defense, settlement, or other disposition of any claim, action, proceeding, or investigation subject to indemnification under this Section 18 shall be conducted at your sole cost and expense. You shall reimburse Nara and the other Indemnified Persons promptly upon demand for all costs, charges, and expenses (including reasonable attorneys' fees and disbursements) incurred by them in connection with any such claim, action, proceeding, or investigation. ### 19. RIGHT OF SET-OFF #### 19.1. Nara's Right to Set-Off Subject to Applicable Laws, Nara and its affiliates shall have the right, at any time and from time to time, without prior notice to you (any such notice being expressly waived by you to the fullest extent permitted by Applicable Laws), to set off, combine, appropriate, and apply any and all amounts, Digital Assets, or other property of any kind whatsoever held by Nara or any of its affiliates for your benefit against any and all obligations or liabilities that you owe to Nara or any of its affiliates, whether such obligations are present or future, actual or contingent, matured or unmatured, liquidated or unliquidated. #### 19.2. User Waiver of Set-Off Rights You hereby irrevocably and unconditionally waive, to the fullest extent permitted by Applicable Laws, any right of set-off, counterclaim, or similar right that you may have against Nara or any of its affiliates. You agree to pay all amounts owed to Nara in full without any set-off, counterclaim, deduction, or withholding of any kind. #### 19.3. Cumulative Rights The rights granted to Nara under this Section 19 are cumulative and in addition to, and not in substitution for, any other rights or remedies that Nara may have under these Terms, at law, or in equity. The rights and obligations set forth in this Section 19 shall survive the termination or expiration of these Terms. ### 20. INTELLECTUAL PROPERTY #### 20.1. Ownership and License All intellectual property rights in and to the Website, the Platform, the Services, and all related software, content, and materials ("IP") are owned by or licensed to Nara. You are granted a limited, non-exclusive, non-sublicensable, and non-transferable license to access and use the Services for your personal or internal business use only. #### 20.2. Restrictions You agree not to copy, modify, reverse engineer, create derivative works from, or otherwise attempt to extract the source code of our IP. All rights not expressly granted to you are reserved by Nara. #### 20.3. Feedback If you provide any feedback, suggestions, or ideas regarding the Services ("Feedback"), you hereby grant Nara a perpetual, irrevocable, worldwide, royalty-free, and non-exclusive license to use, copy, modify, and distribute such Feedback for any purpose. ### 21. DISPUTE RESOLUTION AND MANDATORY ARBITRATION #### 21.1. Important Notice PLEASE READ THIS SECTION CAREFULLY, AS IT INVOLVES A WAIVER OF CERTAIN RIGHTS TO BRING LEGAL PROCEEDINGS, INCLUDING AS A CLASS ACTION. #### 21.2. Binding Arbitration Any dispute, controversy, difference, or claim arising out of or relating to these Terms, including the existence, validity, interpretation, performance, breach, or termination thereof, or any dispute regarding non-contractual obligations arising out of or relating to it, shall be referred to and finally resolved by international arbitration administered by the Conciliation and Arbitration Center of the Chamber of Commerce, Industries and Agriculture of Panama ("CeCAP") in accordance with its Rules of Procedure for International Commercial Arbitration in force at the time the Notice of Arbitration is submitted. #### 21.3. Arbitration Procedures The law of this arbitration clause shall be the laws of the Republic of Panama. The arbitration shall be conducted in accordance with Law No. 131 of 2013 regulating national and international commercial arbitration in Panama. The seat, or legal place, of arbitration shall be Panama City, Republic of Panama. The number of arbitrators shall be one. The arbitration proceedings shall be conducted in English. #### 21.4. Class Action Waiver You agree that any arbitration shall be conducted in your individual capacity only and not as a class action or other representative action, and you expressly waive your right to file a class action or seek relief on a class basis. ### 22. THIRD-PARTY SERVICE PROVIDERS AND ADMINISTRATIVE AGENT #### 22.1. Third-Party Service Providers We may engage third-party service providers to support the Platform and Services. These third parties are not under our control, and we make no claims or representations about, and accept no liability for, any services they provide. We are not responsible for the accuracy or reliability of any information, data, opinions, advice, or statements, nor for the services offered by these third parties. You agree that we shall not be responsible for any contract you enter into, any transaction you complete, or any dispute that arises between you and such third-party service providers. We assume no responsibility for, and specifically disclaim any liability, warranty, or obligation with respect to any content or services provided by these third parties. You should review the terms of use and legal agreements that apply to any third-party services. #### 22.2. Administrative Agent for the Reserves (a) Appointment. You acknowledge that Nara may appoint a third-party administrative agent to provide ongoing monitoring and administrative services in connection with the Reserves, in whole or in part. In the event of a Default Event, such independent third-party administrative agent is further authorized to act on Nara's behalf to manage the Reserves in an orderly manner. (b) Relationship to Users. You understand and agree that any such administrative agent acts solely as the administrative agent for Nara and not for any User. The administrative agent's duties in no way constitute or imply a partnership with the User or Nara. You have no direct agency, fiduciary, or contractual relationship with the administrative agent, and you have no right to instruct the administrative agent or bring any claim against them in connection with their role. (c) User's Recourse. Your rights and remedies in connection with the Reserves, including in a Default Event, are solely against Nara as set forth in these Terms. The appointment of an administrative agent does not alter the fact that your relationship is with Nara and your rights are limited to the contractual redemption rights specified herein. ### 23. POTENTIAL CONFLICTS OF INTEREST You acknowledge that situations may arise where Nara, its affiliates, or their respective directors, officers, employees, or agents may have a financial or other interest that conflicts with your interests. These may include, but are not limited to, situations where: (a) We or our affiliates may be involved in transactions for our own accounts or for the accounts of other clients that are identical or similar to the transactions you enter into. (b) We or our affiliates may have a financial interest in the assets held in the Reserves. (c) We or our affiliates may provide services to other clients whose interests may be in conflict with yours. We will take reasonable steps to identify and manage any conflicts of interest that may arise. However, you acknowledge that it may not be possible to eliminate all conflicts of interest. By using the Services, you agree that we may act in the manner described above and that you will not hold us liable for any loss you may suffer as a result of any such conflict of interest. ### 24. TAXES It is your sole responsibility to determine what, if any, taxes apply to the payments you make or receive, and to collect, report, and remit the correct tax to the appropriate tax authority. All payments and transactions made and entered into on our Platform must be free and clear of, and without any deduction or withholding for and on account of, any taxes, duties or other deductions. We are not responsible for determining whether taxes apply to your transactions, or for collecting, reporting, or remitting any taxes arising from any transaction. However, if any Applicable Law requires us to make any tax payments or duties on your behalf, we reserve the right to withhold in part or in full or claim such payments (including any other administrative charges incurred in respect of such payments) against you on a full indemnity basis. ### 25. ELECTRONIC NOTICES You consent to receive electronically all communications, agreements, documents, notices, and disclosures (collectively, "Communications") that we provide in connection with your Account and your use of the Services. We will provide these Communications to you by posting them on the Website, emailing them to you at the primary email address you provided, or through other electronic communication such as mobile push notifications. An electronic Communication is considered to be received by you within 24 hours after the time we post it to our Website or email it to you. You agree that all agreements, disclosures, and notices provided electronically satisfy any legal requirements for written communications, and you waive any rights to require paper originals or wet-ink signatures, to the extent permitted by applicable law. ### 26. FORCE MAJEURE None of the Indemnified Persons shall be liable for any delay, error, interruption, or failure to perform any obligation under these Terms where such delay or failure is caused by a Force Majeure Event. ### 27. MISCELLANEOUS #### 27.1. Entire Agreement These Terms, together with the Privacy Policy, Risk Disclosure Statement, and any additional terms and policies referenced herein, constitute the entire agreement between you and Nara with respect to your use of the Services and the Platform. These Terms supersede any and all prior agreements, understandings, representations, or arrangements between the parties, whether written or oral, relating to the subject matter hereof. #### 27.2. Amendments Nara reserves the right, at its sole and absolute discretion, to amend, supplement, or replace any part of these Terms at any time. We will endeavor to provide you with notice of any material changes by updating the revised Terms via the Website or the Platform and changing the "Last Updated" date at the beginning of these Terms, or by notifying you directly via email or other communication methods. Any changes to these Terms will be effective immediately upon the earlier of: (i) the time of publication on the Website or Platform, or (ii) the time of transmission of direct notification to you. Your continued use of the Services following any such amendment constitutes your acceptance of the revised Terms. If you do not agree to any changes, you must immediately cease using the Services and may terminate your Account in accordance with these Terms. #### 27.3. Severability If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court or tribunal of competent jurisdiction, such provision shall be deemed modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its original intent. If such modification is not possible, the invalid, illegal, or unenforceable provision shall be severed from these Terms. In either case, the remaining provisions of these Terms shall remain in full force and effect and shall not be affected by the invalid, illegal, or unenforceable provision or by its severance. #### 27.4. Assignment You may not assign, novate, transfer, delegate, or otherwise dispose of any of your rights, interests, liabilities, or obligations under these Terms, whether voluntarily or by operation of law, without the prior written consent of Nara, and any attempted assignment without such consent shall be null and void. However, you hereby acknowledge and agree that Nara shall have the sole and absolute discretion to assign, novate, transfer, or otherwise dispose of these Terms or any of its rights, interests, liabilities, or obligations hereunder to any Person without your consent. #### 27.5. No Waiver No failure or delay by Nara to exercise any right, power, or remedy under these Terms shall operate as a waiver thereof, nor shall any single or partial exercise of any right, power, or remedy preclude any other or further exercise thereof or the exercise of any other right, power, or remedy. The rights and remedies provided in these Terms are cumulative and not exclusive of any rights or remedies provided by law. #### 27.6. Third-Party Rights Unless expressly provided to the contrary in these Terms, a person who is not a party to these Terms has no rights to enforce or to enjoy the benefit of any term of these Terms. Notwithstanding any term of these Terms, the consent of any person who is not a party to these Terms is not required to rescind or vary these Terms at any time. #### 27.7. Survival All provisions of these Terms which by their nature extend beyond the expiration or termination of these Terms, including, without limitation, sections relating to suspension or termination, Account cancellation, debts owed to Nara, general use of the Platform, disputes with Nara, and general provisions, shall survive the termination or expiration of these Terms. #### 27.8 Communications By entering into these Terms, you agree to receive electronic communications and notifications in English. These Terms are provided to you and communicated in English. We will also communicate with you in English for all matters related to NaraUSD and NaraUSD+ and your use of the Services. Where we have provided you with a translation of the English language version of these Terms, you agree that such translation is provided for your convenience only and that the English language version of these Terms govern your holding and use of NaraUSD and NaraUSD+, and the Services, as applicable. #### 27.9. Governing Law These Terms shall be governed by and construed in accordance with the laws of the Republic of Panama. Subject to Section 21, the courts of Panama City, Republic of Panama shall have exclusive jurisdiction to settle any dispute or claim that arises out of or in connection with these Terms. END OF TERMS
# Privacy Policy Last Updated: 23 June 2025 Effective Date: 23 June 2025 1. **Introduction** This Privacy Policy describes how Nara ("we," "us," "our," or "Company") collects, uses, processes, and protects your personal information when you visit our website, use our services, or interact with us in any capacity. This policy applies to all users of our website and services, regardless of location. We are committed to protecting your privacy and ensuring transparency in our data processing activities. This Privacy Policy explains your rights regarding your personal information and how you can exercise those rights. Who We Are: Nara is an institutional platform and omnichain designed for tokenized real world assets What This Policy Covers: This Privacy Policy applies to: • Our website at • Any mobile applications we may offer • Any other services or platforms that link to this Privacy Policy Legal Basis for Processing: We process your personal information based on various legal grounds, including: • Your consent • Performance of a contract with you • Compliance with legal obligations • Our legitimate business interests • Protection of vital interests **Definitions**: • Personal Information/Personal Data: Any information that identifies, relates to, describes, or is capable of being associated with a particular individual • Processing: Any operation performed on personal data, including collection, use, storage, disclosure, or deletion • Data Subject: An individual whose personal data is processed • Data Controller: The entity that determines the purposes and means of processing personal data • Third Party: Any individual or entity other than you and us 2. **Information We Collect** We collect various types of information to provide and improve our services. The information we collect falls into the following categories: 2.1 Information You Provide Directly Account Information: When you create an account with us, we collect: • Full name • Email address • Username and password • Phone number (if provided) • Profile information and preferences Contact Information: When you contact us or subscribe to our communications: • Name and email address • Phone number • Address • Message content and communication preferences • Any additional information you choose to provide Transaction Information: When you make purchases or engage in financial transactions: • Billing and shipping addresses • Payment method information (processed securely through third-party payment processors) • Transaction history and purchase details • Tax identification information (where required) User-Generated Content: Information you provide when using our services: • Comments, reviews, and feedback • Photos, videos, or other media you upload • Survey responses and form submissions • Any other content you choose to share 2.2 Information We Collect Automatically Device and Technical Information: • IP address and approximate geographic location • Device type, operating system, and browser information • Screen resolution and device identifiers • Network connection information • Referring website or application Usage Information: • Pages visited and time spent on our website • Features used and actions taken • Search queries and results • Click-through rates and user interactions • Session duration and frequency of visits Cookies and Tracking Data: • Browser cookies and similar tracking technologies • Web beacons and pixel tags • Local storage and session storage data • Analytics and performance data 2.3 Information from Third Parties Social Media Integration: If you connect your social media accounts: • Profile information from connected social platforms • Friends lists and social connections (with your permission) • Content you choose to share from social media Business Partners and Service Providers: • Information from our authorized partners and vendors • Data from marketing and advertising partners • Information from customer service and support providers • Verification data from identity verification services Publicly Available Sources: • Information from public databases and records • Publicly available social media profiles • Business directories and professional networks 2.4 Sensitive Personal Information We may collect certain categories of sensitive personal information, which receive additional protections under applicable privacy laws: Financial Information: • Bank account details (for payment processing) • Credit card information (processed through secure third-party processors) • Financial transaction history Biometric Data: • Facial recognition data (only if you opt-in to such features) • Fingerprint data (for device authentication, if applicable) Location Data: • Precise geolocation information (only with your explicit consent) • General location based on IP address Health and Demographic Information: • Health-related information (only if relevant to our services and with your consent) • Racial or ethnic origin (only if voluntarily provided and legally permissible) • Religious or philosophical beliefs (only if voluntarily provided) Note on Sensitive Information: We only collect sensitive personal information when necessary for specific services and with your explicit consent. You have the right to withdraw this consent at any time, though this may limit certain features or services. 2.5 Children's Information We do not knowingly collect personal information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction) without verifiable parental consent. If we become aware that we have collected personal information from a child without proper consent, we will take steps to delete such information promptly. 2.6 How We Collect Information Direct Collection Methods: • Website forms and account registration • Email communications and newsletters • Customer service interactions • Surveys and feedback forms • Event registrations and webinars Automatic Collection Methods: • Cookies and similar tracking technologies • Web analytics tools and services • Server logs and access records • Mobile app analytics (if applicable) Third-Party Collection Methods: • Social media platforms and integrations • Marketing and advertising partners • Data brokers and public record providers • Business partners and affiliates 3. **How We Use Your Information** We use the personal information we collect for various legitimate business purposes. The specific purposes depend on how you interact with our services and the legal basis for processing. 3.1 Primary Business Operations Service Provision and Account Management: • Creating and managing your account • Providing access to our services and features •Processing transactions and fulfilling orders • Delivering customer support and technical assistance • Maintaining and improving service functionality • Personalizing your user experience Communication and Customer Relations: • Responding to your inquiries and requests • Sending service-related notifications and updates • Providing customer support and technical assistance • Conducting customer satisfaction surveys • Managing your communication preferences Legal and Compliance Obligations: • Complying with applicable laws and regulations • Responding to legal requests and court orders • Preventing fraud and ensuring platform security • Conducting internal audits and investigations • Maintaining records as required by law 3.2 Marketing and Business Development Marketing Communications (with your consent where required): • Sending promotional emails and newsletters • Providing information about new products and services • Sharing relevant offers and discounts • Conducting market research and analysis • Personalizing marketing content and recommendations Analytics and Business Intelligence: • Analyzing user behavior and service usage patterns • Conducting market research and competitive analysis • Improving our products and services • Developing new features and offerings • Measuring the effectiveness of our marketing campaigns Advertising and Promotion: • Displaying relevant advertisements on our platform • Partnering with third-party advertising networks •Creating custom audiences for targeted advertising •Measuring advertising performance and effectiveness •Retargeting users who have visited our website 3.3 Technical Operations and Security Platform Security and Fraud Prevention: • Detecting and preventing fraudulent activities • Monitoring for security threats and vulnerabilities • Implementing access controls and authentication measures • Conducting security audits and assessments • Protecting against unauthorized access and data breaches Technical Maintenance and Improvement: • Maintaining and optimizing our website and services • Troubleshooting technical issues and bugs • Conducting system updates and maintenance • Monitoring service performance and uptime • Implementing new features and functionality Data Analytics and Research: • Analyzing usage patterns and user behavior • Conducting A/B testing and experimentation • Generating insights for business decision-making • Improving user experience and interface design •Developing predictive models and algorithms 3.4 Legal Basis for Processing (GDPR Compliance) Under the General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds: Consent: When you have given clear and specific consent for processing, such as: • Marketing communications • Optional features requiring personal data • Cookies and tracking technologies (where required) • Sensitive personal information processing Contract Performance: When processing is necessary for: • Providing services you have requested • Fulfilling purchase orders and transactions • Managing your account and user profile • Delivering customer support Legitimate Interests: When we have legitimate business interests that are not overridden by your privacy rights: • Improving our services and user experience • Conducting business analytics and research • Preventing fraud and ensuring security • Direct marketing to existing customers (where legally permitted) Legal Obligation: When we must process data to comply with legal requirements: • Tax and accounting obligations • Regulatory compliance requirements • Responding to legal requests and court orders • Data breach notification requirements Vital Interests: In rare cases where processing is necessary to protect life or physical safety: • Emergency situations requiring immediate action • Protecting individuals from harm or danger 3.5 Automated Decision-Making and Profiling We may use automated systems to make decisions about you or create profiles based on your personal information. This includes: Automated Decisions: • Credit scoring and risk assessment (if applicable) • Fraud detection and prevention systems • Content recommendation algorithms • Pricing and promotional offer determination Profiling Activities: • Creating user preference profiles for personalization • Segmenting users for targeted marketing • Analyzing behavior patterns for service improvement • Generating insights for business intelligence Your Rights Regarding Automated Processing: • You have the right to request human review of automated decisions • You can object to profiling for direct marketing purposes • You may request information about the logic involved in automated decision-making • You can challenge decisions that significantly affect you 3.6 Data Minimization and Purpose Limitation We adhere to the principles of data minimization and purpose limitation: Data Minimization: We only collect and process personal information that is: • Necessary for the specified purposes • Relevant to our business operations • Adequate but not excessive for the intended use Purpose Limitation: We use personal information only for: • The purposes disclosed in this Privacy Policy • Compatible purposes that are reasonably expected • Purposes for which you have provided additional consent • Legal obligations and legitimate interests as described above Retention Alignment: We retain personal information only as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. 4. **Information Sharing and Disclosure** We may share your personal information with third parties under specific circumstances and with appropriate safeguards. We do not sell your personal information to third parties for monetary consideration, but we may share it as described below. 4.1 Service Providers and Business Partners Essential Service Providers:\ We share personal information with trusted third-party service providers who assist us in operating our business: • Payment Processors: To process transactions and handle billing (e.g., Stripe, PayPal, Square) • Cloud Storage Providers: To store and manage data securely (e.g., Amazon Web Services, Google Cloud, Microsoft Azure) • Email Service Providers: To send communications and newsletters (e.g., Mailchimp, SendGrid, Constant Contact) • Customer Support Platforms: To provide customer service and technical support (e.g., Zendesk, Intercom, Freshdesk) • Analytics Providers: To analyze website usage and user behavior (e.g., Google Analytics, Adobe Analytics, Mixpanel) Marketing and Advertising Partners: • Advertising Networks: To display relevant advertisements (e.g., Google Ads, Facebook Ads, LinkedIn Ads) • Marketing Automation Platforms: To manage marketing campaigns and lead generation • Social Media Platforms: When you interact with our social media integrations • Affiliate Partners: To track referrals and manage partnership programs Professional Service Providers: • Legal Counsel: For legal advice and representation • Accounting and Tax Services: For financial reporting and tax compliance • Auditing Firms: For compliance and security audits • Consulting Services: For business strategy and technical consulting 4.2 Business Transactions Mergers and Acquisitions:\ In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will: • Provide notice of any such transaction • Ensure the acquiring entity honors this Privacy Policy • Give you the opportunity to opt-out if the new entity's practices differ significantly Due Diligence:\ We may share personal information with potential buyers, investors, or partners during due diligence processes, subject to appropriate confidentiality agreements. 4.3 Legal and Regulatory Requirements Legal Compliance:\ We may disclose personal information when required by law or in response to: • Subpoenas, court orders, or legal process • Government investigations or regulatory inquiries • Tax authorities and financial regulators • Law enforcement requests with proper legal authority Protection of Rights and Safety:\ We may share personal information to: • Protect our legal rights and interests • Enforce our terms of service and policies • Prevent fraud, abuse, or illegal activities • Protect the safety and security of our users and the public • Investigate potential violations of our terms 4.4 Consent-Based Sharing With Your Explicit Consent:\ We may share personal information with third parties when you have provided specific consent, such as: • Integrating with third-party applications or services • Participating in joint marketing campaigns • Sharing information with business partners for specific purposes • Publishing testimonials or case studies (with your permission) Social Media Sharing:\ When you choose to share content on social media platforms or connect your social media accounts, information may be shared according to your social media privacy settings and the platform's terms of service. 4.5 Categories of Third Parties The following table outlines the categories of third parties with whom we may share personal information:
CategoryPurposeTypes of Information SharedSafeguards
Payment ProcessorsTransaction processingBilling information, payment detailsPCI DSS compliance, encryption
Cloud Service ProvidersData storage and hostingAll categories as neededData processing agreements, encryption
Marketing PartnersAdvertising and promotionContact information, usage dataLimited use agreements, opt-out options
Analytics ProvidersUsage analysisAggregated and anonymized dataData minimization, anonymization
Customer SupportService assistanceAccount and communication dataAccess controls, confidentiality agreements
Legal and ComplianceRegulatory requirementsAs required by lawLegal privilege, minimal disclosure
4.6 International Transfers Cross-Border Data Transfers:\ Some of our service providers and partners are located outside your country of residence. When we transfer personal information internationally, we ensure appropriate safeguards are in place: For EU/EEA Residents: • Adequacy Decisions: Transfers to countries with adequate protection as determined by the European Commission • Standard Contractual Clauses: EU-approved contractual terms for international transfers • Binding Corporate Rules: Internal policies for multinational organizations • Certification Schemes: Participation in approved certification programs For Other Jurisdictions: • Contractual protections requiring equivalent privacy standards • Compliance with applicable cross-border transfer regulations • Regular monitoring and auditing of international partners 4.7 Data Sharing Limitations Restrictions on Third-Party Use:\ When we share personal information with third parties, we: • Limit the use to specified purposes only • Require contractual commitments to protect the data • Prohibit further sharing without authorization • Mandate deletion when the purpose is fulfilled • Conduct regular audits and compliance checks No Sale of Personal Information:\ We do not sell personal information for monetary consideration. However, under some privacy laws (such as the CCPA), certain data sharing activities may be considered "sales." If you are a California resident, you have the right to opt-out of such sharing. 4.8 Aggregate and De-identified Information We may share aggregate, de-identified, or anonymized information that cannot reasonably be used to identify you. This includes: • Statistical information about user demographics • Aggregated usage patterns and trends • Market research and industry reports • Benchmarking and comparative analysis Such information is not considered personal information and is not subject to the restrictions in this Privacy Policy. 5. **Data Retention** We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention practices are designed to balance your privacy rights with our legitimate business needs. 5.1 General Retention Principles Purpose-Based Retention:\ We retain personal information based on the specific purpose for which it was collected: • Account Information: Retained while your account is active and for a reasonable period after account closure • Transaction Records: Retained for the period required by applicable financial and tax regulations • Communication Records: Retained for customer service purposes and legal compliance • Marketing Data: Retained until you opt-out or withdraw consent Legal and Regulatory Requirements:\ Certain information must be retained to comply with legal obligations: • Financial Records: 7 years for tax and accounting purposes (may vary by jurisdiction) • Employment Records: As required by labor laws and regulations • Health Information: As mandated by healthcare regulations (if applicable) • Legal Documents: For the duration of any legal proceedings plus applicable statute of limitations 5.2 Specific Retention Periods Account and Profile Information: • Active Accounts: Retained while account remains active • Inactive Accounts: Deleted after 3 years of inactivity (with prior notice) • Closed Accounts: Most data deleted within 30 days, some records retained for legal compliance Transaction and Financial Data: • Purchase History: Retained for 7 years for tax and warranty purposes • Payment Information: Credit card data deleted immediately after processing; transaction records retained per legal requirements • Billing Records: Retained for 7 years or as required by applicable law • Refund and Dispute Records: Retained for 3 years after resolution Communication and Support Data: • Customer Service Records: Retained for 3 years for quality assurance and training • Email Communications: Retained until you unsubscribe or for 2 years, whichever is sooner • Chat and Phone Records: Retained for 1 year for service improvement • Feedback and Surveys: Retained for 2 years or until purpose is fulfilled Technical and Usage Data: • Server Logs: Retained for 90 days for security and troubleshooting • Analytics Data: Aggregated data retained indefinitely; individual data for 26 months • Cookie Data: Varies by cookie type (session cookies deleted when browser closes; persistent cookies per their expiration dates) • Device Information: Retained for 2 years or until device is no longer used 5.3 Automated Deletion Processes Scheduled Deletion:\ We have implemented automated systems to delete personal information when retention periods expire: • Daily Processes: Remove expired session data and temporary files • Monthly Reviews: Delete inactive user accounts and expired marketing data • Annual Audits: Comprehensive review of all retained data for compliance Data Minimization:\ We regularly review and minimize the personal information we retain: • Quarterly Assessments: Evaluate necessity of retained data categories • Annual Policy Reviews: Update retention schedules based on business needs and legal changes •Continuous Monitoring: Automated alerts for data approaching retention limits 5.4 Extended Retention Circumstances Legal Holds:\ We may retain personal information beyond normal retention periods when: • Litigation: Data relevant to ongoing or anticipated legal proceedings • Regulatory Investigations: Information subject to government inquiries • Compliance Audits: Data required for regulatory compliance reviews • Dispute Resolution: Information necessary for resolving customer or business disputes Business Continuity:\ Certain information may be retained longer for legitimate business purposes: • Fraud Prevention: Data necessary to prevent future fraudulent activities • Security Incidents: Information related to security breaches or investigations • Product Liability: Data relevant to product safety and liability issues • Intellectual Property: Information necessary to protect our intellectual property rights 5.5 Data Deletion and Destruction Secure Deletion Methods:\ When personal information reaches the end of its retention period, we ensure secure deletion: • Electronic Data: Cryptographic erasure and overwriting of storage media • Physical Documents: Secure shredding and destruction by certified vendors • Backup Systems: Removal from all backup and archival systems • Third-Party Systems: Coordination with service providers to ensure complete deletion Verification and Documentation:\ We maintain records of data deletion activities: • Deletion Logs: Automated records of when and what data was deleted • Audit Trails: Documentation of deletion processes and verification • Compliance Reports: Regular reporting on retention and deletion activities • Third-Party Confirmations: Certificates of destruction from service providers 5.6 User-Initiated Deletion Account Deletion:\ You can request deletion of your account and associated personal information: • Self-Service Options: Account deletion tools in your user dashboard • Customer Support: Assistance with account closure and data deletion • Verification Process: Identity verification required for security purposes • Confirmation: Written confirmation of account and data deletion Selective Data Deletion:\ You may request deletion of specific categories of personal information: • Marketing Data: Opt-out of marketing communications and delete related data • Optional Information: Remove non-essential profile information • Historical Data: Delete old transaction or communication records (subject to legal requirements) • Third-Party Integrations: Disconnect and delete data from linked services 5.7 Exceptions to Deletion Legal and Regulatory Exceptions:\ We may be unable to delete certain information due to: • Legal Obligations: Requirements to retain records for tax, employment, or regulatory purposes • Ongoing Investigations: Data subject to legal holds or regulatory inquiries • Dispute Resolution: Information necessary for resolving ongoing disputes • Safety and Security: Data required to prevent fraud or protect user safety Technical Limitations:\ Some data may persist due to technical constraints: • Backup Systems: Data in backup systems may take additional time to remove • Cached Data: Temporary copies in content delivery networks or caches • Aggregated Data: Information that has been aggregated or anonymized • System Logs: Technical logs that may contain references to deleted data 5.8 Retention Schedule Updates Regular Reviews:\ We regularly review and update our retention schedules: • Annual Policy Review: Comprehensive evaluation of all retention periods • Legal Updates: Adjustments based on changes in applicable laws • Business Changes: Modifications based on evolving business needs • Technology Updates: Improvements to deletion and retention systems Notification of Changes:\ We will notify you of significant changes to our retention practices: • Privacy Policy Updates: Changes reflected in updated privacy policy • Direct Communication: Email notification for material changes affecting your data • Website Notices: Prominent notices on our website for policy updates • Opt-Out Opportunities: Options to object to extended retention periods where legally permissible 6. **Data Security** We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices are designed to meet or exceed industry standards and comply with applicable data protection regulations. 6.1 Technical Security Measures Encryption and Data Protection: • Data in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 or higher encryption protocols • Data at Rest: Personal information stored in our databases is encrypted using AES-256 encryption or equivalent standards • Key Management: Encryption keys are managed through secure key management systems with regular rotation • Database Security: Multi-layer database security including encryption, access controls, and activity monitoring Network and Infrastructure Security: • Firewalls: Advanced firewall systems to prevent unauthorized network access • Intrusion Detection: Real-time monitoring systems to detect and respond to security threats • DDoS Protection: Distributed denial-of-service attack protection and mitigation • Secure Hosting: Infrastructure hosted with reputable cloud providers meeting SOC 2 Type II standards Application Security: • Secure Development: Security-by-design principles in all software development • Regular Testing: Automated and manual security testing including penetration testing • Vulnerability Management: Regular scanning and patching of security vulnerabilities • Code Reviews: Security-focused code reviews and static analysis 6.2 Administrative Security Controls Access Management: • Principle of Least Privilege: Employees and systems have access only to data necessary for their role • Multi-Factor Authentication: Required for all administrative access to systems containing personal information • Regular Access Reviews: Quarterly reviews of user access rights and permissions • Immediate Revocation: Prompt removal of access when employees leave or change roles Employee Security Training: • Privacy and Security Training: Mandatory training for all employees handling personal information • Regular Updates: Ongoing education about emerging threats and security best practices • Incident Response Training: Specialized training for security incident response team members • Confidentiality Agreements: All employees sign confidentiality and data protection agreements Vendor and Third-Party Management: • Due Diligence: Security assessments of all third-party service providers • Contractual Requirements: Data processing agreements with security and privacy requirements • Regular Audits: Periodic security audits of key vendors and partners • Incident Coordination: Coordinated incident response procedures with third parties 6.3 Physical Security Measures Data Center Security: • Controlled Access: Biometric access controls and 24/7 security monitoring • Environmental Controls: Climate control, fire suppression, and power backup systems • Equipment Security: Secure disposal and destruction of hardware containing data • Visitor Management: Strict visitor access controls and escort requirements Office Security: • Secure Workspaces: Locked offices and secure storage for sensitive documents • Clean Desk Policy: Requirements to secure or remove sensitive information from workspaces • Device Security: Encryption and remote wipe capabilities for mobile devices and laptops • Disposal Procedures: Secure destruction of physical documents and electronic media 6.4 Monitoring and Detection Security Monitoring: • 24/7 Monitoring: Continuous monitoring of systems and networks for security threats • Log Analysis: Automated analysis of security logs and audit trails • Anomaly Detection: Machine learning-based detection of unusual access patterns or activities • Threat Intelligence: Integration with external threat intelligence sources Incident Detection and Response: • Automated Alerts: Real-time alerts for potential security incidents • Response Team: Dedicated security incident response team available 24/7 • Escalation Procedures: Clear escalation paths for different types of security incidents • Forensic Capabilities: Digital forensics capabilities for incident investigation 6.5 Data Backup and Recovery Backup Procedures: • Regular Backups: Automated daily backups of all critical data and systems • Encrypted Storage: All backup data encrypted using industry-standard encryption • Geographic Distribution: Backups stored in multiple geographic locations for redundancy • Retention Management: Backup retention policies aligned with data retention requirements Disaster Recovery: • Recovery Plans: Comprehensive disaster recovery and business continuity plans • Regular Testing: Quarterly testing of backup and recovery procedures • Recovery Time Objectives: Defined targets for system and data recovery times • Communication Plans: Clear communication procedures during recovery operations 6.6 Privacy by Design Data Minimization: • Collection Limits: Systems designed to collect only necessary personal information • Purpose Limitation: Technical controls to prevent use of data beyond stated purposes • Automated Deletion: Systems automatically delete data when retention periods expire • Anonymization: Automatic anonymization of data where possible for analytics and research Privacy Controls: • Consent Management: Technical systems to manage and track user consent • Access Controls: Granular controls over who can access different categories of personal information • Audit Trails: Comprehensive logging of all access to and processing of personal information • Data Subject Rights: Automated systems to facilitate exercise of privacy rights 6.7 Security Incident Response Incident Response Plan: • Immediate Response: Procedures for immediate containment and assessment of security incidents • Investigation Process: Systematic investigation and documentation of security incidents • Notification Procedures: Clear procedures for notifying affected individuals and regulatory authorities • Remediation Steps: Comprehensive remediation and recovery procedures Breach Notification: • Rapid Assessment: Immediate assessment of potential data breaches within 24 hours • Regulatory Notification: Notification to relevant data protection authorities within 72 hours where required • Individual Notification: Direct notification to affected individuals when required by law • Public Disclosure: Transparent communication about significant security incidents 6.8 Compliance and Auditing Security Standards Compliance: • ISO 27001: Implementation of information security management systems • SOC 2 Type II: Annual audits of security controls and procedures • GDPR Compliance: Technical and organizational measures to ensure GDPR compliance • Industry Standards: Adherence to relevant industry-specific security standards Regular Security Audits: • Internal Audits: Quarterly internal security assessments and reviews • External Audits: Annual third-party security audits and penetration testing • Vulnerability Assessments: Regular vulnerability scans and assessments • Compliance Reviews: Periodic reviews of compliance with security policies and procedures 6.9 User Security Responsibilities Account Security: • Strong Passwords: Recommendations for creating and maintaining strong passwords • Two-Factor Authentication: Optional two-factor authentication for enhanced account security • Suspicious Activity: Reporting procedures for suspicious account activity • Regular Updates: Keeping contact information current for security notifications Safe Practices: • Phishing Awareness: Education about phishing and social engineering attacks • Secure Connections: Recommendations for using secure internet connections • Software Updates: Importance of keeping devices and software updated • Privacy Settings: Guidance on configuring privacy and security settings 6.10 Continuous Improvement Security Program Evolution: • Regular Reviews: Annual reviews and updates of security policies and procedures • Threat Assessment: Ongoing assessment of emerging security threats and risks • Technology Updates: Regular updates to security technologies and tools • Best Practices: Adoption of evolving industry best practices and standards Investment in Security: • Resource Allocation: Continued investment in security infrastructure and personnel • Training and Development: Ongoing training and professional development for security team • Technology Innovation: Adoption of new security technologies and methodologies • Industry Collaboration: Participation in security industry forums and information sharing 7. **Your Privacy Rights** You have important rights regarding your personal information. The specific rights available to you depend on your location and the applicable privacy laws. We are committed to facilitating the exercise of these rights and responding to your requests promptly and transparently. 7.1 Universal Privacy Rights Right to Information and Transparency: • Clear Information: You have the right to clear, understandable information about how we process your personal information • Processing Purposes: You can request information about why we collect and use your personal information • Data Categories: You have the right to know what categories of personal information we collect about you • Source Information: You can request information about the sources from which we collect your personal information Right to Access: • Data Access: You have the right to request a copy of the personal information we hold about you • Processing Details: You can request information about how we process your personal information • Data Recipients: You have the right to know with whom we share your personal information • Retention Periods: You can request information about how long we retain your personal information 7.2 Rights Under the General Data Protection Regulation (GDPR) For EU/EEA Residents: Right to Rectification: • Correction: You have the right to request correction of inaccurate or incomplete personal information • Updates: You can update your personal information at any time through your account settings • Verification: We may request verification of your identity before making corrections • Third-Party Notification: We will notify relevant third parties of corrections where appropriate Right to Erasure (Right to be Forgotten): • Deletion Request: You can request deletion of your personal information under certain circumstances • Grounds for Erasure: When the data is no longer necessary, you withdraw consent, or the processing is unlawful • Exceptions: We may retain information where required by law or for legitimate interests • Third-Party Notification: We will inform third parties of deletion requests where feasible Right to Restrict Processing: • Processing Limitation: You can request that we limit how we process your personal information • Circumstances: When accuracy is contested, processing is unlawful, or you object to processing • Storage Only: We may store but not further process restricted data • Notification: We will inform you before lifting any restrictions on processing Right to Data Portability: • Data Transfer: You can request your personal information in a structured, machine-readable format • Direct Transfer: You can request that we transfer your data directly to another service provider • Technical Feasibility: Subject to technical feasibility and security considerations • Scope: Applies to data processed based on consent or contract performance Right to Object: • Processing Objection: You can object to processing based on legitimate interests or for direct marketing • Marketing Opt-Out: You can opt-out of marketing communications at any time • Profiling: You can object to automated decision-making and profiling • Balancing Test: We will cease processing unless we have compelling legitimate grounds 7.3 Rights Under the California Consumer Privacy Act (CCPA/CPRA) For California Residents: Right to Know: • Categories of Information: You can request information about the categories of personal information we collect • Sources: You have the right to know the sources from which we collect personal information • Business Purposes: You can request information about our business or commercial purposes for collecting personal information • Third-Party Sharing: You have the right to know the categories of third parties with whom we share personal information Right to Delete: • Deletion Request: You can request deletion of personal information we have collected about you • Verification Process: We will verify your identity before processing deletion requests • Exceptions: We may retain information for specific legal, business, or security purposes • Confirmation: We will confirm completion of deletion requests Right to Opt-Out of Sale/Sharing: • No Sale: We do not sell personal information for monetary consideration • Sharing Opt-Out: You can opt-out of sharing personal information for targeted advertising • "Do Not Sell or Share" Link: Available on our website footer for easy access • Global Privacy Control: We honor Global Privacy Control signals where technically feasible Right to Correct: • Inaccurate Information: You can request correction of inaccurate personal information • Verification: We will verify your identity and the accuracy of the correction request • Response Time: We will respond to correction requests within 45 days • Third-Party Notification: We will notify service providers of corrections where appropriate Right to Limit Sensitive Personal Information: • Sensitive Data: You can limit our use of sensitive personal information • Essential Uses Only: We will limit use to essential business purposes only • Opt-Out Process: Simple opt-out process available through your account settings • Exceptions: Certain uses may be necessary for service provision or legal compliance 7.4 Rights Under Other Privacy Laws Virginia Consumer Data Protection Act (VCDPA): • Access and Portability: Right to access and receive personal data in a portable format • Correction: Right to correct inaccuracies in personal data • Deletion: Right to delete personal data • Opt-Out: Right to opt-out of targeted advertising and sale of personal data Colorado Privacy Act (CPA): • Transparency: Right to transparent information about data processing • Access: Right to access personal data • Correction: Right to correct personal data • Deletion: Right to delete personal data • Portability: Right to data portability • Opt-Out: Right to opt-out of targeted advertising and data sales Other State Laws:\ We comply with privacy laws in all states where we operate, including Connecticut, Utah, and other states with comprehensive privacy legislation. 7.5 How to Exercise Your Rights Online Request Portal: • Self-Service Options: Many rights can be exercised through your account dashboard • Privacy Request Form: Dedicated online form for submitting privacy requests • Secure Submission: Encrypted submission process to protect your information • Request Tracking: Ability to track the status of your privacy requests Contact Methods: • Email: • Online Chat: Customer support chat with privacy-trained representatives Verification Process: • Identity Verification: We will verify your identity before processing requests • Account Holders: Account login credentials may be sufficient for verification • Non-Account Holders: Additional verification information may be required • Authorized Agents: Procedures for authorized agents to submit requests on your behalf 7.6 Response Timeframes Standard Response Times: • GDPR Requests: Within 30 days (extendable to 60 days for complex requests) • CCPA Requests: Within 45 days (extendable to 90 days with notification) • Other State Laws: As required by applicable law, typically 30-45 days • Urgent Requests: Expedited processing for urgent security or safety concerns Communication: • Acknowledgment: We will acknowledge receipt of your request within 5 business days • Status Updates: Regular updates on the progress of complex requests • Completion Notice: Confirmation when your request has been completed • Appeal Process: Information about appeal procedures if you are unsatisfied with our response 7.7 Limitations and Exceptions Legal Limitations: • Legal Obligations: We may be unable to fulfill requests that conflict with legal obligations • Ongoing Investigations: Requests may be limited during active legal proceedings or investigations • Safety and Security: Requests may be denied if they would compromise safety or security • Third-Party Rights: Requests may be limited to protect the rights and freedoms of others Technical Limitations: • System Constraints: Some requests may be limited by technical system capabilities • Data Interconnections: Complex data relationships may affect the scope of certain requests • Backup Systems: Data in backup systems may take additional time to address • Aggregated Data: Anonymized or aggregated data may not be subject to individual rights 7.8 No Discrimination Equal Treatment: • No Retaliation: We will not discriminate against you for exercising your privacy rights • Service Continuity: Your access to our services will not be denied for exercising rights • Equal Pricing: We will not charge different prices based on privacy choices • Service Quality: The quality of our services will not be affected by your privacy decisions Exceptions: • Necessary Differences: Some service differences may be necessary based on the data available • Legal Requirements: Certain legal requirements may necessitate different treatment • Voluntary Programs: You may choose to participate in programs that offer benefits in exchange for data 7.9 Authorized Agents Agent Authorization: • Written Authorization: Authorized agents must provide written permission from the consumer • Verification Requirements: Both the agent and consumer identity must be verified • Power of Attorney: Agents with power of attorney may submit requests with proper documentation • Business Agents: Businesses may authorize agents to submit requests on behalf of employees Agent Responsibilities: • Accurate Representation: Agents must accurately represent the consumer's request • Confidentiality: Agents must maintain confidentiality of consumer information • Compliance: Agents must comply with all applicable privacy laws and regulations • Communication: Agents must facilitate communication between us and the consumer as needed 8. **International Data Transfers** We may transfer your personal information to countries outside your country of residence, including countries that may not have the same level of data protection as your home country. We ensure that all international transfers are conducted with appropriate safeguards to protect your personal information. 8.1 Transfer Mechanisms and Safeguards For EU/EEA Residents: • Adequacy Decisions: We transfer data to countries deemed adequate by the European Commission (such as the UK, Canada, and others) • Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses for transfers to countries without adequacy decisions • Binding Corporate Rules: Where applicable, we rely on approved Binding Corporate Rules for intra-group transfers • Certification Schemes: We may use approved certification schemes and codes of conduct For Other Jurisdictions: • Contractual Safeguards: We implement contractual protections requiring equivalent privacy standards • Cross-Border Transfer Agreements: We comply with applicable cross-border transfer regulations • Regular Monitoring: We conduct regular assessments of international partners' privacy practices 8.2 Countries and Regions Primary Transfer Destinations: • United States: For cloud hosting, analytics, and customer support services • European Union: For data processing and customer service operations • Canada: For certain technical and customer support functions • United Kingdom: For business operations and data processing activities Transfer Purposes: • Cloud Storage and Hosting: Secure data storage and website hosting services • Customer Support: Providing customer service and technical support • Analytics and Research: Understanding user behavior and improving services • Marketing and Advertising: Delivering relevant marketing communications and advertisements 9. **Cookies and Tracking Technologies** We use cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver personalized content and advertisements. 9.1 Types of Cookies We Use Essential Cookies: • Session Management: Maintaining your login session and user preferences • Security: Protecting against fraud and ensuring website security • Load Balancing: Distributing website traffic for optimal performance • Error Tracking: Identifying and resolving technical issues Analytics Cookies: • Usage Analytics: Understanding how visitors interact with our website • Performance Monitoring: Measuring website performance and user experience • A/B Testing: Testing different versions of website features • Conversion Tracking: Measuring the effectiveness of marketing campaigns Marketing Cookies: • Advertising: Delivering relevant advertisements based on your interests • Retargeting: Showing you relevant ads on other websites • Social Media Integration: Enabling social media sharing and interactions • Personalization: Customizing content based on your preferences and behavior 9.2 Cookie Management Your Cookie Choices: • Cookie Consent Banner: Clear options to accept or reject non-essential cookies • Cookie Settings: Granular controls to manage different types of cookies • Browser Settings: Instructions for managing cookies through your browser • Opt-Out Tools: Links to industry opt-out tools and preference centers Cookie Duration: • Session Cookies: Deleted when you close your browser • Persistent Cookies: Remain on your device for a specified period or until manually deleted • Third-Party Cookies: Managed by third-party services according to their policies 10. **Third-Party Services** We integrate with various third-party services to enhance our offerings. These services have their own privacy policies and practices. 10.1 Categories of Third-Party Services Analytics and Performance: • Google Analytics: Website traffic and user behavior analysis • Adobe Analytics: Advanced analytics and reporting • Hotjar: User experience and behavior tracking Marketing and Advertising: • Google Ads: Online advertising and remarketing • Facebook Pixel: Social media advertising and analytics • LinkedIn Ads: Professional network advertising Customer Support: • Zendesk: Customer service and support ticketing • Intercom: Live chat and customer communication • Freshdesk: Help desk and customer support Payment Processing: • Stripe: Credit card and payment processing • PayPal: Alternative payment processing • Square: Point-of-sale and payment processing 10.2 Third-Party Responsibilities Data Processing Agreements: We maintain data processing agreements with all third-party service providers that handle personal information on our behalf. Privacy Policy Links: We encourage you to review the privacy policies of third-party services: • Google Privacy Policy • Facebook Privacy Policy • LinkedIn Privacy Policy 11. **Children's Privacy** We are committed to protecting the privacy of children and comply with applicable children's privacy laws, including the Children's Online Privacy Protection Act (COPPA). 11.1 Age Restrictions Minimum Age Requirements: • General Services: Our services are not intended for children under 13 years of age • EU/EEA Residents: We do not knowingly collect data from children under 16 without parental consent • Other Jurisdictions: We comply with local age requirements for digital consent 11.2 Parental Rights and Controls Parental Consent: Where required by law, we obtain verifiable parental consent before collecting personal information from children. Parental Rights: Parents have the right to: • Review their child's personal information • Request deletion of their child's personal information • Refuse further collection or use of their child's personal information 12. **Changes to This Privacy Policy** We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. 12.1 Notification of Changes Material Changes: We will provide prominent notice of material changes through: • Email Notification: Direct email to registered users • Website Banner: Prominent notice on our website • In-App Notification: Notifications within our mobile applications Minor Changes: Non-material changes will be reflected in the updated policy with a new "Last Updated" date. 12.2 Effective Date Changes to this Privacy Policy will become effective 30 days after posting, unless a longer notice period is required by law or we specify otherwise. 13. **Contact Information** If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: Privacy Officer: • Email: General Contact: • Website: • Customer Support: Response Time: We will respond to privacy inquiries within 5 business days and privacy requests within the timeframes required by applicable law. 14. **Complaints and Regulatory Information** You have the right to file complaints about our privacy practices with relevant regulatory authorities. 14.1 Regulatory Contacts European Union/EEA: • Lead Supervisory Authority: \[TO BE DETERMINED BASED ON MAIN ESTABLISHMENT] Local Data Protection Authorities: Contact information available at edpb.europa.eu United States: • Federal Trade Commission: consumer.ftc.gov • State Attorneys General: Contact information for your state's attorney general office Other Jurisdictions: • Canada: Office of the Privacy Commissioner of Canada - priv.gc.ca • United Kingdom: Information Commissioner's Office - ico.org.uk 14.2 Internal Complaint Process Before contacting regulatory authorities, we encourage you to contact us directly so we can address your concerns promptly and effectively. # Supported Digital Assets A list of the digital assets Nara currently supports for lending activity through its platform. ### Currently Supported * Ethereum USDC * Ethereum USDT / USD0 * Arbitrum USDC * Arbitrum USD0 * BSC USDT * Ethereum Hex Trust USD (USDX) # Code Audits Ensuring the security and integrity of the Nara platform is paramount. To this end, all smart contracts and critical components of the Nara protocol undergo rigorous independent security audits by leading blockchain security firms. These audits are a cornerstone of our commitment to providing a safe and reliable environment for our users. ### The Importance of Audits Code audits are a systematic examination of the source code of a software application to identify vulnerabilities, errors, or deviations from best practices. In the context of blockchain and decentralized finance (DeFi), where financial assets are directly managed by smart contracts, audits are indispensable. They help to: * Identify Vulnerabilities: Discover potential bugs, exploits, or logical flaws that could be exploited by malicious actors. * Enhance Security: Strengthen the overall security posture of the protocol by addressing identified weaknesses. * Build Trust: Provide an independent verification of the code's quality and security, fostering confidence among users and partners. * Ensure Compliance: Verify adherence to industry standards and regulatory requirements. ### Our Audit Process Nara engages with reputable third-party auditors who specialize in blockchain security. The audit process typically involves: 1. Initial Review: Auditors conduct a comprehensive review of the smart contract code, architecture, and documentation. 2. Vulnerability Assessment: They employ a combination of automated tools and manual analysis to identify known vulnerabilities and potential attack vectors. 3. Penetration Testing: Simulated attacks are conducted to test the resilience of the system against real-world threats. 4. Reporting: A detailed report is generated, outlining all identified issues, their severity, and recommended remediation steps. 5. Remediation and Re-audit: Nara's development team addresses the findings, and a re-audit is performed to confirm that all vulnerabilities have been effectively mitigated. ### Accessing Audit Reports Audits are still outstanding, but we will make our audit reports publicly available to provide our users with full visibility into the security of our platform.
# Integrations Nara provides various integration options to connect with external systems and services. ### API Integration Nara offers a robust API that allows developers to programmatically interact with the platform. The API enables seamless integration with existing financial systems, trading platforms, and other applications. Key features of the API include: * Real-time Data Access: Access real-time data on loan vaults, exchange rates, and transaction history. * Programmatic Trading: Initiate and manage investments and withdrawals programmatically. * Secure Authentication: Securely authenticate API requests using industry-standard protocols. * Comprehensive Documentation: Detailed API documentation with code examples and use cases. ### WalletConnect Integration Nara supports WalletConnect, an open-source protocol for connecting decentralized applications (dApps) to mobile wallets. This allows users to securely connect their preferred mobile wallets to the Nara web application and interact with the platform without compromising their private keys. ### Third-Party Integrations Nara is designed to be compatible with a wide range of third-party services and platforms. We continuously explore new integration opportunities to expand the functionality and reach of our platform. If you have a specific integration requirement, please contact our support team.