Semilla · Personal data
Personal data, what we do with it.
*What Semilla collects, why, who has access, for how long, and your rights.*
Semilla Impact Token S.R.L., a company organized under the laws of Costa Rica, is the controller of the data described here. This text is for your information, not for signature: your rights exist whether or not you have read it.
Version of October 12, 2026, draft.
What we collect
- What you give us: your email address and password; your name, your photo, and your introduction if you write one; your address; the documents in your identity file, and those of the beneficial owners of an organization you represent; the wallets and bank details you declare.
- What you create on the platform: your posts, comments, reactions, and messages; your purchases, subscriptions, coupons, and withdrawals; your signatures on agreements.
- What the platform records: the date, time, IP address, and text version of each signed instrument; your logins and the technical logs needed for security.
- What we do not collect: no advertising trackers, no profiling, no resale. We do not track what you do elsewhere.
Why
| What we do | Legal basis |
|---|---|
| Maintain your account and give you access | The contract between us |
| Verify your identity, prevent money laundering | A legal obligation |
| Keep the register of what you hold | The contract |
| Date, seal, and keep proof of your agreements | The contract, and our legitimate interest in being able to prove them |
| Run the Network, keep you informed | The contract |
| Protect the platform and its members | Legitimate interest |
| Write to you about anything other than the service | Your consent, which you may withdraw |
Your identity files stay on the platform
Your identity documents never leave the Semilla platform and its backups. They are not copied anywhere else, nor sent to any outside service.
Who sees what
- Your identity file: the architect, the pillars, who validate it, and the ambassadors, who support members. Each of them signs a data protection agreement before being given access. No one else, at any time.
- What you hold: no other member sees it, and nothing about it appears on the Network. Only the architect, the pillars, the ambassadors (under the same data protection agreement), and the people in charge of the register have access.
- What you post: according to the visibility you choose (public, members, or only you).
- Your status as a member is not disclosed to anyone outside Semilla.
- Every access to sensitive data leaves a record in the log.
What goes out, and what never does
Your data is never sold, rented, or transferred to anyone. It is managed by Semilla, on its own servers, in Costa Rica. Two outside services remain necessary: sending emails and streaming videos; they receive only what is strictly necessary and nothing about your identity, your documents, or what you hold. An authority that lawfully requires your data may obtain it; we will inform you as soon as the law allows.
What is recorded on the blockchain cannot be erased
When you declare a wallet and your identity is activated on the contract, that record becomes public and permanent. No one can rewrite the blockchain, not even Semilla. We can erase what we hold; we cannot erase what is on the blockchain. We can, however, break the link in our records between that address and your identity.
How long
| Data | Retention period |
|---|---|
| Active account | For as long as the account exists |
| Signatures, registers, identity documents | Three years after the account is closed |
| Posts and messages | On closure, as you choose: anonymized or erased |
| Technical and login logs | Twelve months |
| Records on the blockchain | Permanent, beyond our reach |
Your rights
- To know what we hold about you, and to obtain a copy.
- To correct what is inaccurate, mostly from your settings.
- To take your data with you: from your space, a readable archive of what you have posted and signed.
- To leave: to request that your account be closed, and to choose what happens to your posts.
- To object, and to withdraw consent, at any time.
These requests can be made from your space, or by writing to hola@semilla.cr. We respond on the merits within thirty days. One person is accountable for the answer: Pierre Bondoux, the architect of Semilla.
Governing law
Costa Rican law, in particular Law No. 8968 on the Protection of the Person with Regard to the Processing of Personal Data. If you reside in the European Union, the rights granted to you by the General Data Protection Regulation (GDPR) are respected here.
Security and cookies
Passwords are never stored in plain text; two-step security is available. If a breach of your data were to occur, we would inform you without waiting to be required to do so. There are no trackers: only four technical cookies exist (keeping you signed in, language, time zone, and the administration workspace), which is why no banner asks you to accept cookies.
The platform is not open to anyone under eighteen. This text may change; the version in force is always dated, and previous versions remain available for consultation.