Platform Privacy Policy

How we processes personal data on the AuxPar tokenization platform and Investor Portal.

Last Updated: November 2026

This notice explains how personal data is collected, used and protected when you use the BeePart tokenization platform, including the Investor Portal (together, the “Platform”). The data we process depends on how you use the Platform. For visits to this website, see our Privacy Policy.

1. Definitions

  • Personal Data: any information relating to an identified or identifiable natural person.
  • Data Controller: the person or entity that decides the purposes and means of processing Personal Data.
  • Data Processor: the person or entity that processes Personal Data on behalf of a Data Controller.
  • Issuer: a company or other entity that licenses the Platform to issue and manage its own tokens.

2. Who Is Responsible for Your Data

The Platform “AuxPar” is operated by BeePart Ltd (“BeePart”, “we”, “us” or “our”), Western Road, Nassau, New Providence, The Bahamas.

  • BeePart as Data Controller. BeePart is the controller of the data needed to manage Platform accounts for Issuers and their authorised users, to run and secure the Platform, and to handle our commercial relationship with Issuers.
  • BeePart as Data Processor. When investors register in an Issuer’s offering through the Investor Portal, the Issuer is the controller of the investor’s data. BeePart processes that data only on the Issuer’s behalf and under its documented instructions, to provide the Platform’s technical features. Questions about an Issuer’s offering, or about how the Issuer uses investor data, should be addressed to that Issuer.

3. Purposes of Processing

We process Personal Data to:

  • Provide the Platform and its features to Issuers and their users under a license agreement, and to take steps before entering one.
  • Create and manage user accounts and access to the Investor Portal.
  • Run identity checks (KYC/KYB) through integrated third-party providers, as configured by the Issuer.
  • Record token holdings and enforce the eligibility and transfer rules configured by the Issuer.
  • Respond to enquiries, support requests and other requests.
  • Manage, maintain and protect the Platform and our IT infrastructure, including preventing fraud and misuse.
  • Send service communications about the Platform and, where you have consented, product updates.
  • Comply with legal obligations and requests from competent authorities.

BeePart does not use investor data to promote, place or sell tokens. We do not provide investment, brokerage or custody services.

4. Personal Data We Process

  • Identity data: first name, surname, date of birth, nationality, job title and company name.
  • Contact data: email address, phone number and company website.
  • KYC/KYB data: identity documents, proof of address and verification results returned by the integrated KYC/KYB provider, including for the company and its beneficial owners.
  • Investor data: eligibility status, subscriptions, token holdings and distributions recorded on the Platform.
  • Blockchain data: public wallet addresses and on-chain transactions linked to your account.
  • Technical data: IP address, device and browser information, log-in records and Platform usage logs.

BeePart never holds or controls your private keys, funds or digital assets.

Where applicable data protection law applies, including The Bahamas Data Protection (Privacy of Personal Information) Act and, where relevant, Regulation (EU) 2016/679 (GDPR), we rely on the following legal bases:

  • Contract: to provide the Platform under the license agreement with the Issuer and to manage user accounts.
  • Legal obligation: to meet our own legal and regulatory obligations.
  • Legitimate interests: to secure, maintain and improve the Platform and to prevent fraud, where these interests do not override your rights.
  • Consent: for optional communications such as product updates. You can withdraw consent at any time.

When we act as a processor for an Issuer, the Issuer determines the legal basis for processing investor data, for example for KYC/AML checks.

6. Recipients

We do not sell Personal Data. We may share it with:

  • Service providers that support the Platform, such as hosting, cloud infrastructure, email delivery and KYC/KYB verification providers.
  • The Issuer whose offering you take part in, for investor data relating to that offering.
  • Professional advisors, such as legal and accounting firms, under confidentiality obligations.
  • Courts, law enforcement, regulators and other competent authorities, where required by law.

We put appropriate contractual safeguards in place with these parties, such as data processing agreements.

7. International Transfers

Our service providers may process Personal Data outside the country where it was collected. Where required, we protect these transfers with appropriate safeguards, such as standard contractual clauses or an equivalent mechanism recognised by applicable law.

8. Blockchain Data

Token issuance and transfers are recorded on public blockchains. Blockchain records are permanent and cannot be changed or deleted, by BeePart or by anyone else. The Platform keeps identity data off-chain, but a public wallet address may be linked to a person when combined with other information. This limits how some rights, such as erasure or rectification, can be applied to on-chain data.

9. Retention

We keep Personal Data only for as long as needed for the purposes described above, including for the duration of the license agreement with the Issuer, and for as long as the law requires afterwards. Investor data processed for an Issuer is kept, returned or deleted according to the Issuer’s instructions, unless the law requires us to keep it. When data is no longer needed, we delete it securely or anonymise it.

10. Security

We apply appropriate technical and organisational measures to protect Personal Data. These include encryption in transit and at rest, access controls and authentication, logging and monitoring, and regular security reviews.

11. Your Rights

Depending on applicable law, you may have the right to:

  • access your Personal Data
  • have it corrected or deleted
  • restrict or object to its processing
  • receive a copy of it in a portable format
  • withdraw consent at any time

You may also have the right to lodge a complaint with a data protection authority.

To exercise these rights, email privacy@auxpar.com with your full name and the email address linked to your account, or write to BeePart Ltd at the address in Section 2. If your request concerns investor data that we process for an Issuer, we will forward it to that Issuer and assist it in responding.

12. Minors

The Platform is not intended for persons under 18 years of age, and we do not knowingly collect their Personal Data.

13. Changes to This Notice

We may update this notice from time to time. The “Last Updated” date at the top shows when it was most recently revised.

14. Governing Law

This notice is governed by the laws of The Commonwealth of The Bahamas, without prejudice to any mandatory data protection rights you have under the law of your country of residence.