Privacy Policy

1. Scope & who we are

This Privacy Policy explains how The Last Acre ("we," "us," "our," or "the Company") collects, uses, discloses, and protects information when you visit thelastacre.co or otherwise interact with us (collectively, the "Services").

The Company is operated by The Last Acre, Inc., a Delaware corporation with offices at [ADDRESS]. By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2. Information we collect

Information you provide to us

When you join our waitlist, contact us, or otherwise interact with the Services, you may provide:

• Contact information such as your name, email address, and any other information you choose to share.
• Communications you send us, including the contents of emails and any attachments.
• Investor pre-qualification information if you voluntarily indicate interest in a future offering (this is solely an indication of interest and is not a commitment or offer; see our Important Disclosures).

Information we collect automatically

When you visit the Services, we and our service providers may automatically collect:

• Device & browser information (such as IP address, browser type, operating system, device identifiers, and language).
• Usage information (such as pages viewed, links clicked, time spent, and referring URL).
• Approximate location derived from IP address.

Information from third parties

We may receive limited information from service providers such as our hosting provider (Netlify), email service providers, analytics providers, and our authentication or anti-spam vendors.

3. How we use information

We use the information described above to:

• Operate, maintain, and improve the Services;
• Communicate with you about The Last Acre, including responding to inquiries and sending you updates if you have joined our waitlist;
• Send you marketing communications (you can unsubscribe at any time);
• Detect, prevent, and respond to fraud, abuse, security risks, and technical issues;
• Comply with legal obligations, including securities laws if and when we conduct a qualified offering;
• Establish, exercise, or defend legal claims.

4. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers who help us operate the Services (e.g., hosting, email delivery, analytics, customer support, payment and escrow agents). These parties are contractually limited in how they may use your information.
• Legal & safety: if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
• With your consent.

5. Cookies & tracking

We use cookies and similar technologies to operate the Services, remember preferences, and understand how visitors use the site. The Services may also load fonts and other resources from third parties (such as Google Fonts), which may set their own cookies or process technical data such as IP address.

You can usually control cookies through your browser settings. If you disable cookies, some features of the Services may not function properly. We do not currently respond to "Do Not Track" browser signals, but we do honor recognized opt-out preference signals (such as Global Privacy Control) where required by law.

6. Your privacy rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your personal information;
• Port your personal information to another service;
• Opt out of certain sharing or targeted advertising;
• Withdraw consent where processing is based on consent.

To exercise these rights, email nick@blueoceancre.com. We will verify your request before responding. You will not be discriminated against for exercising any privacy right.

7. California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• The right to know what categories of personal information we collect, the sources, the business purpose, and the categories of third parties to whom we disclose it;
• The right to request a copy of the specific pieces of personal information we hold about you;
• The right to request correction or deletion of your personal information;
• The right to opt out of the "sale" or "sharing" of your personal information — we do not sell or share personal information as defined under the CCPA;
• The right to limit the use of sensitive personal information — we do not use sensitive personal information for purposes that would trigger this right;
• The right not to be retaliated against for exercising your privacy rights.

Categories of personal information we may collect (CCPA categories): identifiers; internet or network activity; geolocation data (approximate); commercial information; and inferences drawn from the above. We retain each category only as long as needed for the purposes described in Section 9 below.

To exercise California rights, email nick@blueoceancre.com. Authorized agents may submit requests on your behalf with appropriate verification.

8. Nevada residents

Nevada residents have the right under Nevada Revised Statutes Chapter 603A to direct us not to sell certain personal information. We do not sell personal information as defined under Nevada law. To submit a verified request, email nick@blueoceancre.com.

9. Data retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations (including securities and tax recordkeeping if you become an investor), resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security. You should use a strong password, keep your credentials confidential, and notify us immediately of any suspected unauthorized access.

11. Children's privacy

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. International users

The Services are operated from the United States. If you access the Services from outside the U.S., your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (such as by updating the "Last Updated" date above or, where required, by direct notice). Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

14. How to contact us