Privacy Policy — rwa.ngo data membership
Effective: 2026-10-26
1. Who we are
Escher Camondo Intelligence, LLC (131 Continental Dr, Suite 305, Newark, DE 19713, USA) is the controller of the personal data processed on this website for paid memberships. Contact: contact@rwa.ngo.
2. What we collect
| When | What | Why |
|---|---|---|
| You sign in with rwa.ngo | Your rwa.ngo account number and email address, session records (time, browser summary) | To provide your membership account |
| You subscribe | Plan, payment status and dates, and the customer reference from Stripe (never full card details); billing country for tax | To provide and bill the membership; tax |
| You apply for research membership | Name or pseudonym, organisation (optional), purpose, links | To review the application |
| You declare investor status | Jurisdiction, standard, the proof you upload (encrypted), the review result and date, your display choice | To review and, with your consent, have the result shown on rwa.ngo |
| You use the API (Institutional) | Key prefix, request counts, the identification digits assigned to your key | To enforce limits and trace leaks |
3. Legal basis
Contract (membership, payment, API); legal obligation (tax and accounting records); legitimate interests (security, preventing misuse, tracing leaks); consent (showing your investor-status result on rwa.ngo — you can withdraw it at any time).
4. Who we share it with
- Finance Transparency CIC (rwa.ngo): your account number, membership level and its expiry, any extra check records bought, and your investor-status result with your display choice — so that rwa.ngo can open member content. Never your payment details or your proof.
- Processors: Stripe (payments and tax), Cloudflare (hosting, storage), our database host, Resend (email).
- International transfers: we are a US company. Where personal data is transferred from the UK or the European Economic Area to countries without an adequacy decision, such as the United States, we use the UK International Data Transfer Agreement (IDTA) or Addendum and the EU Standard Contractual Clauses (SCCs) as safeguards.
5. How long we keep it
Membership account: while you have an account and 30 days after you close it. Investor-status proof originals: deleted 30 days after the review decision; only the result is kept. Payment and tax records: as required by law (usually 6 years). API logs: 24 months.
6. Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, and you can complain to your data protection authority (in the UK, the ICO). Contact: contact@rwa.ngo.
7. Cookies
| Name | Purpose | Duration |
|---|---|---|
__Host-llc_session | Keeps you signed in here | 30 days, or until you sign out |
__Host-llc_oidc, __Host-llc_handoff | Links the sign-in with rwa.ngo started here to its answer | 10 minutes |
| Stripe checkout and billing pages | Set by Stripe on its own pages | See Stripe's policy |
All are strictly necessary. We do not use analytics, advertising or social media cookies.