Privacy Policy

This Privacy Policy explains how STG-3 (operating the member platform at portal.stg-3.com, "STG-3," "we," "us") collects, uses, and protects personal data of members and prospective members of the STG-3 executive community for RWA tokenization and stablecoins.

Data controller: Ziv Keinan Ltd. (company no. 517018883), HaArba’a St 28, Tel Aviv, Israel. For any privacy question or request, contact ziv@stg-3.com or ziv@zivkeinan.com.

We collect the following categories of personal data:

• Account and profile data: full name, email address, job title, firm/company, company category, country/region, LinkedIn URL, Telegram handle, profile photo, biography, focus areas, and the "currently offering," "currently need help with," and "seeking connections" fields you choose to fill in.
• Membership data: application details submitted during onboarding (seniority, mandate, why you want to join), approval status, membership tier, badges assigned to your profile, and join date.
• Usage data: sign-in timestamps, pages visited within the member platform, and interactions with the directory (e.g. intro requests you send or receive).
• Communications with Thumper (our AI concierge): the content of conversations you have with Thumper, including any facts Thumper's memory system saves about you or your firm from those conversations (e.g. a fundraise, a job change, what you're looking for).
• Authentication data: if you sign in with Google or LinkedIn, we receive your name and email from that provider. If you use a magic-link email sign-in, we generate a short-lived login token tied to your email.
• Communications data: emails we send you (welcome emails, weekly digests, intro-request notifications) and whether you open or click them.
• Event data: if you register for an STG-3 event or webinar (whether or not you are a member), your name, email address, and registration details; and if you attend, your participation in the session, including anything you appear in or say on a recorded session (see "Events, recordings and episodes" below).

• To operate the member directory and let other approved members find and connect with you.
• To power Thumper's matching, advisory, and Q&A features, including surfacing relevant members, news, and connections to you and to others.
• To send you transactional and community emails: sign-in links, approval notifications, weekly digest emails (people worth meeting, pending intro requests, community news), and updates about jobs or events.
• To facilitate warm introductions between members. By joining, you agree that we may contact you — by email or another channel you have shared with us — to propose or facilitate a warm introduction to another member or partner, whether the introduction was requested by you, by another member, or suggested by us (including via Thumper's matching) because we believe it is relevant to what your profile says you are looking for. You can decline any introduction, and you can ask us to stop proposing introductions at any time (see "Your rights" below).
• To maintain records of prospective and current members in our CRM for community management and, where applicable, sponsorship or partnership relationship management.
• To improve the platform and understand how it's used.
• To comply with legal obligations and enforce our Terms of Use.

Where GDPR or UK GDPR applies (most of our membership is based in the EU/UK), we process your data on the following bases: performance of a contract (providing the membership service you signed up for), legitimate interests (curating a high-quality professional community, matching members, and sending relevant community updates), and consent (where you explicitly opt in, e.g. to marketing communications or choosing to make certain profile fields visible to other members). You can withdraw consent at any time.

We use the following processors to operate the platform. Each only receives the data it needs to perform its function:

• Upstash (Redis and Vector database) — stores member profiles, session data, intro requests, digest history, and Thumper's knowledge base and memory.
• Anthropic (Claude API) — processes the content of your conversations with Thumper to generate responses. Anthropic does not use this data to train its models under our commercial terms.
• Resend — delivers transactional and digest emails on our behalf.
• HubSpot — our CRM, used to track members and prospective members and manage relationships (including sponsor/partner relationships).
• Auth0 (Okta) — handles Google and LinkedIn social sign-in.
• Vercel — hosts the platform's application code and infrastructure.
• Zoom — hosts our live webinars and forum sessions, including registrant lists and cloud recordings.
• Cloudflare and Google — store and serve recorded episode videos to members.

We do not sell your personal data. We share it with other members only in the ways the platform's features describe (e.g. your profile is visible in the directory to signed-in members; your email is never shown to other members — introductions are always brokered).

Some of our events and webinars are open to non-member guests. If you register as a guest, we collect your name and email address, keep a record of your registration in our CRM, and may send you a follow-up email about the session you attended (including an invitation to apply for membership). Guests do not receive member accounts, and this policy applies to guest data in the same way as member data.

Our forum sessions and webinars are recorded. Recordings may capture your name, voice, likeness (if your camera is on), and anything you say or share during the session. We edit and republish session recordings as episodes available to STG-3 members, and may use short excerpts to promote the series. By speaking at or attending a recorded session, you consent to this use. If you prefer not to appear, keep your camera and microphone off, or contact us before or after the session and we will accommodate you (including editing you out of a published episode where reasonably feasible).

Our processors (listed in Section 5) are based in or process data in the United States. Where we transfer personal data outside the UK/EEA, we rely on appropriate safeguards: most of our processors are certified under the EU-U.S. Data Privacy Framework, including its UK Extension, and each is bound by a data processing agreement incorporating Standard Contractual Clauses (with the UK Addendum where applicable) as a fallback mechanism.

We retain your profile data for as long as you remain a member, and for a reasonable period after (up to 24 months) in case you rejoin or for legitimate record-keeping. Chat history with Thumper, and the facts Thumper's memory saves about you, are retained while your membership is active and are deleted or anonymized within 24 months after your membership ends. You can request deletion at any time — see Section 10.

We use only essential cookies, and we do not use any third-party advertising or analytics cookies:

• Session cookie (stg3_session) — keeps you signed in as a member; lasts up to 90 days of activity.
• Guest event cookie (stg3_guest) — if you register for an event as a guest, remembers your registration so the event page can show you the joining details.
• Sign-in cookies — short-lived security cookies used only during the Google/LinkedIn sign-in flow to protect against forged requests.

Because all of these are strictly necessary to provide the service you've asked for, no cookie consent banner is required. Email opens and link clicks in our digest emails are tracked via standard email-analytics techniques (a tracking pixel and click-through links) so we can measure whether the digest is useful — this data is not shared outside STG-3, and you can ask us to stop tracking opens for your address by emailing ziv@zivkeinan.com.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (you can also edit most of this yourself in My Profile).
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email ziv@zivkeinan.com.

STG-3 is a professional community for senior executives and is not directed at, or intended for use by, anyone under 18.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) for all platform traffic, access-controlled admin functions, and session-based authentication. No system is perfectly secure, and we encourage you to use a unique password with your email or social login provider.

We may update this policy as the platform evolves. Material changes will be communicated to members by email or an in-platform notice. The "last updated" date at the top of this page always reflects the current version.

Questions about this policy or your data: ziv@zivkeinan.com.