Privacy Policy
Last updated:
This policy explains how October Moon LLC, a Wyoming limited liability company trading as Latitude 10(“we”, “us”), handles personal data on latitude10.tech and its subdomains, when you buy our products, use our hosted tools or contact us, and in our business relationships.
It doesn't cover the kits once you run them: they run on your own infrastructure and send us nothing, unless you set one up to report sales to the seller dashboard. When we process personal data for a client during a project, a data processing agreement with that client governs it.
1. Who is responsible
October Moon LLC, 30 N Gould St. #64304, Sheridan, WY 82801, United States, is the controller of the personal data described here. Contact: jorge@latitude10.tech, +1 (307) 998 1317. We aren't required to appoint a data protection officer and haven't done so; write to the same address about anything in this policy.
2. What we collect, why, and for how long
| When | What we collect | Why, and the legal basis | How long we keep it |
|---|---|---|---|
| Visiting the Site | IP address, browser and device details, the page requested, the referring page and the time. Processed by Cloudflare, which hosts the Site. | To deliver pages and protect the Site from attacks and abuse. Legitimate interests in a secure, working website. | Short-lived logs under Cloudflare’s own policy. We don’t use them to identify visitors. |
| The contact form and email | Your name, email address and message, and anything else you choose to tell us. Your IP address is held in memory for up to 10 minutes to limit spam. | To answer you and discuss a possible engagement. Steps you ask for before a contract; legitimate interests in answering inquiries. | Up to 3 years after our last contact, unless you become a client. |
| Buying by card | Your name, email address, billing country and the order (product, amount, time, order number). You enter your card details on Stripe’s page; we never receive the full card number. | To take payment, deliver the product, prevent fraud and keep our accounts. Contract; legal obligation (tax and accounting records). | For as long as you can download the product, and as long as tax and accounting laws require (up to 10 years). |
| Delivering products | The order record: order number, email, name, product, when it was bought, how many times it was downloaded and how many links were sent. Download links expire after 7 days. Each download is stamped with your order number and email (LICENSE-ORDER.txt). | To deliver the product, let you download it again, and deter unlicensed sharing. Contract; legitimate interests in protecting our licenses. | As for card purchases. |
| Purchases by AI agents | The paying wallet address, the transaction hash or Lightning payment hash, the amount, network and asset, the product and the time. Blockchain transactions are public and permanent. | To verify the payment, deliver the product and keep our accounts. Contract; legal obligation. | As for card purchases. We can’t delete what is recorded on a public blockchain, and nobody else can. |
| The seller dashboard | Your email address; a hash of each sign-in link (valid 15 minutes); the receiving wallet addresses you add; the payments you report; your API keys, stored only as hashes, and when each was last used; your plan and passes. More detail on the dashboard’s own privacy summary. | To provide the dashboard you signed up for. Contract. | Until you delete your account in Settings, which deletes it at once. Database backups keep it for up to 30 more days. |
| The hosted Payments Sandbox | The session you create: fake wallets, fake balances and the requests you send it. A shortened form of your IP address (the network part) to count new sessions per hour. | To run your sandbox session and limit abuse. Legitimate interests in offering a free tool that can’t be abused. | Sessions are deleted when they expire after 24 hours; the counter after an hour. Please don’t put personal data in sandbox requests. |
| Clients and prospects | Business contact details (name, job title, company, email, phone, address), notes on our conversations, and the contracts we prepare and sign. | To prepare, perform and keep records of our contracts, and manage our business relationship. Contract or steps before one; legitimate interests in managing business relationships; legal obligation (keeping contracts and invoices). | During the relationship and for as long as the law requires afterwards (up to 10 years for contracts and invoices). Prospects who don’t become clients: up to 3 years after our last contact. |
The System Design Game runs entirely in your browser; we receive nothing from it. Where we rely on legitimate interests, we have weighed them against your rights, and you may object (see Your rights). Giving us data is voluntary, but without it we can't answer you, deliver a product or run your account.
5. International transfers
We are a United States company, and most of our providers are in the United States. Our team works from the European Union until December 2026, and from Argentina after that; the European Commission recognizes Argentina as giving adequate protection to personal data. When personal data from the European Economic Area, the United Kingdom or Switzerland goes to a country without such recognition, we rely on the EU–U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's standard contractual clauses (with the UK addendum), which our providers include in their data processing terms. Ask us for a copy at jorge@latitude10.tech.
6. Security
Everything travels over HTTPS and is encrypted at rest by our providers. Access is limited to the people who need it and protected by strong passwords. We store sign-in links and API keys only as hashes, download links are signed and expire, and we never store card details. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
7. Your rights
Wherever you live, you can ask us for a copy of your personal data, to correct it, or to delete it, by writing to jorge@latitude10.tech. We answer within one month, and may need to confirm your identity first. Deleting your data doesn't delete what we must keep by law (such as invoices) or what is public on a blockchain.
The European Economic Area, the United Kingdom and Switzerland
You have the rights of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Where we rely on your consent, you can withdraw it at any time. You can complain to the data protection authority where you live or work. We don't make decisions about you by automated means that have legal or similarly significant effects.
California and other US states
Depending on where you live, you can ask to know what personal information we collect, use and disclose, and ask us to correct or delete it. We don't sell or share personal information as those laws define it, and we won't treat you differently for using your rights. An authorized agent may make a request for you.
Argentina
You have the rights of access, rectification, update and deletion under Law 25,326. The required notice, in the original Spanish:
El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3 de la Ley Nº 25.326. La AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley Nº 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.
In English: you may access your personal data free of charge at intervals of no less than six months, unless you show a legitimate interest in doing so sooner (art. 14(3) of Law 25,326). The Agency for Access to Public Information (AAIP), as the authority for Law 25,326, handles complaints from anyone whose data protection rights are infringed.
8. Children
The Site and our products are for adults and businesses. We don't knowingly collect personal data from children under 16. If you believe a child has sent us personal data, email jorge@latitude10.tech and we will delete it.
9. Changes to this policy
We update this policy when what we do changes. The date at the top shows the current version. We will email dashboard account holders about material changes. Our Terms of Service cover everything else about using the Site.
10. Contact
October Moon LLC (Latitude 10), 30 N Gould St. #64304, Sheridan, WY 82801, United States. Email: jorge@latitude10.tech. Phone: +1 (307) 998 1317.