private company has bylaws, not policy

Policy is for employees, bylaws are for shareholders.

Because it is a private company, its bylaw can define conditions to deprive shareholder shares, and there is nothing SEC can do. You can sue them in court though.