Privacy Policy
Last updated: March 2024
1. Information Collection
Personal Information
We collect information that you provide directly to us, including name, email address, and blockchain wallet addresses when you use our services. This information is necessary for the functionality of our platform and compliance with regulations.
Blockchain Data
Due to the public nature of blockchain technology, transaction data including wallet addresses and transaction amounts are publicly visible. We collect and analyze this data to provide our services.
Technical Data
We automatically collect certain information about your device and how you interact with our services, including IP address, browser type, and usage patterns.
2. Use of Information
Service Provision
We use collected information to provide, maintain, and improve our services, process transactions, and communicate with you about service updates and security matters.
Security & Compliance
Your information helps us detect and prevent fraud, abuse, and security incidents. We also use it to comply with legal obligations and regulatory requirements.
Analytics
We analyze usage patterns to improve our services, develop new features, and enhance user experience.
3. Data Protection
Security Measures
We implement industry-standard security measures to protect your information, including encryption, secure socket layer technology (SSL), and regular security assessments.
Data Retention
We retain your information only for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your data subject to legal requirements.
4. Your Rights
Access & Control
You have the right to access, correct, or delete your personal information. You can also opt out of certain data collection and marketing communications.
Data Portability
You can request a copy of your data in a structured, commonly used format.
5. Updates to Policy
Changes
We may update this privacy policy from time to time. We will notify you of any material changes via email or through our platform.
6. GDPR Compliance
Legal Basis for Processing
We process personal data under the following legal bases: consent, contract fulfillment, legal obligations, and legitimate interests. Each processing activity is reviewed to ensure it meets GDPR requirements.
Data Subject Rights
Under GDPR, you have rights to: access, rectification, erasure, restrict processing, data portability, and object to processing. Contact our Data Protection Officer to exercise these rights.
International Transfers
When transferring data outside the EEA, we ensure appropriate safeguards through Standard Contractual Clauses or adequacy decisions.
Data Protection Officer
Our DPO can be contacted at dpo@chainable.co for any privacy-related inquiries or rights exercises.
7. Additional Compliance
CCPA Compliance
California residents have specific rights regarding their personal information under the CCPA, including the right to know, delete, and opt-out of sales.
APPI Compliance
For users in Japan, we comply with the Act on Protection of Personal Information (APPI) requirements for data handling and transfer.
LGPD Compliance
Brazilian users are protected under the Lei Geral de Proteção de Dados (LGPD), with similar rights to GDPR.
8. Cookie Policy
Essential Cookies
Required for basic site functionality. Cannot be disabled.
Analytics Cookies
Used to improve our services. Can be disabled through your cookie preferences.
Marketing Cookies
Used for targeted advertising. Require explicit consent before activation.
9. Blockchain-Specific Privacy Considerations
Public Blockchain Data
Due to the inherent transparency of blockchain technology, certain transaction data including wallet addresses, transaction amounts, and smart contract interactions are publicly visible and immutable. Users should be aware that this information cannot be deleted or modified once recorded on the blockchain.
Cross-Chain Privacy
When using cross-chain services, your transaction data may be visible on multiple blockchain networks. Each network may have different privacy characteristics and regulatory frameworks.
Wallet Address Privacy
While wallet addresses are pseudonymous, they can potentially be linked to real-world identities through various means. Users should take appropriate precautions when sharing wallet addresses.
10. AI Data Processing
AI Model Training
We use anonymized data to train our AI models. This process involves removing personal identifiers while maintaining pattern recognition capabilities for market analysis and risk assessment.
Automated Decision Making
Our services may use AI for automated decision-making in areas such as risk assessment and transaction optimization. Users have the right to request human review of significant automated decisions.
AI Data Storage
Training data used for AI models is stored separately from personal information and is subject to strict access controls and regular audits.
11. Financial Data Protection
Transaction Monitoring
We monitor transactions for security and compliance purposes, including anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
Financial Records
We maintain financial records as required by applicable laws and regulations. This may include transaction histories, KYC information, and tax-related data.