Privacy Policy

1. Introduction

We respect your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.

2. What Information We Collect

You provide: Name, email, payment information (handled by Stripe), account details, and communications with us.

We collect automatically: Device information, how you use our services, IP address, and cookies.

Wallet: We see your public wallet address and transactions on the blockchain, but not your private keys. Blockchain transactions are publicly visible.

3. How We Use Your Information

We use your information to: provide our services, process payments, manage your account, send you updates, respond to your questions, improve our services, prevent fraud, comply with the law, and send you marketing emails (only with your permission).

4. How We Share Your Information

Service providers: We share information with Stripe (payments), hosting providers, and email services.

Legal reasons: If required by law or to protect our rights and your safety.

With your consent: We share your information when you give us permission.

5. Stripe Payment Processing

Stripe handles all payments. We don't store your full credit card information. Stripe's privacy practices are governed by their Privacy Policy at https://stripe.com/privacy.

6. Cookies

We use cookies to make our services work better, remember your preferences, understand how you use our site, and for marketing. You can control cookies through your browser settings.

6.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of our Services.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Secure payment processing through Stripe (PCI DSS compliant)
• Employee training on data security and privacy

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we no longer need your information, we will securely delete or anonymize it. However, certain information may be retained for legal, regulatory, or legitimate business purposes.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your information in a portable format
• Objection: Object to our processing of your information
• Restriction: Request restriction of processing of your information
• Withdraw consent: Withdraw your consent where processing is based on consent

To exercise these rights, please contact us at privacy@heartchainlabs.com. We will respond to your request within a reasonable timeframe as required by applicable law.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, please contact us at privacy@heartchainlabs.com.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the rights described in Section 9 above.

Our legal basis for processing your personal information includes:

• Contract: Processing necessary to perform our contract with you
• Legitimate interests: Processing necessary for our legitimate business interests
• Consent: Processing based on your explicit consent
• Legal obligation: Processing necessary to comply with legal requirements

You have the right to lodge a complaint with a supervisory authority in your jurisdiction.

12. Children's Privacy

Our Services are not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete such information.

13. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. By using our Services, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our Services after such changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: