/Privacy Policy

Privacy Policy

Last Updated: January 2, 2025

GDPR Compliant

Blockchain Privacy

Habify Labs LLC ("we," "our," or "us") operates the PACT Protocol platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our blockchain-based proof of activity compliance technology.

Your privacy is fundamental to our mission. PACT Protocol is designed with privacy-by-design principles, ensuring that personal data is protected at every level of our technology stack.

Information We Collect

Personal Information You Provide

Account Information: Email address, username, and profile data when you create an account
Communication Data: Messages, support requests, and feedback you send to us
Identity Verification: Documentation required for enhanced account features (when applicable)

Blockchain and Technical Data

Wallet Addresses: Public blockchain addresses you connect to our services
Transaction Data: On-chain transactions related to PACT Protocol smart contracts
Activity Data: Verified off-chain activities submitted through our oracle network
API Usage: API keys, request logs, and usage patterns for developers

Automatically Collected Information

Device Information: Browser type, operating system, and device identifiers
Usage Analytics: Page views, feature usage, and user interface interactions
Network Data: IP addresses, connection timestamps, and geographic location (general)
Performance Metrics: Application performance and error reporting data

How We Use Your Information

Service Provision

Process blockchain transactions
Verify activity compliance
Manage staking and rewards
Provide API access

Platform Improvement

Analyze usage patterns
Optimize performance
Develop new features
Debug and fix issues

Communication

Send service notifications
Provide customer support
Share protocol updates
Security alerts

Security & Compliance

Prevent fraud and abuse
Ensure regulatory compliance
Protect against security threats
Verify user identity

Data Protection & Security

We implement industry-standard security measures to protect your information:

Technical Safeguards

Encryption: AES-256 encryption for data at rest
TLS: End-to-end encryption in transit
Access Controls: Role-based permissions
Monitoring: 24/7 security monitoring

Blockchain Security: Immutable on-chain records
Key Management: Hardware security modules
Auditing: Regular security assessments
Backups: Encrypted, distributed backups

Important: While we implement robust security measures, the decentralized nature of blockchain technology means that some information (such as wallet addresses and transaction data) is publicly visible on the Polygon blockchain.

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

Service Providers

Trusted third-party services that help us operate our platform (hosting, analytics, customer support) under strict confidentiality agreements.

Legal Requirements

When required by law, court order, or regulatory authority, or to protect our rights and safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business.

Blockchain Transparency

Transaction data and wallet addresses are publicly visible on the Polygon blockchain by design.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access

Request copies of your personal data

Correction

Request correction of inaccurate data

Deletion

Request deletion of your personal data

Portability

Request transfer of your data

Restriction

Request limitation of data processing

Objection

Object to certain data processing

Blockchain Limitation: Please note that data stored on the blockchain (transaction records, wallet addresses) cannot be modified or deleted due to the immutable nature of blockchain technology.

International Data Transfers

PACT Protocol operates globally, and your information may be transferred to and processed in countries other than your own, including the United States. We ensure that such transfers comply with applicable privacy laws through:

Adequacy Decisions: Transfers to countries with adequate privacy protections
Standard Contractual Clauses: EU-approved data transfer agreements
Binding Corporate Rules: Internal data protection policies
Consent: Your explicit consent where required

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Data

Until account deletion + 30 days

Transaction Records

7 years (regulatory requirement)

Blockchain Data

Permanent (immutable)

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze platform usage:

Essential Cookies

Required for basic platform functionality (authentication, security)

Analytics Cookies

Help us understand usage patterns and improve the platform

Preference Cookies

Remember your settings and preferences (theme, language)

You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

Children's Privacy

PACT Protocol is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:

Post the updated policy on this page with a new "Last Updated" date
Notify users of material changes via email or platform notification
Provide advance notice for significant changes that affect your rights
Maintain previous versions for reference upon request

Your continued use of PACT Protocol after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Team

Email: privacy@habifylabs.io

Subject Line: "Privacy Policy Inquiry"

Response Time: 72 hours

Legal Department

Email: legal@habifylabs.io

For: Data subject rights, legal inquiries

Business Address: Available upon request

EU Representatives: For users in the European Union, we have appointed local representatives in accordance with GDPR requirements. Contact details are available upon request.