01 · PRIVACY POLICY
Who this policy covers
This Privacy Policy explains how Hybrid-Chain (“Hybrid-Chain”, “we”, “us”, or “our”) handles personal data when you visit hybrid-chain.com, create or use an account, interact with our applications, APIs, developer tools, communications, or other products and services that link to this policy (together, the “Services”).
“Personal data” means information that identifies, relates to, describes, or can reasonably be linked to an individual. Data that has been irreversibly anonymized is not personal data. A business customer may control personal data it submits to the Services; in that case, the business customer’s privacy notice may also apply.
02 · PRIVACY POLICY
Personal data we collect
The data we collect depends on how you interact with the Services and which features you use. It may include:
- Identity and account data: name, email address, organization, role, account identifiers, authentication records, and security settings.
- Verification and compliance data: identity documents, liveness or biometric verification outputs, eligibility information, sanctions or fraud-screening results, and related evidence where a service requires them. Source documents and cleartext private evidence are not intentionally published to public ledgers.
- Wallet, asset, and transaction data: wallet addresses, transfer instructions, orders, settlement records, payment references, digital-asset activity, and cryptographic evidence associated with your use of the Services.
- Commercial and support data: products requested, subscriptions, billing details, agreements, contact-form submissions, support messages, feedback, and other communications.
- Technical and usage data: IP address, device and browser information, timestamps, pages and features used, diagnostic events, security logs, and approximate location inferred from network information.
- Information you choose to provide: files, messages, profile details, API payloads, and other content submitted through the Services.
Please do not send private keys, seed phrases, passwords, or unnecessary sensitive information through contact forms or support channels.
03 · PRIVACY POLICY
How we collect data
We collect personal data directly from you, automatically when you use the Services, from organizations that provide you access, from service providers acting on our behalf, from integrated networks and applications you choose to use, and from public sources such as public blockchains, sanctions lists, company registers, and fraud-prevention databases where permitted.
If you provide personal data about another person, you must have authority to do so and provide any notice or obtain any permission required by applicable law.
04 · PRIVACY POLICY
How and why we use data
We use personal data to:
- provide, maintain, personalize, and improve the Services;
- create and secure accounts, authenticate users, and prevent unauthorized access;
- execute requested transactions, deliver platform features, and provide support;
- verify identity, manage risk, detect fraud or abuse, and protect users and the Services;
- communicate about service activity, security, product updates, and requested information;
- measure performance, troubleshoot errors, and develop new features;
- administer commercial relationships, billing, audits, and records;
- comply with legal obligations and enforce our agreements; and
- send marketing communications where requested or otherwise permitted, with an available opt-out.
Depending on the context and applicable law, our legal bases may include performing a contract, taking requested pre-contract steps, complying with legal obligations, protecting vital interests, pursuing legitimate interests that are not overridden by individual rights, and consent. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.
05 · PRIVACY POLICY
Public networks and cryptographic evidence
Some Services create or interact with records on public or permissioned distributed ledgers. Ledger records may be visible to others and may be difficult or impossible to alter or delete. Before initiating an activity, review what information will be published. Do not place personal data, confidential information, private keys, or credentials in public transaction fields.
Hybrid-Chain is designed to favor commitments, proofs, hashes, pseudonymous identifiers, and minimum necessary disclosures over publishing cleartext private information. These controls reduce exposure but do not make public ledger activity anonymous in every circumstance.
06 · PRIVACY POLICY
How we disclose data
We may disclose personal data to:
- vendors and professional advisers that provide hosting, security, communications, analytics, payment, verification, support, audit, legal, or other services under appropriate obligations;
- blockchain networks, validators, counterparties, financial institutions, payment providers, exchanges, or other participants when needed to perform an instruction you initiate;
- your organization, workspace administrators, or authorized users where an account is managed by an organization;
- authorities, regulators, courts, or other parties when disclosure is legally required or reasonably necessary to protect rights, safety, integrity, or prevent fraud;
- a successor or prospective successor in connection with a merger, financing, restructuring, acquisition, or transfer of assets, subject to appropriate safeguards; and
- other parties at your direction or with your permission.
We do not sell personal data for money. We do not share personal data with third parties for their independent direct marketing without permission where permission is required.
07 · PRIVACY POLICY
International processing
The Services are global. Personal data may be processed in countries other than the country where you live. Where required, we use recognized transfer mechanisms and safeguards designed to provide an appropriate level of protection. Public blockchain data may be replicated globally by independent network participants outside our control.
08 · PRIVACY POLICY
Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including providing the Services, maintaining security and audit trails, resolving disputes, enforcing agreements, and meeting legal, accounting, or regulatory requirements.
Retention periods vary by data type, sensitivity, service context, legal requirements, and whether the data is needed to establish or defend claims. We may anonymize data instead of deleting it. Records written to a distributed ledger are governed by that network’s design and may remain available indefinitely.
09 · PRIVACY POLICY
Security and account responsibility
We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encryption, logging, and separation of public evidence from private source data where appropriate. No system or transmission method is completely secure, and we cannot guarantee absolute security.
You are responsible for protecting your devices, credentials, private keys, recovery materials, and authentication factors. Contact us promptly if you believe your account or information has been compromised.
10 · PRIVACY POLICY
Your choices and privacy rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to appeal or complain to a privacy authority. These rights may be limited where we must retain data, protect others, preserve security, or comply with law.
To submit a request, email [email protected] or use our contact page. We may verify your identity and authority before acting. Authorized agents may submit requests where applicable, subject to verification.
You may unsubscribe from marketing using the link in a message. Essential service and security communications will continue while you maintain an account.
11 · PRIVACY POLICY
Children
The Services are not directed to children, and we do not knowingly collect personal data from anyone who cannot lawfully consent to the processing or enter the relevant agreement. If you believe a child has provided personal data without valid authorization, contact us so we can review and take appropriate action.
12 · PRIVACY POLICY
Third-party services
The Services may link to or integrate with third-party sites, wallets, applications, networks, and services. Their privacy practices are governed by their own notices. We encourage you to review those notices before connecting or providing information.
13 · PRIVACY POLICY
Changes and contact
We may update this policy as the Services, technology, or legal requirements evolve. The current version and effective date will remain available here. If a change materially affects how we handle personal data, we will provide additional notice where appropriate.
Questions, concerns, and privacy requests may be sent to [email protected] or submitted through the Hybrid-Chain contact page.