1. Information We Collect

To comply with global fintech regulations and ensure a secure and compliant environment, we collect various types of personal information:

• Identity Information: Name, date of birth, nationality, home address.
• Contact Information: Phone number, email address.
• Occupation: Job title, employer information, and related employment details.
• Transactional Data: Token purchases/sales, payments, contributions, rewards earned, referrals information, and participation in the Bluebag ecosystem.
• Device and Network Information: IP address, device identifiers, browser type, operating system, and location data.
• KYC and AML: Documentation such as government-issued ID, proof of address, and other information as part of Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures.
• Financial Data: Payment method information, including credit card details processed by Moonpay, and transaction records.
• Biometric Information: For identity verification purposes, we may collect biometric information, such as facial recognition or fingerprint data, where applicable. This data will be securely processed and stored in compliance with applicable data protection laws.

2. How We Use Your Information

We collect and use personal information for the following purposes:

• Regulatory Compliance: To meet legal obligations, including KYC, AML, and combating the financing of terrorism (CFT) requirements.
• Service Delivery: To facilitate token transactions, rewards, airdrops, and other ecosystem activities.
• Fraud Detection: Monitoring accounts for suspicious activity or unauthorized transactions.
• Customer Support: To respond to your inquiries, provide technical support, and improve your experience.
• Marketing and Communications: With your consent, we may send promotional materials, newsletters, and other communications related to the Platform and its services.
• Research and Development: To improve our services, conduct performance monitoring, and generate aggregated data for analytics and reporting.

As part of our commitment to transparency and accuracy, external auditors regularly review the accuracy of the information we display, including user wallet balances, transaction history, and related data. These audits help ensure that your data is protected and accurately reflected.

3. Legal Bases for Processing

We rely on several legal bases to process your personal data, including:

• Contractual Necessity: Processing required to provide the services you have requested.
• Compliance with Legal Obligations: Fulfillment of regulatory requirements, including AML/KYC compliance.
• Legitimate Interests: Processing necessary to detect fraud, prevent illicit activities, and enhance platform security.
• Consent: Where applicable, for marketing and communications purposes.

4. Sharing and Disclosure of Information

We may share your personal information under the following circumstances:

• Regulatory Authorities: We may disclose information to regulators, law enforcement, or financial institutions as required by law or to meet compliance obligations.
• Third-Party Service Providers: We may share your information with service providers who assist us in providing services, such as payment processors (e.g., Moonpay), cloud storage providers, and KYC/AML verification services.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity, subject to the same privacy obligations.
• Legal Proceedings: We may disclose information if required by a court order or other legal process, or to defend against legal claims.
• Bluebag.app wallets and tokens operate under the Solana Blockchain. Like any other blockchain decentralized infrastructure, all wallets, balances, transactions, and history will be publicly available.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, loss, theft, or misuse, including:

• Encryption: All sensitive data, including personal and financial information, is encrypted in transit and at rest.
• Access Controls: Only authorized personnel with a need to know have access to some of your information.
• Monitoring: We continuously monitor our systems for vulnerabilities and suspicious activities.
• Other security features: For safety reasons, we do not make public all the ways we use to keep your privacy and data secure.

As part of our broader commitment to security and privacy, external auditors regularly audit Bluebag.app's infrastructure, ensuring that all information displayed, including wallet balances and transactional data, is accurate, secure, and compliant. These audits also include data protection, cybersecurity, and compliance with industry regulations.

Unavailability of Certain Personal Information: For your security and privacy, some personal information may be unavailable upon request due to legal or regulatory requirements. We may restrict access to specific data (e.g., KYC or AML-related records) as required.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including compliance with legal, regulatory, or contractual obligations. The retention periods may vary depending on the nature of the data and applicable regulations.

7. User Rights

As a data subject, you have certain rights regarding your personal information, including the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Deletion: Request the deletion of your personal data, subject to certain conditions.
• Restriction of Processing: Limit the processing of your data in certain circumstances.
• Objection: Object to the processing of your data, including for marketing purposes.
• Portability: Request a transfer of your personal data to another organization, where applicable.

8. International Data Transfers

Your personal information may be transferred to and stored in countries outside of your jurisdiction, including in jurisdictions that may not provide the same level of data protection as your home country. By using the Platform, you consent to these transfers.

9. Use of Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your user experience, analyze website traffic, and personalize content and ads. You can control cookie settings through your browser or device settings.

10. Children’s Privacy

We do not knowingly collect personal information from individuals under the age of 18. If you are a parent or guardian and believe we have collected information from a child, please contact us to have it removed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting an updated policy on the Platform.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at: privacy@bluebag.app