Privacy policy

INTRODUCTION

This Privacy Policy is provided by POAP Inc and its affiliated companies (“Company”; “we”; “us”; or “our”) and discloses how we collect and process information through the website www.poap.xyz (the “Service”), the Company App (the “App”), as well as any other media form, media channel, mobile website, or mobile application related, linked, or otherwise connected thereto (collectively, the “Services”). Please read this Privacy Policy carefully to understand our policies and practices regarding such information. If you do not agree with our policies and practices, you should not use the Service. By accessing or using this Service, you agree to this Privacy Policy.

OVERVIEW

  • This Service allows users to create, a/k/a mint, POAPs (“Issuers”) and users to collect POAPs (“Collectors”). Issuers and Collectors are collective referred to as “Users.”
  • The Service collects limited information from Users – generally an email address and/or Ethereum account – as further described below.
  • This Privacy Policy is subject to, and incorporated into, our Terms of Service.
  • For an overview of POAPs and the Service, please read our FAQs
  • You can exercise certain rights regarding your information as described in the YOUR RIGHTS, CHOICES AND OPT OUT section below.

INFORMATION COLLECTION

Voluntary: Our Service collects limited amounts of personal information from you. Personal information is that information which identifies, relates to, describes, references, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). The personal information we collect generally consists of contact information, such as email address and Ethereum account. Such information is only collected from you when it is voluntarily provided by you, such as by contacting us with questions or minting or receiving a POAP through the use of your email address or Ethereum account.

Automatic: We and our service providers or our third party partners may also automatically collect information from you when you visit our Service through cookies and other tracking technologies. We may store some information on your device or device hard drive as a cookie or similar type of file (such as clear gifs, web beacons, tags, and similar technologies that work on mobile devices) to collect data related to usage of the Service. "Cookies" are pieces of information that may be placed on your computer by a website for the purpose of collecting data to facilitate and enhance your communication and interaction with that website. Such data may include, without limitation, the address of the websites you visited before and after you visited the Service, the type of browser you are using, your Internet Protocol (IP) address, what pages in the Service you visit and what links you clicked on, the region where your device is located, and geo-IP data. We may use cookies to customize your visit to the Service and for other purposes to make your visit more convenient or to enable us to enhance our services.

We may work with third-party service providers, such as Google and Matomo, who use the technologies described in this section to conduct analytics to help us track and understand how visitors use our Service. For information about Google Analytics please click on this link: https://www.google.com/policies/privacy/partners/. To opt-out of Google Analytics, please copy and paste “tools.google.com/dlpage/gaoptout” into your browser and download the Google Analytics opt-out browser add-on. We are gradually migrating to Matomo; for more information on Matomo and to opt-out, please visit our Data Policy page.

HOW WE USE YOUR INFORMATION

We use information that we collect from you:

  • To deliver our Service and its contents to you;
  • To provide enabling the minting and receipt of a POAP;
  • To send marketing messages to you about our services;
  • To carry out our obligations and enforce our rights;
  • In any other way we may describe when we collect the information from you; and
  • For any other purpose with your consent.

Once your information is on the blockchain as a result of getting a POAP, it will be publicly accessible and outside of our control.

DISCLOSURE OF YOUR INFORMATION

We may disclose your information as described in this Privacy Policy or otherwise with your consent:

  • To contractors, service providers, and other third parties we use to support our business. However, such parties are only authorized by us to use the information for the benefit of us;
  • The contact information of a Collector may be shared by us with the applicable Issuer(s);
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which information held by Company about our Service users is among the assets transferred;
  • To comply with any court order, law, or legal process, including to respond to any lawful government or regulatory request;
  • To enforce or apply our policies or investigate fraud; and
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our users, clients or others.

Browsing Information
 Browsing Information may be disclosed to any number of third parties and used for any number of purposes as long as it is not directly linked to personal information that directly identifies you.

LINKS TO OTHER SITES AND SOCIAL MEDIA SERVICES

We may create links to other websites that we think may be of interest to you, such as Issuers or providers of various products and services. We do not endorse any other websites and providers by providing such links, and our privacy policy applies only to your use of our Service. We are not responsible for the privacy policies of any websites and services we link to on our Service, and you should read the privacy policies of each site you visit to determine what information that site may collect about you.

DATA RETENTION

We will retain your information for as long as your account is active or as needed for us to manage and provide our services and for our business needs. Even if we delete some or all of your personal information, we may continue to retain and use de-identified or aggregate data previously collected. However, you should not rely upon the Company as your sole source to store your information.

YOUR RIGHTS, CHOICES AND OPT OUT

If you are a situated in the European Economic Area, United Kingdom or Switzerland and the General Data Protection Regulation (“GDPR”) or a similar law applies to both you and the Company, as a data subject, you may have the following rights. The Company is not subject to the California Consumer Privacy Act (“CCPA”). The Company is only obligated to grant such rights when required by applicable law.

  • Right to access – This right allows individuals to obtain confirmation as to whether or not personal data concerning them is being processed and provide access to such personal data It also allows individuals to request details of the processing of their personal data including, without limitation, categories of recipients to whom the personal data have been or will be disclosed and purposes of processing.
  • Right to rectify – This right allows individuals to rectify any inaccurate personal data about them.
  • Right to restrict processing – This right allows individuals to block or suppress processing of personal data under certain circumstances.
  • Right to be forgotten - This right is also known as the “right to erasure”. It is an individual’s right to have personal data erased or to prevent processing in specific circumstances.
  • Right of data portability - This right allows individuals to move, copy or transfer personal data from one place to another in a secure manner without interrupting the integrity and usability of the information.
  • Right to object to processing - This right allows individuals to object to certain types of processing, including direct marketing, profiling and providing for purposes of scientific or historical research and statistics.

POAP Inc., 82 Nassau Street #60906, New York NY 10038 [email protected], is the Controller of all personal data we collect through the Service.

We shall only process your personal data pursuant to a lawful basis, which will usually be with your consent, when we have a legitimate interest, or to perform a contract to which we are subject. Additionally, if we rely on consent for the processing of your personal data, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

To exercise your rights under the GDPR, please contact us at [email protected]. Please note that in order for you to assert these rights, we may need to verify your identity to confirm your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. In order to verify your identity, we may need to gather more personal data from you than we currently have.

If you are situated in the EU, UK or Switzerland and have any complaints regarding our privacy practices, you have the right to complain to a supervisory authority.

SECURITY

We take the security of our data and information seriously. We take what we believe are reasonable precautions to protect against unauthorized access to our systems and to prevent data from being disclosed to unauthorized parties. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure.

Once a POAP is minted and received by a Collector, it is outside of our control and we no longer have any ability to control or monitor its use.

CHANGES TO OUR PRIVACY POLICY

We may change this Privacy Policy at our discretion at any time. If we do make any changes, such change will appear on this page of our Service. The date the Privacy Policy was last revised is identified at the top of the page. Your continued use of the Service following any changes means that you have accepted, consent to, and agree to be bound by such revised Privacy Policy.

UNITED STATES OF AMERICA / CROSS BORDER DATA TRANSFERS:

Our Service is maintained in the United States. By using the Service, you authorize the export of personal information to the USA and its storage and use as specified in this Privacy Policy. We transfer personal information from the EU, UK and Switzerland to the USA and other countries, some of which have not been determined by the European Commission or other regulators to have an adequate level of data protection. Information stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in the USA.

CONTACT US

If you have any questions about this Privacy Policy, please contact us at [email protected].