onchain.industries Privacy Notice

onchain.industries is operated by Csyndicate Ltd ("we", "our", "us"). We are committed to protecting and respecting your privacy. In summary, we collect as little information as possible on users of the service and queries made - only that information which is required to operate and optimise the service is stored, i.e. user credentials (indefinitely for active accounts) and cached search results (for a short time period to optimise performance).

Due to the nature of the results being returned, we ask that all users carefully consider the privacy regulations applicable to them when using our platform. It’s important that all investigations using our tool are being conducted within applicable frameworks and guidelines.

This Privacy Notice explains in more detail how we collect, use, disclose, and safeguard your personal data when you use our onchain.industries platform and related services.

1. Information We Collect

1.1 User Account Information

When you register for a onchain.industries account, we collect your email address for log-in and authentication purposes. We do not collect any other personal information about users in order to provide anonymity when using our service.

1.2 Wallet Address Queries

When you submit a crypto wallet address to search via onchain.industries, we process that wallet address and any publicly available personal data returned in the search results. The data returned may include profile information, social media links, and blockchain identifiers associated with the wallet address. We do not intentionally return or otherwise process any “special category personal data” (see definition below).

“Special category personal data” refers to sensitive personal information that requires a higher level of protection, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person's sex life or sexual orientation.

1.3 Query and Transaction Data

We process and collect information about your onchain.industries searches, including the wallet addresses queried, timestamps, and the number of credits used. We do not store the queried wallet addresses.

If you purchase query credits via our website, we collect transaction data as needed to process the payment. This is done through our third-party payment processor, Stripe. When you initiate a purchase, you will be directed to Stripe's secure payment page, where you will provide your payment information directly to Stripe. This may include your name, billing address, credit card number, and other necessary details to complete the transaction.

Please note that we do not collect, store, or process your full credit card information. We only receive a transaction confirmation and a unique token from Stripe that allows us to verify the payment and associate it with your onchain.industries account.

Stripe has its own privacy policy that governs the handling of your payment information, which you can review at stripe.com/privacy. We encourage you to familiarise yourself with Stripe's privacy practices before making a purchase.

When processing your payment, Stripe may collect additional information about the transaction, such as the IP address, device information, and other data necessary for fraud prevention and security purposes. This information is processed by Stripe in accordance with their privacy policy and is not shared with us, except in cases where it is necessary to prevent fraud or comply with legal obligations.

By making a purchase through onchain.industries, you acknowledge that your data will be handled in accordance with their privacy policy.

1.4 Cookies

onchain.industries uses the following cookies:

• __cf_bm (1 hour): Set by Cloudflare for bot management
• _cfuvid (session): Set by Cloudflare
• __client_u (1 year): Set by Clerk

You can manage cookies via your browser settings. Refer to our Cookie Notice for more details.

2. Controller and Processor

Csyndicate acts as a data controller for the personal data we collect about users of the onchain.industries service, as described in Section 1 (Information We Collect). This includes user account information, query and transaction data, and any query metadata.

However, when it comes to the personal data returned in search results, Csyndicate acts as a data processor on behalf of the user who initiated the search. In this context, the user is the data controller, determining the purposes and means of processing the returned data. Csyndicate merely processes this data on the user's behalf to provide the onchain.industries service.

If you, as a user of onchain.industries, determine the purposes and means of processing any personal data returned in search results, you are responsible for complying with your obligations as a data controller under applicable data privacy and protection laws.

3. How We Use Your Information

2.1 Providing and Improving Our Services

We process your account information and wallet address queries to provide the onchain.industries service, including returning any relevant search results. Wallet addresses, i.e. queries, are not stored. Returned search results are cached temporarily (for approximately 1-2 days) to allow user access.

2.2 Analytics and Service Improvement

We store metadata to the extent to which we need in order to make analytics/aggregate stats to track user spend and understand/debug the usage of our platform.

This processing is based on our legitimate interests in monitoring and enhancing the platform's performance, while safeguarding user privacy by preventing the association of specific searches with individual users. It is also required for the operation of the onchain.industries credit system.

2.3 Regulatory Compliance

We may process your personal data as needed to comply with our legal obligations, such as financial record keeping or responding to legal requests.

4. How We Share Your Information

3.1 Service Providers

We share your personal data with third-party service providers who support the operation of onchain.industries, including but not limited to: AWS (hosting), MongoDB (database), Clerk (authentication), Stripe (payment processing), and Cloudflare (security). These providers may vary from time to time, and are in all cases contractually bound to protect your data.

3.2 Legal Obligations

We may disclose your information if required by law, court order, or other valid legal process. We will attempt to notify you unless prohibited.

5. Information for Wallet Address Subjects

4.1 Categories of Personal Data

When a onchain.industries user searches for a crypto wallet address, we may collect and process the following categories of personal data about the individual associated with that address:

• Profile information, such as username, name, bio, and profile picture
• Social media links and website URLs
• Blockchain identifiers and transaction data

This personal data is collected from publicly available sources and is not directly obtained from the individual.

4.2 Purposes and Legal Basis for Processing

We process this personal data for the purpose of providing the onchain.industries service to our users, which includes returning relevant search results about the wallet address. The legal basis for this processing is our legitimate interest in offering a wallet tracing service for investigative and due diligence purposes.

4.3 Data Retention

Personal data collected about wallet address subjects will be retained for as long as necessary to provide the onchain.industries service and for any additional period required by applicable laws. Cached search results on servers are deleted within 7 days.

4.4 Your Rights

As a wallet address subject, you have certain rights under the UK General Data Protection Regulation 2018 and the UK Data Protection Act 2018 (together, “UK GDPR”), such as the right to access, rectify, or erase your personal data, subject to certain limitations. You also have the right to object to the processing of your data or to lodge a complaint with the relevant supervisory authority. To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

6. Data Transfers

Your personal data may be transferred to and stored in locations outside the United Kingdom (UK) or the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we transfer your data internationally, we'll ensure it has an appropriate level of protection and that the transfer is in line with legal requirements, such as the UK GDPR.

We may use legally-recognised transfer mechanisms, such as Standard Contractual Clauses approved by the UK authorities, or rely on specific derogations under UK GDPR, such as when the transfer is necessary for the performance of a contract or for the establishment, exercise, or defence of legal claims.

Please note that following Brexit, the UK is no longer a member of the EEA, which includes all member states of the European Union and Iceland, Liechtenstein, and Norway.

Regardless of where your data is processed, we apply the same protections described in this Privacy Notice and comply with all relevant data transfer requirements. If you have any questions about the specific safeguards applied to international data transfers, please contact us using the information provided in the "Contact Us" section below.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide our services. Cached search results are deleted within 7 days. We retain anonymised query metadata indefinitely for analytics purposes. Please contact us for more details on applicable retention periods.

8. Your Rights

Depending on your location and subject to applicable law, you may have certain rights regarding your personal data, such as the right to access, rectify, delete, restrict processing, object to processing, or lodge a complaint with a supervisory authority.

To exercise any of these rights, please submit a request to privacy@onchain.industries.io. We will respond to your request within one month, unless the request is particularly complex or you have made multiple requests, in which case we may extend the response period by up to two additional months. We may also request proof of identification to verify your identity before responding to your request.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

10. Third-Party Links

onchain.industries (including this Privacy Notice) may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties, so please review their policies.

11. Children's Privacy

onchain.industries is not intended for use by children (e.g. those under the age of 18). We do not knowingly collect personal data from children. If we learn that we have collected children's data without parental consent, we will take steps to delete it.

12. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. We will post any changes on this page and update the "Last Updated" date above. Please check back regularly to stay informed.

13. Contact Us

If you have any questions about this Privacy Notice or our privacy practices, please contact our Data Protection Officer (DPO) at privacy@onchain.industries.io.

onchain.industries is operated by Csyndicate Ltd ("we", "our", "us"). We use cookies on the onchain.industries platform to enhance your user experience, improve our services, and analyse platform usage. This Cookie Notice explains what cookies are, how we use them, and how you can manage your cookie preferences.

What are cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They allow the website to remember your actions and preferences over time, such as your login information or language settings.

How we use cookies

We use the following types of cookies on onchain.industries:

1. Essential Cookies: These cookies are necessary for the platform to function properly and cannot be switched off in our systems. They are usually only set in response to actions made by you, such as setting your privacy preferences or logging in.
2. Analytical Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our platform. They help us to know which pages are the most and least popular and see how visitors move around the site.
3. Functional Cookies: These cookies enable the platform to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.

The specific cookies used by onchain.industries are:

• __cf_bm (1 hour): Set by Cloudflare for bot management
• _cfuvid (session): Set by Cloudflare
• __client_u (1 year): Set by Clerk

Managing your cookie preferences You can manage your cookie preferences by adjusting your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites.

Please note that if you choose to disable cookies, some features of the onchain.industries platform may not function properly.

For more information on how to manage cookies, please refer to your browser's help documentation or visit allaboutcookies.org.

Changes to this Cookie Notice We may update this Cookie Notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to periodically review this page for the latest information on our cookie usage.

Contact Us

If you have any questions about this Cookie Notice, please contact us at privacy@onchain.industries.io.

For more information about how we collect, use, and protect your personal data, please refer to our Privacy Notice.