Privacy policy

Account data: email address, chosen username, hashed password (handled by our authentication provider — we never see or store your password), your referral code and the code you registered with.

Financial records: deposit requests, transaction hashes, verified amounts, sending and receiving addresses, withdrawal requests and destination addresses, and every entry in your internal ledger.

Activity data: task assignments and completion times, VIP activations, notifications, and timestamps of these events.

Technical data: IP address and user agent, used for rate limiting, abuse prevention and security logging.

To operate your account, verify deposits against the blockchain, calculate and pay rewards, process withdrawals, enforce the daily task limits and withdrawal rules, prevent fraud and abuse, and meet legal obligations.

We do not sell your personal data, and we do not use it for advertising or behavioural profiling.

Access is restricted by database row-level security: signed-in users can read only their own profile, balances, deposits, withdrawals, tasks, ledger and notifications. Other members of your team are shown to you with their email addresses masked. Administrators can access account and financial records where necessary to operate the platform and to investigate abuse; every privileged action is recorded in an audit log.

We share data with our infrastructure providers (application hosting, database and authentication) and with public blockchain APIs when we verify a transaction hash you have submitted. We disclose data to authorities only where legally required.

Financial and ledger records are retained permanently: the ledger is append-only by design and cannot be edited or deleted, which is what makes balances auditable. Task history is likewise kept rather than purged. Account data is retained while your account exists and for as long afterwards as we are required to keep it.

Depending on where you live you may have the right to access, correct, export or erase your personal data, and to object to certain processing. Contact support to exercise them. Note two limits: entries in the financial ledger cannot be altered or removed, and data already written to a public blockchain is outside our control entirely.

Authentication is handled by a managed provider. Authorisation is enforced in the database itself rather than only in the application, financial operations run as atomic transactions, and privileged actions are rate limited and audit logged. No system is perfectly secure: use a unique, strong password and keep your email account protected.

We use only the cookies required to keep you signed in and to maintain your session securely. There are no advertising or third-party tracking cookies.

Questions about this policy can be sent to the support address published in the application. See also our terms of service.