Privacy Policy

1. Introduction and Controller

Heart3 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. For users in the European Union and the European Economic Area, we process personal data in accordance with the EU General Data Protection Regulation (GDPR). The data controller responsible for your data is Heart3 (you can contact us at the address below).

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, username)
• Profile information and content you create
• Payment and transaction information
• Communications with us

We also automatically collect certain information about your device and usage of our platform.

3. How We Use Your Information and Legal Basis (GDPR)

We use the information we collect to: provide, maintain, and improve our services; process transactions; send technical and support messages; respond to you; and analyze usage. Where the GDPR applies, we process your data on the following legal bases: (a) performance of a contract (Art. 6(1)(b) GDPR) for account and transaction-related processing; (b) your consent (Art. 6(1)(a) GDPR) where we ask for it explicitly; (c) legitimate interests (Art. 6(1)(f) GDPR) for security, analytics, and platform operation, where balanced against your rights; (d) legal obligation (Art. 6(1)(c) GDPR) where we must comply with law.

4. Blockchain and Crypto Transactions

Heart3 operates on blockchain technology. Please note that blockchain transactions are public and permanent. Wallet addresses and transaction details may be visible on public blockchains. We do not control or store your private keys.

5. Data Sharing

We do not sell your personal information. We may share your information only:

• With your consent
• To comply with legal obligations
• To protect our rights and safety
• With service providers who assist us in operating our platform

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure.

7. Your Rights (Including GDPR Data Subject Rights)

You have the right to access, correct, update, or delete your personal information, where applicable through your account settings or by contacting us. For individuals in the EU/EEA, under the GDPR you also have: the right of access (Art. 15); right to rectification (Art. 16); right to erasure ("right to be forgotten") (Art. 17); right to restriction of processing (Art. 18); right to data portability (Art. 20); right to object to processing (Art. 21); and, where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You have the right to lodge a complaint with a supervisory authority in the EU/EEA country of your residence, place of work, or place of the alleged infringement. We will respond to your requests in accordance with applicable law.

8. Cookies

We use cookies and similar tracking technologies to track activity on our platform and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. International Transfers and Retention

Your data may be processed in countries outside the EU/EEA (e.g. where our service providers are located). Where we transfer personal data from the EEA to a country not recognized as providing an adequate level of data protection, we implement appropriate safeguards (e.g. standard contractual clauses approved by the European Commission or equivalent). We retain your data only as long as necessary for the purposes set out in this policy or as required by law.

11. Contact Us and Data Protection

For any questions about this Privacy Policy or to exercise your data protection rights, contact us at hello@heart3.org. For EU/EEA users, you may also contact our data protection contact at the same address.