Privacy Policy

This privacy policy outlines how EAPES collects, uses, protects, and shares personal information you provide to us or that we collect when you use our website EAPES.COM and its associated services, including the "My Account - Profile" section. It complies with Quebec’s Act respecting the protection of personal information in the private sector (Law 25), the European Union’s General Data Protection Regulation (GDPR), and applicable privacy laws in the United States.

1. Information We Collect

• Identifying Information: Name, email address, wallet address (MultiversX, Solana).
• Technical Information: IP address, browser and device details.
• Site Behavior: Navigation patterns, interactions, and click data.
• Voluntarily Submitted Information: Information provided through forms, staking interfaces, preorders, etc.
• Profile Information:
  • City
  • Username or Herotag
  • Twitter @
  • Discord @
  • Solana address

This profile information is entirely optional and stored in a database hosted on Digital Ocean. Access to this section requires you to log in via your xPORTAL or MultiversX Wallet. You may modify or delete this information at any time through your account settings.

1.1 Sensitive Personal Information

Certain data, such as wallet addresses (MultiversX, Solana), is considered sensitive due to its connection to financial information. We implement enhanced security measures, including encryption and strict access controls, to safeguard this data.

2. Purposes of Information Collection

• To operate and deliver our services, including the dApp, staking, marketplace, and global community map.
• To enhance user experience and provide personalized support.
• To conduct statistical analyses to better understand service usage.
• To prevent fraud and ensure compliance with legal obligations.
• To manage access to rewards, token interactions, and DAO governance participation.
• To display your profile on the global community map (if you opt to provide this information).

3. Legal Basis for Processing

• Your explicit consent, which you may withdraw at any time.
• The performance of a contract to which you are a party, such as the use of our services.
• Our legal obligations, including tax and anti-money laundering requirements.
• Our legitimate interests, such as improving our services and ensuring platform security, provided these do not override your rights and freedoms.

4. Retention Period of Information

• Account Data: Retained while your account is active and for 5 years after closure to meet legal obligations.
• Transaction Data: Kept for 7 years to comply with tax and accounting requirements.
• Usage Data: Stored for 12 months for analysis and service improvement.
• Profile Information: Retained as long as you choose to display it, with deletion available anytime via your account.

Note: blockchain transaction records are retained indefinitely due to their immutable nature.

5. Automated Processing and Profiling

We use Google Analytics for anonymized, aggregated analysis. No automated decision-making is performed without your consent.

6. Third-Party Services

• Google Analytics: For user behavior analysis.
• Cloudflare: To secure communications and protect against attacks.
• Digital Ocean: For secure data hosting.
• MultiversX: For dApp transaction processing.
• xPORTAL: For secure wallet login.

7. Cookies and Similar Technologies

We use cookies for functionality and analysis. Manage preferences via your browser. See our Cookie Policy.

8. Consent

Consent is obtained via checkbox at registration or first use. Withdraw consent anytime by emailing legal@eapes.com.

9. Protection of Minors

Services are for users 18+. We do not knowingly collect data from minors. Such data will be deleted if discovered.

10. Your Rights

• Right of Access
• Right to Rectification
• Right to Erasure
• Right to Portability
• Right to Object
• Right to Withdraw Consent

To exercise these rights, contact legal@eapes.com.

10.1 Right to Erasure and Blockchain

Due to blockchain immutability, some data cannot be deleted. We will dissociate personal info as much as possible.

11. Sharing of Information

We do not sell personal info. Shared only with service providers under strict contracts for limited use.

12. International Transfers of Information

Data may be processed in Canada, the US, and the EU under appropriate safeguards like standard contractual clauses.

13. Security Measures

• SSL encryption
• MultiversX blockchain security
• Strict access control
• Secure infrastructure
• Security audits

Wallet addresses are additionally encrypted and access-restricted.

14. Data on the Blockchain

Transactions are public and immutable. We minimize personal info stored on-chain and secure off-chain data robustly.

15. Data Breach Notification

We notify authorities and affected users promptly if a breach poses a risk to rights and freedoms.

16. Data Protection Impact Assessments

We assess privacy risks of high-risk activities such as international data transfers and mitigate them accordingly.

17. Updates to This Policy

We may update this policy and notify users of significant changes via email or website notice.

18. Complaints and Remedies

File complaints with:

• Quebec: Commission d’accès à l’information du Québec
• EU: Your country’s data protection authority

19. Contact Information

Personal Information Protection Officer: Jean-Francois Mercier

Email: legal@eapes.com

Address: 1055 Rue Lucien-L'Allier Unit #886 Montreal, QC H3G 3C4