This Privacy Policy explains how BRICKX Protocol ("BRICKX", "we", "us", "our") collects, uses, shares, stores, and protects your personal data when you visit our websites, create an account, complete identity verification (KYC), purchase BRX, or otherwise use our platform (collectively, the "Services"). It also describes your rights over your personal data and how to exercise them.
Please read this Policy together with our Terms of Token Sale and Risk Disclosure. By using the Services, you acknowledge that you have read and understood this Policy.
BRICKX Protocol operates the BRICKX websites and token platform and is the controller responsible for the personal data described in this Policy. For any privacy question, request, or complaint, contact us at privacy@brickxprotocol.io.
We collect the following categories of personal data:
We do not intentionally collect special-category data (such as health, religion, or political views). Please do not send us such data.
Where data-protection law requires a legal basis (such as the EU/UK GDPR or Indonesia's Personal Data Protection Law), we rely on the bases below:
| Purpose | Legal basis |
|---|---|
| Create and manage your account; operate the token sale; record allocations and deliver tokens; provide customer support | Performance of a contract with you |
| Identity verification (KYC), sanctions screening, fraud prevention, and anti-money-laundering (AML) record-keeping | Compliance with a legal obligation; and our legitimate interest in preventing fraud and abuse |
| Secure the platform, detect and investigate abuse, maintain logs, and enforce our Terms | Our legitimate interests (security and integrity of the Services) |
| Send service/transactional emails (verification codes, confirmations, status updates) | Performance of a contract; legitimate interests |
| Traffic analytics and product improvement; optional marketing communications | Your consent (which you may withdraw at any time) |
| Comply with lawful requests, regulators, courts, and applicable laws | Compliance with a legal obligation |
Our websites use cookies and similar technologies. Strictly necessary cookies keep you signed in and the site functioning. We also use Google Analytics, which sets cookies/identifiers to measure traffic and usage in aggregate; this helps us understand and improve the Services.
You can control cookies through your browser settings and can opt out of Google Analytics using Google's opt-out browser add-on. Disabling some cookies may affect site functionality. Where required by law, we will request your consent before setting non-essential cookies.
We do not sell your personal data. We share it only as described here:
We use trusted providers that process data on our behalf, under contracts that restrict them to our instructions:
| Provider | Purpose |
|---|---|
| Sumsub | Identity verification (KYC) and sanctions/PEP screening |
| Resend | Sending transactional/service emails |
| Supabase | Database and secure storage of account and KYC records |
| Railway | Backend application hosting |
| Vercel | Website and app hosting / content delivery |
| Google Analytics | Aggregate traffic analytics |
| Polygon RPC / blockchain | Reading and confirming on-chain payments |
We may disclose data to law-enforcement, regulators, tax authorities, courts, or other third parties where we believe in good faith that disclosure is required by law or necessary to comply with legal process, enforce our Terms, prevent fraud or harm, or protect our rights, users, or the public.
If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy.
BRICKX operates internationally and our providers may store or process your data in countries other than your own. Those countries may have data-protection laws that differ from yours. Where we transfer personal data across borders, we take steps to ensure an appropriate level of protection, such as using providers that offer recognized safeguards (for example, standard contractual clauses) and applying technical and organizational security measures.
Payments and token allocations are recorded on the public Polygon blockchain. Information written to a blockchain — including wallet addresses, transaction amounts, and timestamps — is public, permanent, and outside our control. It cannot be changed, hidden, or deleted by us or by you, and may be visible to anyone and linked to other information. Please consider this before transacting. Our deletion and erasure obligations do not, and cannot, extend to data recorded on a public blockchain.
When data is no longer needed, we delete it or irreversibly anonymize it. Data on the blockchain remains as described in Section 8.
No method of transmission or storage is completely secure. While we apply reasonable safeguards, we cannot guarantee absolute security. If we become aware of a personal-data breach that is likely to affect you, we will notify you and the relevant authorities where required by law.
Subject to applicable law, you have the right to:
To exercise any right, email privacy@brickxprotocol.io. We may need to verify your identity before acting on a request. We will respond within the timeframe required by applicable law. Exercising your rights is free, although we may charge a reasonable fee or decline manifestly unfounded or excessive requests where the law allows.
The Services are intended only for persons aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
Identity verification and fraud/sanctions screening may involve automated checks (for example, document and biometric matching, and watchlist screening) provided by our KYC provider. These may affect whether your verification is approved. Where automated processing produces a legal or similarly significant effect on you, you may request human review by contacting us, subject to applicable law.
Our sites may link to third-party websites and services (for example, blockchain explorers or our providers). We are not responsible for their privacy practices. Please review their policies.
If you are in Indonesia, we process your personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP). You have the rights described in Section 11, including to access, correct, delete, and withdraw consent, and to seek redress. You may contact us at privacy@brickxprotocol.io regarding your personal data.
If you are in the EEA or UK, processing is governed by the GDPR/UK GDPR. Our legal bases are set out in Section 4. You have the rights in Section 11 and the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).
Where local law grants you additional or different rights over your personal data, we will honor those rights as required.
We may update this Policy from time to time. The "Last updated" date above shows when it last changed. Material changes will be communicated through the Services or by email where appropriate. Your continued use after an update constitutes acceptance of the revised Policy.
Questions, requests, or complaints about privacy and your personal data: privacy@brickxprotocol.io.