1. Introduction
At ChainReach, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Web3-native creator economy platform, including campaign management, vault escrow, deliverable validation, analytics, and AI-assisted tools.
By using ChainReach, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use our services.
2. Information We Collect
Account and Profile Information
- Account Information: Name, email address, phone number (if provided), profile picture, role (Brand / Creator / Agency)
- Authentication: Credentials and OAuth tokens from supported sign-in providers (for example, Google, TikTok, or X), as configured on the platform
- Identity Verification: Government-issued ID or other verification documents when required for compliance
- Social Profile Data: Social media handles, follower counts, niche/genre, and engagement signals used for matching, insights, and campaign eligibility
- Communication Data: Messages, support tickets, notifications preferences, and feedback
Campaign, Submission, and Collaboration Data
- Campaign Details: Titles, briefs, deliverables, platforms, budgets, schedules, niches, target audiences, and payment model configuration (fixed allocation, CPM tiers/caps, affiliate settings)
- Invitations: Invite lists, invite tokens, acceptance status, and related creator discovery data
- Submissions: Content URLs, deliverable status, validation reports, fingerprints, and approval/rejection decisions
- Payment Requests: Amounts, statuses (pending, paid, failed, refunded), invoices, and related campaign/creator references
Blockchain, Wallet, and Escrow Information
- Wallet Addresses: Public blockchain addresses used as depositor or payout recipient on BNB Chain
- Vault Transactions: Deposits, escrow locks, payouts, refunds, amounts, timestamps, statuses, and transaction hashes
- Smart Contract Interactions: Vault funding, payment releases, refunds, and related on-chain events
- On-Chain Activity: Public blockchain data associated with linked addresses
Billing and Commercial Information
- Subscription Billing: Customer and subscription metadata from our payment processor (for example, Stripe) for brand AI or premium plans
- Usage Entitlements: Plan tier, feature usage, and rate-limit counters associated with paid features
- Shopify Integration Data: Where a brand connects Shopify for affiliate campaigns—shop domain, order/commission-related data needed for payout calculation, and gift/invite settings
Analytics, Insights, and AI Data
- Dashboard Metrics: Campaign performance, payout timing, ROI, niche/platform distribution, and related aggregates
- Creator Insights: Aggregated creator and submission analytics shown to brands (for example, niches, engagement, audience summaries, payment-pending counts)
- AI Inputs/Outputs: Prompts, generated campaign briefs/deliverables/payout structures, assistant chat messages, and related usage logs
- Validation Metrics: Post metrics and compliance checks obtained via content-validation providers that scrape publicly available posts
Automatically Collected Information
- Cookies and Tracking: Session data, preferences, analytics cookies
- Usage Analytics: Page views, time spent, feature interactions
- Technical Data: IP addresses, device information, browser data
- Error and Security Logs: System errors, login attempts, suspicious activity, fraud prevention signals
3. How We Use Your Information
Platform Operations
- Provide account, campaign, and marketplace features
- Fund vaults, process escrow payouts and refunds
- Validate submissions and manage payment requests
- Operate dashboards, calendars, and creator insights
- Support invitations and public campaign discovery
- Provide customer support
Integrations and Automation
- Connect Shopify stores for affiliate commission flows
- Fetch public post data for deliverable validation
- Process AI campaign generation and assistant requests
- Manage subscription billing and usage entitlements
- Reconcile vault balances and campaign closeouts
Security and Compliance
- Prevent fraud, abuse, and inauthentic engagement
- Comply with AML/KYC and other legal obligations
- Monitor suspicious or high-value activity
- Maintain audit trails for vault and payment events
- Enforce platform policies and Terms of Service
Communication and Improvement
- Send payout, approval, and campaign notifications
- Share platform announcements and product updates
- Respond to inquiries and support requests
- Improve features, analytics quality, and user experience
- Send marketing communications (with consent where required)
4. KYC and Regulatory Compliance
Know Your Customer (KYC) Requirements
We may collect and verify certain information for regulatory compliance:
- Identity Verification: Government-issued photo ID when required
- Address Verification: Utility bills or bank statements for address confirmation when required
- Enhanced Due Diligence: Additional verification for high-value transactions
- Ongoing Monitoring: Monitoring of transaction patterns and activities
- Document Retention: KYC documents retained for minimum regulatory periods
Anti-Money Laundering (AML)
- Transaction monitoring for suspicious patterns
- Automated flagging of high-risk or high-value transactions
- Manual review processes for flagged activities
- Reporting obligations to regulatory authorities where applicable
- Risk assessment related to vault funding and payouts
5. Information Sharing and Disclosure
We may share your information in the following circumstances:
Between Brands and Creators
Profile, campaign, submission, validation, payout, and wallet-related information necessary to run a collaboration may be shared with the other party to that campaign (for example, brand dashboards showing creator insights, or creators viewing campaign and payment status).
Service Providers and Integrations
We share information with trusted providers who help operate the Service, including cloud hosting, subscription payment processing, content-validation / public-post fetching, AI providers, Shopify (when connected by a brand), identity verification, analytics, and customer support tools.
Public Blockchain Networks
Vault deposits, payouts, and refunds executed on-chain are visible on the public blockchain and may be analyzed by third parties.
Legal and Regulatory Requirements
We may disclose information when required by law, court order, or regulatory authority, including tax authorities, financial regulators, and law enforcement.
Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction.
Consent
We may share information with your explicit consent for specific purposes not covered by this policy.
6. Data Security
We implement comprehensive security measures to protect your information:
Technical Safeguards
- Encryption for sensitive data in transit and at rest where applicable
- Secure socket layer (SSL/TLS) for communications
- Regular security reviews and monitoring
- Access controls for administrative systems
- Secure cloud infrastructure with logging
Administrative Safeguards
- Limited access on a need-to-know basis
- Employee security awareness practices
- Incident response procedures
- Vendor diligence for key processors
- Regular policy reviews and updates
Important Security Notice
While we implement industry-standard security measures, no system is completely secure. Users are responsible for safeguarding wallet keys/seed phrases, maintaining strong account credentials, enabling available security features, and promptly reporting suspicious activity. On-chain transfers cannot be reversed by ChainReach.
7. Blockchain and Public Data
Public Blockchain Data
Important information about blockchain data privacy:
- Public Nature: Blockchain transactions are publicly visible and immutable
- Wallet Addresses: Your wallet addresses and transaction history are public
- Transaction Details: Amounts, timestamps, and smart contract interactions are visible
- Permanent Record: Blockchain data cannot be deleted or modified
- Third-Party Analysis: Blockchain analytics companies may track and analyze public data
Public Social Content
When creators submit public post links for validation, we (or our providers) may retrieve publicly available content and metrics. That processing is limited to operating campaigns, validation, payouts, and related analytics.
Our Privacy Measures
- We do not publish internal personal profiles on-chain
- Internal systems protect associations between wallets and personal data
- We implement privacy-preserving techniques where practicable
- We review security of blockchain and payment integrations
8. AI Features and Insights Processing
If you use AI campaign generation or the in-app assistant, your prompts and related context may be sent to AI subprocessors to generate responses. We use this data to provide the feature, enforce usage limits, improve reliability, and prevent abuse.
Brand analytics and Creator Insights aggregate campaign and creator activity so brands can evaluate collaborations. Aggregates may still relate to identifiable creators who participated in a brand's campaigns.
9. Data Retention
We retain your information for different periods based on legal requirements and business needs:
Account Information
Retained for the duration of your account plus periods required for regulatory compliance.
Campaign, Validation, and Vault Records
Retained to support payouts, disputes, refunds, reconciliation, and audits. On-chain records persist independently on the blockchain.
KYC Documents
Retained for minimum periods required by applicable AML regulations after account closure.
Billing and AI Usage Logs
Subscription and usage records retained as needed for billing, fraud prevention, and accounting. AI chat/generation logs may be retained for a limited operational period.
Marketing Data
Retained until you opt out or after a period of inactivity, whichever comes first.
10. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
Access and Control
- Access your personal information
- Correct inaccurate data
- Delete your account and data (subject to legal holds)
- Export certain account or payout history data
- Restrict or object to certain processing
Communication Preferences
- Opt out of marketing emails
- Manage notification preferences
- Update communication settings
- Disconnect integrations (for example, Shopify) where available
Exercise Your Rights
To exercise any of these rights, contact us at chainreachagency@gmail.com. We will respond to your request within 30 days. Note that some requests may be limited by legal requirements, active vault obligations, or the immutable nature of blockchain records.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers:
- Standard contractual clauses approved by relevant authorities
- Adequacy decisions by regulatory bodies
- Certification schemes and codes of conduct
- Binding corporate rules for intra-group transfers
12. Children's Privacy
ChainReach is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on the platform
- Updating the “Last Updated” date at the top of this policy
Your continued use of ChainReach after changes become effective constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
General Support: chainreachagency@gmail.com
Address: 11280 Vista Sorrento Pkwy, P 300, San Diego, CA 92130