Global Privacy & Data Protection Policy

1. Scope and Applicability

This Privacy Policy applies to all users, visitors, software developers, and legal entities who access, register with, or utilize the infrastructure, tools, APIs, and Web3 services hosted under the ridebtc domain. By accessing ridebtc, you acknowledge that you have read, understood, and consented to the practices described herein.

2. Data We Collect and Methods of Collection

We collect information directly from you, automatically through system telemetry, and via third-party service providers. The data categories include:

3. Lawful Basis for Processing (GDPR & International Frameworks)

We process personal data only when backed by valid legal grounds under applicable international data protection statutes:

• Contractual Necessity: Processing required to fulfill our contractual commitments to you (e.g., executing cryptocurrency transactions and managing account services).
• Legal Obligations: Compliance with statutory anti-money laundering rules, tax reporting, and formal legal processes.
• Legitimate Interests: Securing our network from cyber threats, preventing transaction fraud, and optimizing system uptime.
• Consent: Where you have explicitly opted into specific optional processes, such as marketing broadcasts or non-essential cookies.

4. Public Blockchain Immutability Warning

Cryptocurrency transactions operating on public networks (including Bitcoin and decentralized smart contract platforms) are inherently public, transparent, and permanent.

When you execute transactions via ridebtc, your public wallet addresses, wallet balances, and transaction data are broadcast to a global decentralized ledger. ridebtc has no technical ability to alter, redact, delete, or obscure data written to a public blockchain. Your public wallet address may be permanently linked to on-chain transaction logs accessible by anyone via public block explorers.

5. Automated Fraud Detection & Anti-Money Laundering (AML)

To prevent illicit activities and comply with global financial security regulations, ridebtc utilizes automated risk-scoring engines and third-party blockchain analytics tools.

These systems process public wallet metadata and transaction patterns to identify suspicious behaviors, blacklisted wallet addresses, or high-risk transaction paths. If an automated risk engine flags a transaction, service access may be temporarily halted pending manual compliance review.

6. Third-Party Integrations & Payment Gateways

ridebtc works alongside specialized third-party infrastructure providers to supply payment processing, database hosting, customer support interfaces, and security filtering (e.g., Cloudflare, payment gateway APIs, email dispatch servers).

Third-party providers are granted access only to the specific data necessary to perform their technical functions and are bound by strict confidentiality agreements. We do not sell, rent, or monetize your personal data to external third parties for advertising or marketing lists.

7. Cookies and Tracking Technologies

We utilize essential, analytical, and functional cookies to ensure platform performance. These include:

• Strictly Necessary Cookies: Essential for maintaining authenticated user sessions, persistent security tokens, and preventing Cross-Site Request Forgery (CSRF).
• Performance & Analytics Cookies: Aggregate page view counters and load performance metrics used to identify bottlenecks and optimize system speed.
• Preference Cookies: Remember your customized dashboard settings, local language options, and default crypto pairs.

You can adjust or block non-essential cookies via your web browser settings at any time.

8. Data Retention Policies

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or regulatory reporting requirements.

• Account Records: Kept for the duration of your active account status plus 5 years to satisfy legal compliance audit trails.
• System & Server Logs: Purged automatically after 90 days unless retained for an active cybersecurity investigation.
• Financial & Payment Transaction Logs: Retained for a minimum of 7 years in accordance with applicable tax and financial recordkeeping requirements.

9. International Data Transfers

Our infrastructure servers, payment processors, and analytics providers operate across a globally distributed server architecture. Consequently, your data may be transferred to, processed, and stored in jurisdictions outside your home country where privacy laws may differ.

When cross-border data transfers occur, we implement appropriate safeguards—such as Standard Contractual Clauses (SCCs)—to ensure your information maintains an equivalent level of protection regardless of geographic processing location.

10. Enterprise Data Security Architecture

We enforce robust technical and operational countermeasures to secure your data against unauthorized access, loss, or manipulation:

• Data Encryption: End-to-End TLS 1.3 encryption for data in transit; AES-256 bit encryption for sensitive data at rest.
• Access Control Controls: Strict role-based access controls (RBAC), multi-factor authentication (MFA) requirements for administrative staff, and isolated network environments.
• Infrastructure Security: Real-time intrusion detection systems, automated DDoS mitigation, and continuous vulnerability patching routines.

11. Your Data Protection Rights

Depending on your jurisdiction (such as under the European GDPR, California CCPA/CPRA, or Brazilian LGPD), you may exercise the following rights:

• Right to Access: Request a comprehensive export of your personal data maintained by our platform.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete data records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of off-chain personal data, subject to statutory retention mandates.
• Right to Restrict Processing: Request restrictions on how your data is processed under specific legal disputes.
• Right to Data Portability: Request transmission of your personal data to another service provider in a structured format.

Note: Requests to erase or restrict data cannot apply to immutable transactions broadcast directly to public blockchains.

12. State-Specific Rights (CCPA / CPRA Notice for California Residents)

California residents possess specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). ridebtc does not "sell" your personal information, nor do we "share" personal information for cross-context behavioral advertising. California users have the right to request disclosures regarding collected categories of personal information and to opt out of sensitive data usage where applicable.

13. Children’s Privacy Protection

ridebtc is strictly designed for adult users. We do not knowingly collect, request, or solicit personal data from individuals under 18 years of age (or the legal age of digital consent in your region). If we discover that a minor has submitted personal information to our platform, we will immediately take steps to permanently delete the records from our servers.

14. Policy Modifications and Notifications

We reserve the right to revise, modify, or update this Privacy Policy at any time to reflect software upgrades, security improvements, or changing legal standards. Any updates will become effective immediately upon being published on ridebtc with an updated "Last Revised" date at the top of this document. We encourage users to review this page periodically.

15. Contact Information & Data Protection Officer (DPO)

If you have questions, feedback, or wish to exercise your legal data rights, please contact our Data Protection Office via the details below: