Privacy Policy

When you register and use the Charity Token platform, we collect the following categories of information:

Information you provide directly:

• Email address
• Full name
• Country and phone number (optional)
• Profile picture (optional)
• Government-issued ID and face capture (for Philanthropist KYC only)

Information collected automatically:

• Browser and device type
• IP address and approximate location
• Pages visited and time spent on the platform
• Blockchain transaction hashes you submit for verification

We use the information we collect for the following purposes:

• To create and manage your account.
• To verify your identity and process account activation.
• To review and approve Philanthropist KYC applications.
• To distribute monthly Charity Token allocations to verified beneficiaries.
• To communicate important platform updates and announcements.
• To detect and prevent fraud, abuse, and policy violations.
• To improve platform performance and user experience.

Your data is stored securely using Supabase, a cloud database provider with enterprise-grade encryption at rest and in transit. We implement industry-standard security measures including:

• HTTPS encryption for all data transmissions.
• Row-level security (RLS) to ensure users can only access their own data.
• Hashed password storage — we never store your password in plain text.
• Authentication tokens with expiration to limit session risk.

While we take all reasonable measures to protect your data, no system is completely impenetrable. We encourage you to use a strong, unique password for your account.

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• With Philanthropists — your registered email address is visible to Philanthropists when they process your activation request.
• With service providers — such as Supabase (database) and Netlify (hosting), who process data on our behalf under strict confidentiality obligations.
• When required by law — if we are legally compelled to disclose information by a court order or regulatory authority.

We will never share your government ID or face capture documents with any third party outside of the internal KYC review process.

We use minimal cookies and local browser storage strictly for platform functionality, including maintaining your login session and remembering your preferences (such as whether you have dismissed the Telegram community popup).

We do not use advertising cookies, third-party tracking pixels, or analytics tools that share your data with advertisers.

Regardless of where you are located, you have the following rights over your personal data:

• Right to access — you can request a copy of the personal data we hold about you.
• Right to correction — you can update your personal information at any time via your profile settings.
• Right to deletion — you can request that your account and associated data be permanently deleted.
• Right to data portability — you can request your data in a readable format.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at legal@charitytoken.net. We will respond within 30 days.

We retain your personal information for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

KYC documents (government ID and face capture) are retained for the minimum period required to fulfill our verification obligations, after which they are permanently deleted.

The Charity Token platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered on our platform, please contact us immediately and we will remove the account.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify users through the platform or via our Telegram community channel. Continued use of the platform after changes constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out to us: