Privacy Policy

1. Overview

LetterFi is a decentralized NFT protocol built on Binance Smart Chain. Due to the nature of blockchain technology, much of your activity is recorded on a public, immutable ledger. This Privacy Policy explains what data we collect, what data is inherently public on the blockchain, and how we handle your information.

Key Points:

• Most blockchain transactions are public and permanent
• We collect minimal personal data
• Your wallet address is pseudonymous, not anonymous
• We do not sell your personal information

2. Information We Collect

2.1 Information You Provide Directly

Wallet Connection:

• When you connect your Web3 wallet (MetaMask, Trust Wallet, etc.), we collect your wallet address
• We do NOT have access to your private keys or seed phrases
• You remain in full control of your wallet at all times

Email and Communications (Optional):

• If you subscribe to our newsletter or contact support, we collect your email address
• If you join our Discord or social media, we may collect usernames and profile information
• All communications are voluntary

TWT Staking Information:

If you stake Trust Wallet Token (TWT) for tier benefits, we record:

• Your wallet address
• Staked TWT amount
• Tier level (Silver/Golden)
• Staking timestamps

2.2 Information Collected Automatically

Blockchain Data (Public):

All blockchain transactions are permanently recorded on Binance Smart Chain and are publicly visible. This includes:

• NFT minting transactions
• NFT transfers and sales
• Reward distribution receipts
• Smart contract interactions
• Wallet addresses involved in transactions
• Transaction timestamps and amounts

Website Analytics:

We use analytics tools to understand how users interact with our website:

• IP address (anonymized)
• Browser type and version
• Device type (mobile, desktop, tablet)
• Pages visited and time spent
• Referral source
• General geographic location (country/city level)

Technical Data:

• Log files and error reports
• Connection timestamps
• Network information
• Performance metrics

2.3 Information We Do NOT Collect

We do NOT collect:

• Private keys or seed phrases
• Social security numbers or government IDs
• Credit card or banking information (we don't process fiat payments)
• Detailed personal profiles or browsing history outside our platform
• Off-chain personal communications (unless you voluntarily contact us)

3. How We Use Your Information

3.1 Primary Uses

To Provide Services:

• Display your NFT collection and ownership
• Process reward distributions through smart contracts
• Show your staking tier status
• Enable NFT crafting and trading features

To Improve the Platform:

• Analyze usage patterns to improve user experience
• Identify and fix technical issues
• Optimize smart contract performance
• Develop new features based on user behavior

To Communicate:

• Send service announcements and updates (if you've subscribed)
• Respond to support requests
• Notify you of important protocol changes
• Share community news and events

For Security:

• Detect and prevent fraud or abuse
• Monitor for suspicious activity
• Protect against attacks or exploits
• Ensure smart contract integrity

3.2 Legal Compliance

We may use or disclose your information when required by law, including:

• Responding to valid legal requests (subpoenas, court orders)
• Complying with regulatory requirements
• Protecting our legal rights
• Investigating potential violations of our Terms of Service

4. Blockchain Transparency

4.1 Public Blockchain Data

Everything on Binance Smart Chain is public and permanent:

• All NFT ownership is publicly visible via blockchain explorers (BSCScan)
• All transactions (mints, transfers, sales) are permanently recorded
• Reward distributions and winners are publicly verifiable
• Smart contract interactions can be traced
• Wallet addresses and transaction history are accessible to anyone

Your wallet address is pseudonymous:

• It doesn't directly reveal your real-world identity
• However, if you link your wallet to exchanges, marketplaces, or other KYC services, your identity may be discoverable
• Blockchain analysis firms can potentially link wallet addresses to identities

4.2 On-Chain vs Off-Chain Data

On-Chain (Public Blockchain):

• NFT ownership records
• Transaction history
• Reward distributions
• Smart contract state
• Token balances

Off-Chain (Our Servers):

• Website analytics
• Email subscriptions (if provided)
• Support communications
• Cached metadata for performance

We store minimal off-chain data. Most platform functionality relies on public blockchain data.

5. How We Share Your Information

5.1 Third-Party Service Providers

We may share information with trusted service providers who help us operate:

Analytics Services:

• Google Analytics (anonymized IP)
• Mixpanel or similar analytics platforms
• For understanding user behavior and improving UX

Infrastructure Providers:

• Cloud hosting services (AWS, Vercel, etc.)
• Content delivery networks (CDNs)
• For website performance and availability

Blockchain Services:

• Chainlink VRF for randomness
• BSC RPC node providers
• IPFS gateways for NFT metadata

Communication Tools:

• Email service providers (if you subscribe)
• Discord/Telegram for community management

All third-party providers are bound by confidentiality obligations and may only use your information to provide services to us.

5.2 Blockchain Transparency

Public Blockchain Data:

Anyone can access blockchain data through:

• BSCScan and other blockchain explorers
• Direct blockchain queries
• NFT marketplace platforms
• Third-party analytics tools

5.3 Legal Requirements

We may disclose your information if:

• Required by law or legal process
• Necessary to protect our rights or property
• Necessary to protect user safety
• In connection with a business transfer or acquisition

5.4 What We Do NOT Share

We do NOT:

• Sell your personal information to third parties
• Share your email or contact information with marketers
• Provide your data to advertisers
• Disclose off-chain information without your consent (except as required by law)

6. Data Storage and Security

6.1 Where We Store Data

On-Chain Data:

• Permanently stored on Binance Smart Chain
• Distributed across thousands of nodes globally
• Cannot be deleted or modified

Off-Chain Data:

• Website analytics: stored by our analytics providers
• Email communications: stored by email service providers
• Cached data: stored on our servers and CDN

Geographic Location:

• Our servers may be located in multiple regions
• We use cloud providers with data centers worldwide
• Blockchain data is globally distributed by nature

6.2 Security Measures

We implement industry-standard security measures:

Technical Safeguards:

• HTTPS/SSL encryption for all website communications
• Secure server configurations
• Regular security audits
• DDoS protection
• Firewalls and intrusion detection

Smart Contract Security:

• Code audits (when available)
• Testing on testnets before mainnet deployment
• Use of proven libraries and standards
• Multi-signature controls for critical functions (if applicable)

Access Controls:

• Limited team access to off-chain data
• Role-based permissions
• Secure authentication methods

6.3 Data Retention

On-Chain Data:

• Stored permanently on the blockchain
• Cannot be deleted or modified

Off-Chain Data:

• Website analytics: retained for 26 months (Google Analytics default)
• Email communications: retained until you unsubscribe
• Support tickets: retained for 3 years
• Cached metadata: refreshed periodically

7. Your Privacy Rights

7.1 Rights Regarding Off-Chain Data

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data (for off-chain data only)
• Objection: Object to processing of your personal data
• Portability: Request transfer of your data to another service
• Withdrawal: Withdraw consent for data processing

To exercise these rights, contact us at: info@letterfi.xyz

7.2 Limitations Due to Blockchain

Important: We cannot modify or delete on-chain data, as blockchain transactions are permanent and immutable. This includes:

• NFT ownership records
• Transaction history
• Reward distributions
• Smart contract interactions

These records are permanent features of blockchain technology and are outside our control.

7.3 Opting Out

Website Analytics:

• Use browser extensions like "uBlock Origin" or "Privacy Badger"
• Enable "Do Not Track" in your browser (not all analytics services honor this)

Email Communications:

• Click "unsubscribe" in any email we send
• Contact us at info@letterfi.xyz

Platform Use:

• Simply disconnect your wallet and stop using the platform
• Your on-chain transaction history will remain public

8. Cookies and Tracking Technologies

8.1 Cookies We Use

Essential Cookies:

• Wallet connection state
• User preferences and settings
• Session management

Analytics Cookies:

• Google Analytics or similar tools
• Track page views and user behavior
• Help us improve the platform

Third-Party Cookies:

• Some third-party services (like analytics providers) may set their own cookies

8.2 Managing Cookies

You can control cookies through:

• Browser settings (block all cookies or specific cookies)
• Browser extensions for privacy
• Third-party cookie management tools

Note: Blocking essential cookies may affect platform functionality.

9. International Data Transfers

LetterFi operates globally. Your information may be transferred to and processed in countries other than your country of residence.

Blockchain Data:

• Inherently global and distributed
• Stored on nodes worldwide
• No single geographic location

Off-Chain Data:

• May be stored in various regions depending on service providers
• We ensure service providers maintain adequate data protection standards

GDPR Compliance:

If you are in the European Union, we take steps to ensure adequate protection for data transfers, including:

• Using service providers with GDPR compliance
• Implementing appropriate safeguards
• Ensuring data processing agreements are in place

10. Children's Privacy

LetterFi is NOT intended for users under the age of 18.

• We do not knowingly collect information from children under 18
• If you are under 18, do not use LetterFi or provide any personal information
• If we discover we have collected information from a child under 18, we will delete it promptly

Parents or guardians who believe a child has provided information to us should contact us at info@letterfi.xyz.

11. Third-Party Links and Services

11.1 External Links

Our platform may contain links to third-party websites, services, or marketplaces:

• OpenSea, PancakeSwap, or other NFT marketplaces
• Social media platforms
• Blockchain explorers (BSCScan)

We are NOT responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

11.2 Wallet Providers

When you connect a wallet (MetaMask, Trust Wallet), you are subject to that wallet provider's privacy policy and terms. We do not control these services.

11.3 Blockchain Explorers

Anyone can view your transactions on public blockchain explorers. These are third-party services outside our control.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

Notice of Changes:

• We will post the updated Privacy Policy on our website
• We will update the "Last Updated" date at the top
• For material changes, we may provide additional notice (email, platform announcement)

Your Continued Use:

Your continued use of LetterFi after changes constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, please stop using the platform.

13. GDPR Compliance (For EU Users)

13.1 Legal Basis for Processing

We process your personal data based on:

• Consent: When you connect your wallet or subscribe to communications
• Contractual Necessity: To provide our services
• Legitimate Interests: To improve our platform and prevent fraud
• Legal Obligations: To comply with applicable laws

13.2 Your GDPR Rights

In addition to the rights listed in Section 7, EU users have:

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time
• Right to detailed information about data processing

13.3 Data Protection Officer

For GDPR-related inquiries, contact us at: info@letterfi.xyz

14. California Privacy Rights (CCPA)

14.1 Your CCPA Rights

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information (off-chain only)
• Right to Opt-Out: Opt-out of the sale of personal information (we do NOT sell data)
• Right to Non-Discrimination: Equal service regardless of exercising your rights

14.2 Exercising Your Rights

To exercise your CCPA rights, contact us at info@letterfi.xyz

We will respond to verified requests within 45 days.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: info@letterfi.xyz
• Website: https://letterfi.xyz
• Documentation: https://docs.letterfi.xyz

16. Important Disclaimers

16.1 Blockchain Transparency

⚠️ Critical Reminder: Blockchain transactions are PUBLIC and PERMANENT. Anyone can:

• View your wallet address and NFT holdings
• See your transaction history
• Track your activity across multiple platforms
• Potentially link your wallet to your real-world identity

Protect your privacy by:

• Using separate wallets for different purposes
• Avoiding linking wallets to personal information publicly
• Being aware that blockchain data is forever

16.2 Smart Contract Interactions

When you interact with LetterFi smart contracts, you are creating permanent on-chain records that we CANNOT delete, modify, or control.

16.3 Third-Party Analytics

We use third-party services that may collect your information. While we choose reputable providers, we cannot fully control their data practices.

16.4 No Absolute Security

Despite our security measures, no system is 100% secure. Blockchain technology and internet-based services inherently carry risks.

You are responsible for:

• Protecting your private keys and seed phrases
• Using secure devices and networks
• Verifying smart contract interactions before signing

17. Acknowledgment

BY USING LETTERFI, YOU ACKNOWLEDGE THAT:

• ✓ You have read and understood this Privacy Policy
• ✓ You understand that blockchain transactions are public and permanent
• ✓ You understand that your wallet address is pseudonymous, not anonymous
• ✓ You consent to the collection and use of your information as described
• ✓ You are responsible for protecting your private keys and wallet security
• ✓ You understand we cannot delete or modify on-chain data