Privacy Policy

Last Updated: Sep 1, 2024

Introduction

This Privacy Policy outlines the principles and practices of Haust Lab Limited (“we,” “our,” or “us”) regarding the collection, use and disclosure of information through our services, including the Haust Wallet, Haust Ecosystem products and our website at haust.network (collectively, the “Services”). Our primary objective is to safeguard user privacy and protect personal data. We aim to process only the information necessary for delivering our Services while complying with legal obligations and ensuring transparency about how user data is handled.

Haust Ecosystem products utilize blockchain technology to provide users with secure and privacy-focused solutions. Given the decentralized nature of blockchain, we do not require personally identifiable information such as your name or IP address for general use of our Services. Our commitment to privacy is a core principle and we do not share user data with third parties except where necessary to deliver our Services, comply with legal requirements, improve the functionality of our products or facilitate business transactions.

By accessing or using our Services, you agree to the terms outlined in this Privacy Policy. Your continued use constitutes acceptance of these terms and any future updates to the Policy.

Information We Collect

In connection with the use of the Haust Ecosystem products, minimal personal information is collected. Users may provide contact information such as email addresses or phone numbers when interacting with customer support, reporting bugs or communicating via social media. The platform itself operates as a non-custodial wallet, no private keys are ever collected and users should be cautious of any third party requesting such sensitive information.

The wallet address, which serves as a public key, is considered publicly available data on the blockchain and is not treated as personal information. This address is logged when connecting to the platform for the purpose of tracking usage and screening for illicit activities, using intelligence from third-party blockchain analytics providers. Blockchain transactions themselves are visible on the distributed ledger and are relayed through nodes and servers.

In addition to public wallet addresses, some technical information may be automatically collected during interactions with Haust Ecosystem products. This includes device-related data such as IP addresses, browser type, operating system and the date and time of access. The platform, however, does not automatically store or collect personally identifiable information like IP addresses, focusing instead on anonymized technical data.

Analytics data may be gathered to enhance user experience, including information on browser types, referring and exit pages, operating systems and device information. This is done through tools such as cookies, mobile device IDs, web beacons and localStorage. These technologies may also be used to personalize the services across sessions or remember user preferences. Aggregated data is analyzed to improve the overall functionality of the products.

Where users provide additional information—such as for participating in surveys, usability studies or job applications—this biographical data, including names and email addresses, will be recorded for the specific purposes outlined during collection. Correspondence via customer support channels is similarly logged, but no effort is made to link this information to the wallet address, IP address or any other personal data.

How We Use the Information

The information we collect is utilized primarily to provide, maintain and enhance the functionality and quality of our services. This includes the analysis of user interactions to improve existing features, develop new services and ensure seamless user experiences. Collected data also assists in fulfilling user requests, completing transactions and sending updates, including technical notices, security alerts and administrative messages. Additionally, we leverage information for marketing purposes, such as sharing promotional materials or news about our products and services.

For security and fraud prevention, we use the data to detect, prevent and address fraudulent activities, hacking attempts and unauthorized access. This includes analyzing security risks, enforcing our terms of service and addressing technical issues to safeguard both our services and users.

We may also use the information to communicate directly with users for customer support, updates and any inquiries regarding the use of our services. Communication may involve responses to inquiries, notifications related to transactions or marketing content.

Compliance with legal obligations is a critical aspect of our data usage. We process and disclose information as necessary to fulfill regulatory requirements, respond to legal processes and cooperate with law enforcement or government entities. This may include the transfer of data to comply with applicable laws and protect our legal rights, as well as those of our users and business partners.

Data Sharing and Disclosure

User information may be shared with third parties under specific circumstances related to the operation of our business, compliance with legal requirements or in connection with corporate transactions. In certain instances, we disclose personal data to third-party service providers when necessary to facilitate the functionality of our products and services. These third-party service providers are granted access to limited personal information, such as public wallet addresses and are bound by our contractual agreements, as well as applicable data protection laws, to use this data only for the specified purposes. They are prohibited from using the information for any other reason.

In the event of a business transaction, such as the sale or transfer of assets, user information may be among the transferred assets, provided it remains subject to the privacy commitments outlined in this or previous policies, unless users consent to alternate terms. Additionally, in circumstances involving corporate restructuring, mergers or acquisitions, personal data may be disclosed as part of the transaction, again subject to the privacy protections in place.

Blockchain-related information, such as transaction data, is inherently public and immutable due to the decentralized nature of blockchain technology. While this information does not directly reveal personal details, it is permanently accessible and can be analyzed by third parties. We do not have control over the visibility of information stored on the blockchain.

For legal compliance, we may disclose personal information if we determine, in good faith, that such action is required to comply with applicable laws, regulations or legal requests. This includes responding to law enforcement inquiries, court orders, subpoenas or other legal processes. We may also share data when necessary to protect the safety, rights or property of our company, employees, users or others, including enforcing our Terms of Use and investigating potential fraud or security risks.

In summary, user information is only shared with third parties when required for operational purposes, legal obligations or corporate transactions, ensuring compliance with relevant data protection laws and maintaining user privacy whenever possible.

Security of Your Information

We are committed to safeguarding your personal information through the implementation of robust encryption protocols, access control mechanisms and comprehensive security measures. To protect sensitive wallet information and private keys, we employ industry-standard encryption methods, including Transport Layer Security (TLS) for data in transit and advanced encryption techniques for data at rest. Despite these measures, we acknowledge that no transmission over the internet or electronic storage method is entirely secure. Therefore, we cannot fully guarantee the absolute protection of your data against unauthorized access, disclosure, alteration or loss due to potential hardware or software failures or unauthorized activities.

Access to your personal data is strictly controlled internally. We limit access to only those employees, contractors and third-party vendors who have a legitimate business need to know and process the data solely under our direction. These individuals are bound by confidentiality obligations and are required to adhere to our data protection protocols. Furthermore, while we select trusted third-party vendors to assist in securing your data, we do not have direct control over these external parties and thus cannot guarantee the security of your information once it is in their hands.

To mitigate potential risks, we have established a range of technical, physical and organizational security measures. These include secure servers, password-protected environments and regular monitoring for vulnerabilities. In the event of a suspected data breach, we have formal procedures in place to investigate and respond promptly. Where legally required, we will notify you and relevant regulatory bodies of any breach that may compromise your personal data. While we take extensive precautions, it is important to understand that you are ultimately responsible for maintaining the security of your blockchain addresses, cryptocurrency wallets and private keys. Any information you provide to us is done so at your own risk.

Your Rights and Choices

Users have the right to access, correct and request the deletion of their personal information, subject to applicable laws and certain exceptions. You may request access to the personal information we hold about you by contacting us at [e-mail]. Upon verification of your identity, we will provide you with a copy of the data processed about you. Any additional requests for access may be subject to an administrative fee. If any of the information we hold is inaccurate or incomplete, you may request its rectification to ensure your data remains accurate.

In cases where personal data is no longer necessary for the purposes for which it was collected, you may request its deletion. However, please note that wallet addresses created via the Haust application are stored on the Haust blockchain and cannot be erased. Other personal data no longer required will be deleted within ninety (90) days of your request. To initiate this process, you may contact us at [e-mail].

Users may also opt out of certain data processing activities, such as the collection of cookies or analytics tracking. To withdraw your consent for data processing, you can reach out to us at any time. However, opting out may impact your use of certain features of our application. For marketing communications, you may unsubscribe via the link provided in promotional emails, though you will continue to receive administrative communications from us.

We may restrict or limit the processing of your personal data upon request. Users also have the right to object to the processing of their personal information when based on our legitimate interests. If any requests are declined due to legal obligations or other limitations, we will provide a justification, subject to applicable legal restrictions. Should you wish to file a complaint regarding our handling of your personal data, you may contact us directly or submit a complaint to the relevant data protection authority in your jurisdiction.

Data Retention

Please be aware that, despite any requests to delete your Wallet addresses or to uninstall the Haust Wallet mobile application, certain personal and transactional data may still be retained by Haust. This is necessary to ensure the continued operation of Haust Wallet and to comply with applicable legal and regulatory obligations. The retention of such data will be limited to the period reasonably required to provide customer support and address inquiries or as mandated by relevant laws.

It is important to note that data associated with blockchain transactions cannot be deleted or modified. Blockchain technology is inherently immutable, meaning that any transactions recorded on the blockchain are permanent and cannot be altered or removed under any circumstances.

For any concerns or questions regarding the collection, processing or retention of your personal data, please contact [e-mail].

Children's Privacy

The use of the Haust Wallet and other related services within the Haust Ecosystem is restricted to individuals who are at least eighteen (18) years of age. The services are intended for a general audience and are not directed toward children. We do not knowingly collect personal information from individuals under the age of 18. In compliance with relevant children’s privacy laws, such as the Children’s Online Privacy Protection Act (COPPA), we do not knowingly solicit or accept personal information from children under the age of 13. If it is discovered that a child under 13 has provided personal information, we will take immediate steps to delete such information from our systems.

If you are a parent or legal guardian and believe that your child under the age of 13 has provided personal information or has otherwise accessed the Haust Wallet or related services, please contact us at [e-mail]. Upon verification, we will ensure the removal of the child’s personal information in compliance with applicable law. Additionally, any personal information provided by a parent or legal guardian on behalf of a minor child while using the Haust Ecosystem will be treated as Personal Information, as outlined in our Privacy Policy.

International Data Transfers

By using the Haust Ecosystem products, you acknowledge and consent that your personal data may be transferred to, processed and stored in jurisdictions outside of Hong Kong. This includes, but is not limited to, transfers to third-party service providers or suppliers engaged in fulfilling your requests, processing payments and providing various support services. Some of these entities may operate in countries that do not offer the same level of data protection as Hong Kong.

We ensure that any transfer of your personal information outside of Hong Kong is conducted under data transfer mechanisms that comply with recognized standards of data protection, such as those established under the General Data Protection Regulation (GDPR). These mechanisms are designed to safeguard your personal data and uphold your rights as a data subject.

If you require further details on the specific safeguards or data transfer mechanisms used or if you have concerns regarding the international transfer of your data, please contact us at [e-mail] for additional information.

Changes to the Privacy Policy

The Haust Ecosystem Privacy Policy is subject to revisions and updates to ensure compliance with applicable laws and to reflect changes in our business practices. We reserve the right to modify this Privacy Policy at any time. In the event of such revisions, the "Last updated date" at the top of the Privacy Policy will be updated to indicate when the latest changes have been made.

While we will make reasonable efforts to notify users of significant changes through our website and related services, it is your responsibility to regularly review the Privacy Policy to stay informed of any modifications. Your continued use of Haust Ecosystem products after changes have been posted constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should cease using our products and services.

This Privacy Policy becomes effective as of the date indicated at the top of this document.

Contact Information

For any inquiries regarding our privacy practices or concerns related to the Haust Ecosystem products and this Privacy Policy or if you wish to exercise your rights as described herein or believe there has been a non-compliance with this Privacy Policy, please direct your communication to [e-mail]. This email address is designated for addressing any questions, complaints or issues you may have about our approach to privacy, the collection, use or sharing of your information.