Privacy Policy

1. Introduction

ClawDUX Inc. ("ClawDUX," "we," "us," or "our") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you access or use the ClawDUX platform, including our website, applications, smart contracts, APIs, and related services (collectively, the "Platform").

By accessing or using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately cease using the Platform.

This Privacy Policy should be read in conjunction with our Terms of Service and Security Policy, which are incorporated herein by reference.

2. Information We Collect

2.1 Information You Provide Directly. When you create an account, list a Strategy, make a purchase, or communicate with us, we may collect: (a) account registration information, including email address, username, and password (stored in hashed form); (b) cryptocurrency wallet addresses used to connect to the Platform; (c) GitHub account information if you authenticate via GitHub OAuth (including GitHub username, email, and profile information); (d) Strategy listing information provided by Sellers, including descriptions, performance metrics, pricing, and uploaded files; (e) transaction and purchase history; (f) dispute submissions and supporting evidence; (g) communications with our support team or AI assistant; (h) any other information you voluntarily provide.

2.2 Information Collected Automatically. When you access the Platform, we automatically collect certain information, including: (a) device information (browser type, operating system, device identifiers, screen resolution); (b) log data (IP address, access timestamps, pages viewed, referring URLs, click patterns); (c) usage analytics (features used, time spent on pages, interaction patterns); (d) cookies and similar tracking technologies (session cookies, persistent cookies, web beacons, pixel tags); (e) blockchain transaction data (publicly available on-chain data related to your wallet interactions with our smart contracts).

2.3 Information from Third Parties. We may receive information about you from third-party services, including: (a) GitHub (profile information, email, when you authenticate via OAuth); (b) blockchain analytics providers (wallet activity, risk scoring); (c) fraud prevention services (device fingerprinting, behavioral analysis); (d) marketing partners (aggregated demographic information).

3. How We Use Your Information

We use collected information for the following purposes: (a) to provide, maintain, and improve the Platform and its features; (b) to process transactions, manage escrow, and facilitate purchases; (c) to create and manage your account; (d) to verify your identity and prevent fraud, abuse, and unauthorized access; (e) to resolve disputes through our AI arbitration system; (f) to communicate with you about your account, transactions, disputes, and Platform updates; (g) to send you marketing communications (with your consent, where required by law); (h) to analyze usage patterns and improve user experience; (i) to enforce our Terms of Service and protect our legal rights; (j) to comply with legal obligations, regulatory requirements, and law enforcement requests; (k) to develop new features, products, and services; (l) to conduct research and analytics to understand market trends and user behavior.

3.1 AI Processing. We use artificial intelligence and machine learning models to process certain user data for the purposes of: dispute resolution (analyzing evidence and determining outcomes), fraud detection (identifying suspicious patterns and behaviors), platform optimization (improving recommendation algorithms and search relevance), and customer support (powering our AI assistant chatbot). AI processing may involve automated decision-making that has legal or similarly significant effects on users, particularly in dispute resolution. Users have the right to request human review of automated decisions where required by applicable law.

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 With Other Users. Certain information is shared with other users as part of the Platform's functionality: Sellers can see Buyer usernames (or wallet addresses) for completed transactions; Buyers can see Seller profiles and listing information; during disputes, relevant transaction information is shared with both parties and processed by the AI arbitration system.

4.2 Service Providers. We share information with third-party service providers who assist us in operating the Platform, including: cloud hosting and infrastructure providers; analytics and monitoring services; email and communication service providers; fraud detection and prevention services; blockchain infrastructure providers. All service providers are bound by contractual obligations to protect your information and use it only for the specified purposes.

4.3 Legal Requirements. We may disclose your information when we believe in good faith that disclosure is necessary to: comply with applicable laws, regulations, legal processes, or governmental requests; enforce our Terms of Service or other agreements; protect the rights, property, or safety of ClawDUX, our users, or the public; detect, prevent, or address fraud, security, or technical issues.

4.4 Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with Services. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and protect our legal rights. Specifically:

(a) Account information is retained for the duration of your account and for up to 5 years after account deletion for legal and regulatory compliance purposes; (b) transaction records are retained for a minimum of 7 years to comply with financial record-keeping requirements; (c) dispute records are retained for a minimum of 5 years; (d) log data and analytics are retained for up to 2 years; (e) blockchain transaction data is permanently recorded on the blockchain and cannot be deleted by ClawDUX.

When personal information is no longer required for the purposes described in this Privacy Policy, we will securely delete or anonymize it. Anonymized data that cannot reasonably be used to identify you may be retained indefinitely for analytics and research purposes.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include but are not limited to: encryption of data in transit (TLS 1.3) and at rest (AES-256); secure password hashing using bcrypt; regular security audits and penetration testing; access controls and principle of least privilege; network segmentation and firewall protection; intrusion detection and monitoring systems.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials, wallet private keys, and any devices used to access the Platform.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use include:

7.1 Essential Cookies. Required for the Platform to function properly, including session management, authentication, and security. These cookies cannot be disabled.

7.2 Analytics Cookies. Used to collect information about how you use the Platform, including pages visited, time spent, and interaction patterns. This data helps us improve the Platform's functionality and user experience.

7.3 Preference Cookies. Remember your settings and preferences (such as language, theme, and display options) to provide a personalized experience.

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Platform. For more information about cookies and how to manage them, please visit your browser's help documentation.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

8.1 Access. You have the right to request a copy of the personal information we hold about you.

8.2 Correction. You have the right to request that we correct any inaccurate or incomplete personal information.

8.3 Deletion. You have the right to request that we delete your personal information, subject to certain legal exceptions (e.g., record-keeping requirements, ongoing disputes).

8.4 Data Portability. You have the right to request a copy of your data in a structured, commonly used, and machine-readable format.

8.5 Opt-Out. You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

8.6 Restriction. You have the right to request that we restrict the processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at privacy@clawdux.com. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

9. International Data Transfers

ClawDUX is based in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

By using the Platform, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy. Where required by applicable law, we will ensure appropriate safeguards are in place for international data transfers, such as Standard Contractual Clauses approved by relevant regulatory authorities.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18 (or the age of legal majority in their jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly. If you believe that we have collected information from a child, please contact us at privacy@clawdux.com.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including: (a) the right to know what categories and specific pieces of personal information we collect, use, and disclose; (b) the right to delete your personal information; (c) the right to opt out of the sale or sharing of your personal information (note: we do not sell personal information); (d) the right to non-discrimination for exercising your privacy rights; (e) the right to limit the use of sensitive personal information.

To exercise these rights, please contact us at privacy@clawdux.com or use the mechanisms provided on the Platform. We will not discriminate against you for exercising your CCPA/CPRA rights.

12. European Data Protection (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local data protection laws apply to our processing of your personal data. Our legal bases for processing include: (a) performance of our contract with you (providing Services, processing transactions); (b) legitimate interests (fraud prevention, security, Platform improvement); (c) your consent (marketing communications, non-essential cookies); (d) legal obligations (regulatory compliance, tax reporting).

You have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal data violates applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Platform with a new "Last Updated" date and, where required by law, by sending you an email notification.

Your continued use of the Platform after the posting of a revised Privacy Policy constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: