Privacy Policy

Effective Date: January 1, 2024 Version: 1.0.0 Last Updated: January 1, 2024

1. Introduction

Welcome to Whale Tank ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our decentralized trading platform and services. We are committed to protecting your privacy and ensuring the security of your personal information.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Wallet addresses, usernames, email addresses (optional)
Profile Information: Display names, avatars, bio information
Trading Information: Transaction history, token preferences, trading patterns
Communication Data: Messages, comments, support inquiries
Verification Data: KYC/AML information where required by law

2.2 Information Collected Automatically

Blockchain Data: Public wallet addresses, transaction hashes, token balances
Usage Data: Pages visited, features used, time spent on platform
Technical Data: IP addresses, browser type, device information, operating system
Analytics Data: User behavior patterns, performance metrics
Log Data: Server logs, error reports, security events

2.3 Information from Third Parties

Blockchain Networks: Public transaction data from Solana and other networks
Social Media: Profile information if you connect social accounts
Service Providers: Data from payment processors, analytics services
Partners: Information from integrated DeFi protocols and exchanges

3. How We Use Your Information

3.1 Platform Operations

Provide and maintain our trading platform services
Process transactions and manage user accounts
Enable token trading, project launches, and bonding curve mechanics
Facilitate user communications and community features
Provide customer support and respond to inquiries

3.2 Security and Compliance

Detect and prevent fraud, abuse, and security threats
Comply with legal obligations and regulatory requirements
Perform KYC/AML verification where required
Monitor for suspicious activities and money laundering
Maintain audit trails for compliance purposes

3.3 Platform Improvement

Analyze usage patterns to improve our services
Develop new features and enhance user experience
Conduct research and analytics for platform optimization
Perform A/B testing and user experience studies
Generate aggregated statistics and insights

3.4 Communications

Send important service announcements and updates
Provide marketing communications (with consent)
Share educational content and platform news
Notify users of new features and opportunities
Send security alerts and account notifications

4. Information Sharing and Disclosure

4.1 We Share Information With:

Service Providers: Third-party vendors who assist with:

Cloud hosting and infrastructure services
Analytics and performance monitoring
Customer support and communication tools
Payment processing and compliance services
Security and fraud prevention services

Blockchain Networks: Public blockchain data is inherently transparent and includes:

Transaction hashes and addresses
Token transfers and smart contract interactions
Public profile information linked to wallet addresses

Legal Requirements: We may disclose information when required by:

Valid legal process (subpoenas, court orders)
Government investigations and regulatory inquiries
Law enforcement requests for criminal investigations
National security or public safety requirements
Compliance with applicable laws and regulations

Business Transfers: In connection with:

Mergers, acquisitions, or asset sales
Corporate restructuring or bankruptcy proceedings
Due diligence processes for potential transactions

4.2 We Do NOT Sell Personal Information

We do not sell, rent, or trade personal information to third parties for marketing purposes.

5. Data Security

5.1 Security Measures

Encryption: All data transmitted using TLS 1.3 encryption
Access Controls: Multi-factor authentication and role-based access
Infrastructure Security: Secure cloud hosting with regular security audits
Data Minimization: Collect only necessary information for platform operation
Regular Monitoring: Continuous security monitoring and threat detection

5.2 Blockchain Security

Wallet Security: Users maintain control of their private keys
Smart Contract Audits: Regular security audits of our smart contracts
Decentralized Architecture: Reduced single points of failure
Backup Systems: Multiple redundancy layers for data protection

5.3 Data Breach Response

In the event of a security incident:

Immediate investigation and containment
Notification to affected users within 72 hours
Cooperation with law enforcement when appropriate
Implementation of additional security measures
Transparent reporting of incident details

6. Data Retention

6.1 Retention Periods

Account Data: Retained while account is active plus 7 years after closure
Transaction Data: Permanent retention as required by blockchain immutability
Log Data: 2 years for security and debugging purposes
Communication Data: 3 years or as required by law
Analytics Data: Aggregated data retained indefinitely

6.2 Data Deletion

Users may request deletion of certain personal data, subject to:

Legal and regulatory retention requirements
Blockchain data immutability constraints
Legitimate business interests
Technical feasibility limitations

7. Your Privacy Rights

7.1 Access and Control

Access: Request copies of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of certain personal data
Portability: Export your data in machine-readable formats
Objection: Object to certain processing activities

7.2 Communication Preferences

Marketing Opt-out: Unsubscribe from marketing communications
Notification Settings: Control types of platform notifications
Data Processing: Opt-out of certain analytics and tracking

7.3 Exercising Your Rights

To exercise privacy rights:

Email: privacy@whale-tank.com
Use in-platform privacy settings
Submit requests through our support system
Include identity verification information

8. Cookies and Tracking

8.1 Types of Cookies

Essential Cookies: Required for platform functionality
Analytics Cookies: Track usage patterns and performance
Preference Cookies: Remember user settings and preferences
Security Cookies: Detect suspicious activities and fraud

8.2 Third-Party Tracking

We use analytics and monitoring services that may track users across sites:

Google Analytics (anonymized)
Sentry error tracking
Performance monitoring tools
Security and fraud prevention services

8.3 Cookie Management

Users can control cookies through:

Browser settings and preferences
Platform privacy settings
Opt-out links from third-party services
Cookie consent management tools

9. International Transfers

9.1 Global Operations

Our platform operates globally and may transfer data to:

Cloud service providers in various jurisdictions
Partner services for platform functionality
Compliance and regulatory authorities
International users and trading partners

9.2 Transfer Safeguards

We ensure adequate protection through:

Standard contractual clauses
Privacy Shield or successor frameworks
Adequacy decisions by privacy authorities
Binding corporate rules where applicable

10. Children's Privacy

10.1 Age Restrictions

Our platform is not intended for users under 18 years old
We do not knowingly collect information from minors
Users must verify they meet minimum age requirements
Parents should monitor children's internet activities

10.2 Parental Rights

If we discover we have collected information from a minor:

We will delete the information promptly
Parents may request deletion of their child's information
We will implement additional age verification measures
Parents may contact us regarding children's privacy concerns

11. Regional Privacy Laws

11.1 GDPR (European Union)

For EU residents, we provide additional rights under GDPR:

Legal basis for processing personal data
Enhanced consent mechanisms
Data Protection Officer contact information
Right to lodge complaints with supervisory authorities

11.2 CCPA (California)

For California residents, we provide CCPA rights:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale of personal information
Right to non-discrimination for exercising privacy rights

11.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.

12. Changes to This Privacy Policy

12.1 Updates and Notifications

We may update this Privacy Policy periodically
Material changes will be announced prominently
Continued use constitutes acceptance of changes
Users will be notified via email and platform notifications
Previous versions will be archived and available

12.2 Review Schedule

Annual review of privacy practices
Updates based on regulatory changes
Enhancements based on user feedback
Regular compliance assessments

13. Contact Information

13.1 Privacy Inquiries

Email: privacy@whale-tank.com Website: https://whale-tank.com/privacy-policy Address: [Physical address for legal compliance]

13.2 Data Protection Officer

Email: dpo@whale-tank.com Role: Overseeing privacy compliance and user rights Availability: Business hours, response within 5 business days

13.3 Regulatory Contacts

For complaints or concerns about our privacy practices:

EU users: Contact your local Data Protection Authority
California users: California Attorney General's Office
Other jurisdictions: Relevant privacy regulatory authority

14. Effective Date and Acknowledgment

This Privacy Policy is effective as of January 1, 2024. By using our platform, you acknowledge that you have read, understood, and agree to this Privacy Policy and our data processing practices.

Last Updated: January 1, 2024 Version: 1.0.0