Privacy Policy

1. Introduction

x402 Pioneers ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our Platform at basex402.com.

By using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Wallet Information

• Public wallet addresses: When you connect a wallet (embedded or external), we see your public wallet address
• Transaction history: Your NFT purchases, sales, and transfers are publicly visible on the blockchain
• NFT ownership: We track which wallets own which x402 NFTs

Note: Embedded wallet authentication (email) is handled by Coinbase. We do not receive or store your email address.

2.2 User-Uploaded Content

• Images: Photos or artwork you upload for your NFT
• Custom pages: Content you create for /[tokenId] pages (coming soon)
• AI-generated content: Content created using AI tools (coming soon)
• Metadata: File size, type, upload timestamp

2.3 Usage Data

• IP addresses: Your device's IP address when accessing the Platform
• Browser information: Browser type, version, and operating system
• Page views: Which pages you visit and how long you stay
• Click data: What buttons and links you interact with
• Device information: Device type, screen size, and settings

2.4 Marketplace Data (Coming Soon)

• Listing information: NFTs you list for sale and asking prices
• Offers and bids: Purchase offers you make or receive
• Transaction history: Sales you complete (also public on blockchain)

2.5 Cookies & Tracking

We use cookies and similar technologies for:

• Session management (keeping you logged in)
• Analytics (understanding how the Platform is used)
• Performance optimization

You can disable cookies in your browser settings, but some Platform features may not work properly.

3. How We Use Information

We use collected information to:

3.1 Provide Services

• Process NFT minting and transactions
• Display your uploaded images on NFTs
• Enable /[tokenId] custom pages
• Facilitate marketplace transactions
• Process x402 micropayments

3.2 Improve & Maintain Platform

• Analyze usage patterns and optimize performance
• Fix bugs and technical issues
• Develop new features
• Ensure Platform security

3.3 Content Moderation

• Review uploaded images for prohibited content
• Enforce Terms of Service
• Respond to DMCA and other legal requests
• Blacklist wallets that violate our policies

3.4 Legal Compliance

• Comply with legal obligations
• Respond to law enforcement requests
• Prevent fraud and illegal activity
• Enforce our Terms of Service

4. Information Sharing & Disclosure

4.1 Public Blockchain Data

Your wallet address, NFT ownership, and all blockchain transactions are publicly visible to anyone. This is the nature of blockchain technology and cannot be made private.

4.2 Publicly Displayed Content

Content you upload is displayed publicly:

• NFT images are visible to all Platform users
• /[tokenId] pages are publicly accessible
• Marketplace listings are public

4.3 Third-Party Service Providers

We share information with trusted service providers:

• Coinbase: Embedded wallet authentication and wallet infrastructure (they collect your email, we don't)
• Vercel: Platform hosting and content delivery
• Cloud storage providers: Image and content storage
• Analytics services: Usage analytics (anonymized where possible)
• AI providers: OpenAI, Anthropic for AI features (coming soon)

These providers may have their own privacy policies. We encourage you to review:

• Coinbase Privacy Policy
• Vercel Privacy Policy

4.4 Legal Requirements

We may disclose information when required by law:

• In response to subpoenas or court orders
• To law enforcement investigating illegal activity
• To comply with DMCA takedown requests
• To protect our rights, property, or safety
• To report child sexual abuse material (CSAM)

4.5 Business Transfers

If x402 Pioneers is acquired or merged, your information may be transferred to the new owner.

4.6 What We Don't Share

• We don't sell your personal information to third parties
• We don't share information for marketing purposes (except our own)
• We don't have access to your email or embedded wallet credentials

5. Data Storage & Security

5.1 Where We Store Data

• Images: Stored on secure cloud infrastructure (Vercel Blob Storage or similar)
• Blockchain data: Stored permanently on the Base blockchain (decentralized)
• Usage data: Stored on secure servers in the United States

5.2 How We Protect Data

• HTTPS encryption for all Platform communications
• Secure cloud storage with access controls
• Regular security audits and updates
• Limited employee access to user data

5.3 Data Retention

• Blockchain data: Permanent and cannot be deleted
• Uploaded images: Retained as long as NFT exists or until you request deletion
• Usage data: Retained for up to 2 years for analytics
• Blacklisted wallets: Retained indefinitely for security

5.4 Security Limitations

No system is 100% secure. While we implement reasonable security measures, we cannot guarantee absolute security. You are responsible for:

• Securing your wallet credentials
• Protecting your device and internet connection
• Reporting suspected security breaches

6. Your Rights & Choices

6.1 Access Your Data

You can request access to information we hold about you by contacting privacy@basex402.com.

6.2 Delete Your Data

You can request deletion of:

• Uploaded images (removed from our servers)
• /[tokenId] pages and custom content
• Usage and analytics data

Important limitations:

• Blockchain data (wallet addresses, transactions, NFT ownership) cannot be deleted
• Data required for legal compliance may be retained
• Cached or backed-up data may take time to remove

6.3 Export Your Data

You can request a copy of your data in a portable format.

6.4 Opt-Out of Analytics

You can disable analytics cookies in your browser settings or use browser extensions like Privacy Badger.

6.5 GDPR Rights (EU Users)

If you're in the EU, you have additional rights under GDPR:

• Right to access
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

6.6 CCPA Rights (California Users)

If you're in California, you have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell your data)
• Right to non-discrimination

7. Children's Privacy

The Platform is not intended for users under 18 years old. We do not knowingly collect information from children. If you are under 18, do not use the Platform.

If we discover we've collected information from a child under 18, we will delete it promptly. Parents or guardians who believe their child has provided information should contact us immediately.

8. International Users

The Platform is hosted in the United States. If you access the Platform from outside the US:

• Your information may be transferred to and stored in the US
• US privacy laws may differ from your country's laws
• By using the Platform, you consent to this transfer

For EU users, we comply with GDPR where applicable. However, blockchain data is decentralized and not subject to traditional data residency requirements.

9. Third-Party Links & Services

The Platform may contain links to third-party websites or services:

• Base blockchain explorers (BaseScan)
• Coinbase wallet services
• Social media platforms
• Documentation and resources

We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before providing information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted with a new "Last Updated" date at the top of this page.

For material changes that significantly affect your privacy, we will provide notice through:

• Prominent notice on the Platform
• Email (if we have your contact information)

Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

11. Do Not Track Signals

Some browsers have "Do Not Track" features. Currently, there is no industry standard for responding to these signals. We do not respond to Do Not Track signals at this time.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at:

• Contact information coming soon
• Website: basex402.com

We will respond to privacy requests within 30 days.