Privacy Policy

Effective as of March 17, 2025

We ("DEKSxyz," "we," "us," or "our") operate DEKSxyz, a platform that enables users to send, receive, and redeem cryptocurrency gifts through a decentralized exchange (DEX) interface. Users can purchase digital gift cards, redeem them into supported assets, and interact with the blockchain through wallets we provision or that they connect themselves.

This Privacy Policy describes how DEKSxyz processes personal information that we collect through our website, platform, and related services (collectively, the "Service").

Personal information we collect

Information you provide to us

Personal information you may provide to us through the Service or otherwise includes:

Account and profile data, such as your name, email, phone number, linked wallet address, and any optional information you provide.
Communications data, including messages or correspondence when you contact us through the Service, email, or social media.
Transactional data, such as blockchain transaction history, wallet interactions, gift card purchases, and redemption details.
Payment data, which is processed by our payment providers (e.g., Stripe, Coinbase) and not stored by us, but may include confirmation of payment, amounts, and timestamps.
Marketing data, including your preferences for receiving marketing communications from us.
Promotion data, such as information you provide when participating in giveaways, contests, or promotional campaigns.

Third-party sources

We may combine personal information received from you with data obtained from other sources, including:

Public sources, such as public blockchains and publicly available databases.
Vendors and partners, such as analytics providers, fraud prevention services, and blockchain service providers.
Payment processors, such as Stripe and Coinbase Commerce, which provide confirmation data regarding payments you authorize.

Automatic data collection

We and our service providers may automatically collect information about you, your device, and your interaction with the Service:

Device data, including IP address, browser type, operating system, and unique device identifiers.
Usage data, such as pages visited, features used, links clicked, and time spent.
Email/communication data, such as open rates and interaction with messages.

Tracking technologies

We and our service providers use:

Cookies, including session and persistent cookies, for authentication, analytics, and performance.
Local storage technologies, such as HTML5, for enhanced user experience.

You can manage cookies and related tracking through your browser settings.

How we use your personal information

We may use your personal information to:

Provide, operate, and improve the Service.
Process transactions, including gift card purchases, wallet redemptions, and blockchain interactions.
Personalize user experience and deliver relevant content.
Detect, investigate, and prevent fraud, security breaches, or illegal activities.
Comply with legal obligations and enforce our terms.
Communicate with you, including responding to inquiries, sending updates, and delivering promotional messages.
Conduct analytics to better understand usage and improve features.

We may share your personal information with:

Service providers, such as cloud hosting (AWS), payment processors (Stripe, Coinbase), blockchain account management providers (e.g., Privy), and analytics vendors.
Affiliates and subsidiaries within the DEKSxyz corporate family.
Professional advisors, such as auditors and lawyers, where appropriate.
Authorities, regulators, or law enforcement, if required by applicable law.
Business transferees, in connection with a merger, acquisition, financing, or sale of assets.
Other users, where interactions are public (e.g., public wallet addresses and transactions visible on blockchains).

We do not sell or share personal information for monetary or other valuable consideration as defined by US state privacy laws.

Your choices

Account settings: You can update your information by contacting us or, where available, through in-app settings.
Marketing communications: You can opt out of marketing emails by using the unsubscribe link in those emails.
Cookies: Manage browser settings to disable or delete cookies.

Your privacy rights (US residents)

Residents of certain US states (including California, Virginia, Colorado, Connecticut, and Utah) have rights under applicable privacy laws. These may include:

Right to know/access the personal information we collect, use, and disclose.
Right to deletion of personal information we hold about you.
Right to correct inaccurate personal information.
Right to opt out of the sale or sharing of personal information (we do not sell or share).
Right to limit use of sensitive personal information (we do not collect sensitive personal information as defined under applicable laws).
Right to data portability, where applicable.

You may exercise these rights by contacting us at info@deks.xyz. We may verify your identity before fulfilling a request.

Important note on deletion requests: While we will delete personal information that we control (such as email addresses, account details, and communications) as required by law, certain blockchain records (such as wallet addresses and transaction histories) are immutable and cannot be altered or deleted once written to the blockchain. In these cases, we will take all steps within our control to minimize the use or display of such data, but deletion is technically not possible.

We also recognize browser-based Global Privacy Control (GPC) signals as opt-out requests where required by law.

We will not discriminate against you for exercising your privacy rights.

Data retention and deletion

We retain personal information as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Deletable data (such as account credentials, contact details, communications, and off-chain analytics) is removed when no longer needed or upon verified deletion request.

Immutable blockchain data (wallet addresses and transaction records on public blockchains) cannot be deleted or altered once recorded, due to the nature of blockchain technology. We disclose this limitation so users can make informed decisions.

When retention is no longer necessary, we securely delete, anonymize, or otherwise de-identify data to the extent feasible.

Security

We implement technical and organizational safeguards to protect personal information, including encryption in transit and at rest, least-privilege access controls, and continuous monitoring. No system can be 100% secure, but we work to protect data against unauthorized access, use, alteration, or disclosure.

International data transfers

We are headquartered in the United States. If you access the Service from outside the US, your information may be transferred, stored, and processed in the United States or other countries where our vendors operate, which may not provide the same data protection laws as your home country.

Children's privacy

The Service is not directed to or intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us personal information, please contact us so we can delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If material changes are made, we will notify you by posting the revised policy on the Service and updating the "Effective date" above.

How to contact us

If you have questions or concerns about this Privacy Policy or our privacy practices, you may contact us at:

Email: info@deks.xyz