Privacy Policy

High Level Summary

• Isometric operates https://isometric.fi and related services. Isometric complies with applicable laws and regulations.
• The Isometric Protocol is a decentralized set of smart contracts deployed on the Internet Computer blockchain. It is not governed by Isometric.
• Isometric does not collect and store personal data, such as first name, last name, street address, date of birth, email address, or IP address, in connection with your use of the Services.
• Isometric collects non-identifiable data, such as public on-chain data, and limited off-chain data like device type, browser version, etc. This is to help drive product vision, not track users.
• Isometric continues to explore methods to further protect consumers' privacy, such as opt-out prompts, migrating to privacy-centric tooling and deploying proxies to anonymize network traffic.
• Users are empowered to explore client-side privacy techniques and tools.
• Any material changes to privacy will be reflected in an updated privacy policy.

Data We Collect

Privacy is central to everything we do at the Company. And we've enshrined transparency as one of our Company values. Accordingly, we aspire to be transparent about what little data we do collect. We do not maintain user accounts and do not collect and store personal data, such as your name or internet protocol ("IP") address. When you interact with the Services, we collect only:

• Publicly-available blockchain data. When you connect your blockchain wallet to the Services, we collect and log your publicly-available blockchain address to learn more about your use of the Services and to screen your wallet for any prior illicit activity. We screen your wallet using intelligence provided by leading blockchain analytics providers. Note that blockchain addresses are publicly-available data that are not created or assigned by us or any central party, and by themselves are not personally identifying.
• Information from localStorage and other tracking technologies. We and our third-party services providers may access and collect information from localStorage, mobile deviceID, cookies, web beacons, and other similar technologies to provide and personalize the Services and features of the Services for you across sessions. For example, we may use this information to remember tokens you import or add to your watchlist. We may also use this information to learn about your preferences, your use of the Services, and our interactions with you. Information we collect from these technologies may include things such as browser type, referring/exit pages, operating system, device or browser language, and other device information. We group and analyze these user journeys collectively, in the aggregate, to improve our product user experience.
• Information from other sources. We may receive information about your wallet address or transactions made through the Services from our service providers in order to comply with our legal obligations and prevent the use of our Services in connection with fraudulent or other illicit activities.
• Survey or usability information. If you participate in a survey or usability study with us, we will record any biographical information you directly provide to us (for example, your name, email, and job title), the responses you provide to us, and your interactions with the Services.
• Correspondence. We will receive any communications and information you provide directly to us via email, customer support, social media, or another support channel (such as Twitter or Discord), or when you participate in any surveys or questionnaires.

How We Use Data

We use the data we collect in accordance with your instructions, including any applicable terms in our Terms of Service, and as required by law. We may also use data for the following purposes:

• Providing the Services. We use the data we collect to provide, maintain, customize and improve our Services and features of our Services.
• Customer support. We may use information to provide customer support for and answer inquiries about the Services.
• Safety and security. We may use data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, solve potential security issues such as bugs, enforce our agreements, and protect our users and Company.
• Legal compliance. We may use the information we collect as needed or requested by regulators, government entities, and law enforcement to comply with applicable laws and regulations.
• Aggregated data. We may use some of the information we collect or access to compile aggregated data that helps us learn more about how users use the Services and where we can improve your experience.

How We Share Data

We may share or disclose the data we collect:

• With service providers. We may share your information with our service providers and vendors to assist us in providing, delivering, and improving the Services. For example, we may share your wallet address with service providers like Cloudflare to provide technical infrastructure services, your wallet address with blockchain analytics providers to detect, prevent, and mitigate financial crime and other illicit or harmful activities, and your activity on our social media pages with our analytics provider to learn more about how you interact with us and the Services.
• To comply with our legal obligations. We may share your data in the course of litigation, regulatory proceedings, compliance measures, and when compelled by subpoena, court order, or other legal procedure. We may also share data when we believe it is necessary to prevent harm to our users, our Company, or others, and to enforce our agreements and policies, including our Terms of Service.
• Safety and Security. We may share data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, solve potential security issues such as bugs, enforce our agreements, and protect our users, Company, and ecosystem.
• Business changes. We may transfer or share data to another entity in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset or stock sale, or other business transaction.
• With your consent. We may share your information any other time you provide us with your consent to do so.

We do not share your information with any third parties for any marketing purposes whatsoever.

Third-Party Service Providers

We rely on a limited number of third-party service providers to operate the Services. These include:

• Cloudflare for infrastructure, content delivery, edge databases, and denial-of-service mitigation. Your IP address and request metadata are processed transiently by Cloudflare to deliver the Services. See Cloudflare's privacy policy.
• The Internet Computer Protocol, a decentralized blockchain network on which the Protocol's smart contracts are deployed. Public on-chain data is recorded on the blockchain and is beyond our control.

We may add, change, or remove service providers from time to time and will reflect material changes in this Policy.

Cookies and Local Storage

We use localStorage and similar browser technologies to remember your preferences (such as locale, theme, and previously connected wallets) and to support the functionality of the Services across sessions. We do not currently deploy third-party advertising cookies, cross-site tracking pixels, or behavioral advertising tags. You can clear localStorage and cookies, or block them in advance, through your browser settings at any time. Doing so may affect your experience of the Services.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Wallet addresses and transactions associated with on-chain activity are part of the public blockchain record and cannot be deleted by us. Off-chain data, such as application logs, telemetry, support correspondence, and screening results, is retained for no longer than 24 months unless a longer retention period is required by law or is necessary for the establishment, exercise, or defense of legal claims.

Third-Party Links and Sites

We may integrate technologies operated or controlled by other parties into parts of the Services. For example, the Services may include links that hyperlink to websites, platforms, and other services not operated or controlled by us. Please note that when you interact with these other parties, including when you leave the Site, those parties may independently collect information about you and solicit information from you. You can learn more about how those parties collect and use your data by consulting their privacy policies and other terms.

Security

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. You are responsible for all of your activity on the Services, including the security of your blockchain network addresses, cryptocurrency wallets, and their cryptographic keys.

Age Requirements

The Services are intended for a general audience and are not directed at children. We do not knowingly receive personal information (as defined by the U.S. Children's Privacy Protection Act, or "COPPA") from children. If you believe we have received personal information about a child under the age of 18, please contact us at support@isometric.fi.

Additional Notice to California Residents (CCPA / CPRA Notice)

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA/CPRA"), requires certain businesses to provide California residents with a notice describing how we collect, use, and share their personal information, and the rights and choices we offer regarding our handling of that information.

• No Sale or Sharing for Targeted Advertising. We do not "sell" personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.
• Right to Know and Access. You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for which we collected it, and the categories of third parties with whom we shared it.
• Right to Correct. You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Delete. You have the right to request the deletion of personal information we have collected from you, subject to the exceptions set out in the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information. Where we process sensitive personal information (as defined under the CCPA/CPRA), you have the right to limit our use of that information to the purposes specified in the statute. We do not currently use sensitive personal information for any purpose that would trigger this right.
• Right to Non-Discrimination. You are entitled to exercise the rights described above free from discrimination.
• Submitting a Request. You can submit a request for access, correction, or deletion to support@isometric.fi. We will respond only to the extent we are able to associate, with a reasonable effort, the information we maintain with the identifying details you provide. We may need to verify your identity before processing your request. If we deny a request, we will communicate the decision to you.
• Authorized Agents. California residents may designate an "authorized agent" to submit requests on their behalf. We will require the authorized agent to have written authorization confirming their authority.

Disclosures for European Union Data Subjects

We process personal data for the purposes described in the section titled "How We Use Data" above. Our bases for processing your data include: (i) you have given consent to the process to us or our service provides for one or more specific purposes; (ii) processing is necessary for the performance of a contract with you; (iii) processing is necessary for compliance with a legal obligation; and/or (iv) processing is necessary for the purposes of the legitimate interested pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests.

Your rights under the General Data Protection Regulations ("GDPR") include the right to (i) request access and obtain a copy of your personal data, (ii) request rectification or erasure of your personal data, (iii) object to or restrict the processing of your personal data; and (iv) request portability of your personal data. Additionally, you may withdraw your consent to our collection at any time. Nevertheless, we cannot edit or delete information that is stored on a particular blockchain. Information such as your transaction data, blockchain wallet address, and assets held by your address that may be related to the data we collect is beyond our control.

To exercise any of your rights under the GDPR, please contact us at support@isometric.fi. We may require additional information from you to process your request. Please note that we may retain information as necessary to fulfill the purpose for which it was collected and may continue to do so even after a data subject request in accordance with our legitimate interests, including to comply with our legal obligations, resolves disputes, prevent fraud, and enforce our agreements.

We do not maintain an establishment in the European Union or the United Kingdom. If you are an EU or UK data subject and wish to exercise rights that require communication with a local representative under Article 27 of the GDPR or its UK equivalent, please contact us at support@isometric.fi and we will provide an appropriate point of contact or, where required by law, appoint a representative.

You also have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data infringes the GDPR or equivalent local law.

Changes to this Policy

If we make material changes to this Policy, we will notify you via the Services. Nevertheless, your continued use of the Services reflects your periodic review of this Policy and other Company terms, and indicates your consent to them.

Contact Us

If you have any questions about this Policy or how we collect, use, or share your information, please contact us at support@isometric.fi.