Privacy

This Privacy Policy explains what BlockDesk ("we", "us") collects when you use BlockDesk Growth (the "Service"), why, who sees it and what you can do about it. It works together with our Terms.

1. What we collect

• Account: your email address, username, chosen avatar or uploaded profile photo, role (user or project), and optionally your full name.
• Projects: project name, website, contact name, chain and X handle given at sign-up, and the campaigns you create.
• Campaign activity: campaigns you join, the task proof you send (links and text), review results and rewards.
• Payouts: the Syscoin payout address you save, and records of payouts and their transaction IDs.
• Partner applications: name, type, links, content types, languages, regions, chains, topics, optional price range and logo, and a contact email.
• Security: sign-in links, sessions and backup codes are stored only in scrambled (hashed) form; your authenticator secret is stored encrypted. We keep a log of admin actions.
• Technical: your IP address is used briefly, in scrambled form, to limit abuse such as too many sign-in attempts. Our hosting provider may keep standard request logs.

Photos and logos are cropped and re-saved before storage, which removes hidden data such as location (EXIF/GPS). We do not collect face images, biometric data or identity documents. We do not use advertising or analytics trackers. Your sign-in is kept in your browser's session storage, which clears when you close the tab; we do not use tracking cookies.

2. Why we use it

• To create and secure your account and send sign-in links.
• To run campaigns: check eligibility, review task proof and pay rewards.
• To review projects, campaigns and partner applications.
• To send service emails, such as sign-in links and review or payout updates.
• To prevent fraud, cheating, spam and abuse, and to meet legal obligations.

3. Who sees what

• Projects see the username, photo or avatar and earned badges of people who join their campaigns, plus totals. They do not see your email, full name or payout address.
• The public sees approved campaigns and, for approved partners, the name, type, links, focus and logo. Partner contact emails and prices are never public.
• Your full name is visible only to you. We do not share it with projects or other people.
• Service providers process data for us: Cloudflare (hosting and database) and Resend (email delivery). Payouts are recorded on the public Syscoin blockchain, where the address and amount are visible to anyone.
• We may disclose data if the law requires it, to protect people or the Service, or as part of a business transfer. We do not sell personal data.

4. How long we keep it

Sign-in links, sessions and abuse-limit records expire and are deleted automatically. Account, campaign and payout records are kept while your account is open and afterwards as long as needed for payouts, fraud prevention, disputes and legal obligations. Removed photos and logos are deleted right away.

5. Your choices and rights

• You can change your name, photo and payout address on your profile at any time, and remove your photo.
• You can ask for a copy of your data, for corrections, or for your account to be deleted by emailing [email protected] from your account's email address. Some records may be kept where the law or open payouts require it.
• Depending on where you live, you may have further rights, including to object to or restrict processing and to complain to your data protection authority.

6. Security

We use encryption in transit, hashed sign-in secrets, encrypted authenticator secrets, two-factor sign-in for admin, and limits against abuse. No system is perfectly secure, and we cannot guarantee the security of information you send us.

7. International transfers

Our providers run worldwide, so your data may be processed outside your country. We rely on our providers' standard safeguards for these transfers.

8. Children

The Service is for people aged 18 and over. We do not knowingly collect data from children; if we learn we have, we delete it.

9. Changes

We may update this policy. We will change the date at the top and, for significant changes, tell signed-in users.

10. Contact

[email protected]