Legal
Privacy Policy
What personal data we collect, why we collect it, how long we keep it, and the rights you have.
Last updated 11 November 2026
1. Who we are
[VIVI Legal Entity Name] (registration number [Company registration number], registered office [Registered office address]) is the controller of personal data processed through this website. Contact for privacy matters: privacy@vivi.example.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Wallet and on-chain data | Public wallet address, token balances, staking and transaction history | You, and the public blockchain |
| Technical data | IP address, approximate country, browser type, device type, pages visited, referrer, timestamps | Your browser and our hosting provider |
| Eligibility data | Your self-certification of eligibility, time of confirmation, country derived from IP | You, and our hosting provider |
| Communications | Email address and message content when you contact us or subscribe to updates | You |
| Compliance data | Information needed for sanctions and AML checks if we ask for it in future | You, and screening providers |
We do not collect your seed phrase or private keys. Blockchain data is public by design: we cannot delete it, and anyone can link a wallet address to its activity.
3. Why we use data and our legal bases
| Purpose | Legal basis |
|---|---|
| Operate, secure and improve the website and detect abuse | Legitimate interests |
| Enforce eligibility, sanctions and geographic restrictions | Legal obligation and legitimate interests |
| Respond to enquiries and send updates you asked for | Contract or consent, as applicable |
| Measure aggregate usage with privacy-friendly analytics | Legitimate interests |
| Establish, exercise or defend legal claims | Legitimate interests |
4. Who we share data with
- Hosting, edge network and analytics providers who process data on our behalf;
- Blockchain infrastructure providers, such as RPC nodes, that necessarily see your wallet address and requests;
- Professional advisers, auditors, and compliance and screening providers;
- Courts, regulators and law enforcement where we are legally required or permitted to disclose;
- A successor entity in a merger, restructuring or sale of assets, subject to equivalent protections.
We do not sell personal data and we do not use it for third-party advertising.
5. International transfers
Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision, including those recognised under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where relevant, other applicable data protection laws.
6. Retention
| Data | Retention |
|---|---|
| Server and security logs | Up to 90 days |
| Eligibility cookie | 180 days, or until you clear it |
| Support and legal correspondence | Up to 6 years after the matter closes |
| Newsletter subscription | Until you unsubscribe |
| Compliance records, if collected | As required by applicable AML and sanctions law |
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time. To exercise a right, email privacy@vivi.example. We will respond within the period required by applicable law. You may also complain to your local data protection authority.
8. Security
We use transport encryption, strict security headers, least-privilege access and monitoring to protect data. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children
The Services are not directed to anyone under 18, and we do not knowingly collect their data.
10. Changes
We will post any updates to this policy on this page and revise the effective date.