1. Information We Collect

We collect information that you provide directly, information generated through your use of the Platform, and information from third-party services you connect. Below is a comprehensive overview of the data we process:

1.1 Account Data

• Email address — Provided during registration for Email/OTP authentication.
• Full name — Provided during profile completion.
• Country — Selected during profile setup for localization and compliance.

1.2 Wallet & Blockchain Data

• MetaMask wallet address — Your public BNB Chain wallet address connected via MetaMask.
• On-chain transaction data — WEAD token transfers, ad viewing contract interactions, campaign funding, and sponsorship transactions visible on the public blockchain.
• Token balances — Your WEAD token balance read from the BNB Chain smart contract.

1.3 Google Profile Data

When you sign in with Google via Firebase, we receive:

• Google UID (unique identifier)
• Email address
• Display name
• Profile photo URL

1.4 Device & Browser Information

• User agent — Browser type, version, and operating system.
• IP address — Collected for security, fraud prevention, and approximate geolocation.
• Device type — Desktop or mobile, used for responsive experience delivery.

1.5 Location Data

• GPS coordinates — Collected only with your explicit consent for location-based ad targeting and Microtiser verification.
• Approximate location — Derived from IP address for general geographic services.

1.6 Usage Data

• Pages visited and navigation patterns within the Platform.
• Feature interactions (campaign creation, ad viewing, sponsorship activity).
• Session duration and frequency of visits.
• Advertising interaction data (views, clicks, engagement metrics).

2. How We Use Information

We use collected information for the following purposes:

• Authentication & Account Management — To verify your identity, manage your account, and maintain secure access through Email/OTP, Google Sign-In, or MetaMask.
• Ad Delivery & Campaign Management — To match advertisements with appropriate audiences, manage campaign targeting (including location-based targeting), and deliver ads to Microtiser devices.
• Token Rewards & Payments — To calculate, distribute, and track WEAD token rewards for Microtisers and process advertiser campaign funding.
• Analytics & Platform Improvement — To understand how users interact with the Platform, improve features, fix bugs, and develop new services.
• Fraud Prevention & Security — To detect and prevent fraudulent activity such as fake ad views, GPS spoofing, bot interactions, and unauthorized access.
• Communication — To send OTP codes, platform updates, and important service-related notifications.
• Legal Compliance — To comply with applicable laws, regulations, and legal processes.

3. Legal Basis for Processing

We process your personal data under the following legal bases, in accordance with the General Data Protection Regulation (GDPR) and similar privacy frameworks:

• Consent — For location data collection, optional analytics, and marketing communications. You may withdraw consent at any time.
• Contractual Necessity — To provide the services you have requested, including account creation, ad delivery, and token distribution.
• Legitimate Interest — For fraud prevention, platform security, and service improvement, where our interests do not override your fundamental rights.
• Legal Obligation — To comply with applicable laws and regulations, including financial reporting and responding to lawful requests from authorities.

4. Blockchain Data Transparency

An important aspect of the WeAD ecosystem is its use of blockchain technology. You should be aware of the following:

• Public Wallet Addresses — Your BNB Chain wallet address is publicly visible on the blockchain. Anyone can view transaction history and token balances associated with a public address.
• Immutable Transactions — Blockchain transactions are permanent and cannot be deleted, modified, or reversed. This is a fundamental property of distributed ledger technology and is beyond our control.
• Pseudonymity — While wallet addresses are public, they are pseudonymous. We do not publicly link wallet addresses to personal identities. However, if you share your wallet address publicly, others may associate it with your identity.
• Smart Contract Interactions — Your interactions with WeAD smart contracts (ad viewing, token transfers, campaign funding) are recorded on the blockchain and are publicly auditable.

Due to the immutable nature of blockchain data, the right to erasure (GDPR Article 17) cannot be fully applied to on-chain data. We can delete off-chain personal data associated with your account upon request.

5. Third-Party Services

The Platform integrates with the following third-party services, each governed by their own privacy policies:

• Firebase / Google — Authentication (Google Sign-In via OAuth 2.0). Google Privacy Policy
• Resend — Email delivery for OTP verification codes. Resend Privacy Policy
• Google Maps API — Location services, map rendering, and geocoding for campaign targeting. Google Privacy Policy
• BNB Chain (BSC) — Blockchain network for WEAD token transactions and smart contract execution.
• Leaflet — Open-source mapping library for interactive map displays.
• Chart.js — Data visualization library (client-side only, no data transmitted).
• Font Awesome — Icon library loaded via CDN.
• Google Fonts — Typography loaded via Google CDN.

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

6. Data Sharing

We do not sell your personal data. We may share information in the following limited circumstances:

• Service Providers — With trusted third-party services that help us operate the Platform (email delivery, authentication, hosting), bound by contractual obligations to protect your data.
• Advertisers — Aggregated, anonymized campaign performance metrics only. Advertisers never receive personal user data such as names, emails, or exact locations.
• Legal Requirements — When required by law, court order, or government regulation; to protect the rights, property, or safety of WeAD, our users, or the public.
• Business Transfers — In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the business transaction. You will be notified of any such transfer.
• With Your Consent — For any other purpose with your explicit consent.

7. Data Retention

We retain your data for as long as necessary to provide services and fulfill the purposes described in this policy:

• Session Data — Flask session cookies expire after 7 days of inactivity.
• Interaction Data — Ad viewing and engagement data is retained for 90 days for analytics, then anonymized.
• Account Data — Retained for the duration of your account. Upon account deletion request, off-chain personal data is removed within 30 days.
• Authentication Tokens — JWT access tokens expire after 7 days. OTP codes expire after 10 minutes.
• Blockchain Data — On-chain transaction data is permanent and immutable due to the nature of blockchain technology.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

GDPR Rights (EU/EEA Residents)

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate or incomplete personal data.
• Right to Erasure — Request deletion of your personal data (subject to blockchain data limitations as described in Section 4).
• Right to Restriction — Request restriction of processing of your personal data.
• Right to Data Portability — Receive your data in a structured, machine-readable format.
• Right to Object — Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — Withdraw consent at any time for processing based on consent.

CCPA Rights (California Residents)

• Right to Know — Request disclosure of personal information collected, used, and shared.
• Right to Delete — Request deletion of personal information.
• Right to Opt-Out — Opt out of the "sale" of personal information (note: WeAD does not sell personal data).
• Right to Non-Discrimination — Equal service and pricing regardless of exercising privacy rights.

To exercise any of these rights, contact us at wead@viewfi.live. We will respond to verified requests within 30 days (or as required by applicable law).

9. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such data promptly. If you believe we have collected data from a child, please contact us immediately at wead@viewfi.live.

10. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your jurisdiction. When we transfer data internationally, we implement appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data processing agreements with service providers.
• Reliance on adequacy decisions where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date and, where required by law, by providing more prominent notice (such as email notification or a banner on the Platform).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: wead@viewfi.live
• Website: wead.live
• Social: @WeADvertizers on X

For GDPR-related inquiries, you also have the right to lodge a complaint with a supervisory authority in your country of residence.