Privacy Policy

Updated on: November 25, 2024

Chia Network Inc. (“Chia,” “us,” “we”) protects any information that can be used to identify or relate to a particular individual, directly or indirectly, and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations (“Personal Data”). This Privacy Policy (“Policy”) describes how Chia collects and processes Personal Data on the www.chia.net website and any other Chia websites or applications on which this Policy appears (“Chia Services”). By accessing, viewing, browsing, and otherwise using the Chia Services, you agree with this Policy. If you do not agree with any part of this Policy, you should not access, view, browse and otherwise use the Chia Services.

Your use of the Chia Services is at all times subject to our Terms of Use, which incorporates this Policy. This Policy does not cover the practices of companies we don’t own or control or people we don’t manage. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

I Have a Question About This Policy; How Can I Reach Chia?

You may direct all questions and concerns about this Policy or questions regarding exercising your privacy rights to Chia Network Inc., 611 Gateway Boulevard, Suite 120, South San Francisco, California 94080, United States, Attention: Privacy, a data controller for Personal Data collected and processed in connection with the Chia Services. You may contact Chia Network Inc. via regular mail or email at [email protected].

What Information Do We Collect and How Do We Collect It?

(1) Information you may provide to us:

You may share information about yourself by corresponding with us, or filling in forms in the Chia Services, including information you provide when reporting a problem with the Chia Services, participating in the Chia beta testing program, or by corresponding with us by phone, email or otherwise.

(a) Wallet services:

First and last name – but you may use a pseudonym as your display name instead
Email address
Username
Password hash
Vault address and information
Public keys
Vault recovery phrase
- This only could apply if you use a BLS recovery key because it is generated on the vault frontend
- We do not collect private keys corresponding to passkeys or hardware signer keys
Vault recovery information
Transaction information such as other wallet addresses
Mobile device ID

(2) Information we collect about you:

We automatically log information about you and your computer when you visit the Chia Services, as explained in more detail below. This includes computer operating system type,‎ browser type, and language, how long you spent on a page,‎ access times,‎ geolocation, and information about your use of and actions on the Chia Services.

(a) Aggregate Data:

As is true of most websites, Chia gathers certain information automatically and stores it in log files. This information includes aggregated data such as internet protocol (IP) address, operating system, browser type, internet service provider (ISP), referring/exit website pages, date/time stamp, clickstream data, and wallet services metrics (including your interactions with service features and content, your preferences, and occurrence of technical errors). We use this information, which does not identify individual users, to analyze trends, to administer the Chia Services, to track users’ movements around the Chia Services and to gather demographic information about our user base. We may disclose aggregated information about you and information that does not identify any individual or device, without restriction.

(b) Tracking Technologies

Chia Services uses cookies. Cookies are small data files stored on your hard drive by a website. Cookies help Chia to make our Chia Services and your visit better. We may also use cookies to see which parts of the Chia Services people use and like, and to count visits. We process the cookie data collected in accordance with this Policy. You may, at any time, permanently deny the setting of cookies by changing the setting of your Internet browser. This is possible in all popular Internet browsers. However, deactivating the setting of cookies may change the availability of some functions available through the Chia Services.

You can learn more about how cookies work at: https://allaboutcookies.org/.

(c) Mobile Applications:

If you download and install certain mobile applications and software we make available, we may receive information about your location and mobile device, as applicable. We may also receive and collect information transmitted from your device for the purpose of providing you the relevant Chia Services, such as information regarding when you are logged on and available to receive updates, alert notices, or other push notifications.

What Legal Basis Do We Have to Collect Your Information?

Chia collects Personal Data only when we have a legal basis to do so.

For wallet services, such as Chia’s wallet websites and mobile applications, Chia collects your Personal Data to provide the Chia Services based on your consent and contractual necessity to register your account or other user profiles; conduct normal business operations, such as managing your account or user profiles; to provide the relevant and applicable Chia Services; process orders and transactions; billing; providing any applicable support and assistance for the Chia Services; personalizing the Chia Services

In most cases, and where processing of Personal Data does not unduly infringe your rights and freedoms, Chia relies on our legitimate interests in conducting normal business operations. Our legitimate interests include but are not limited to, enhancing the security of our network and information systems, carrying out processing operations for statistical purposes, and identifying or preventing fraud.

We may need to process your Personal Data in order to negotiate or perform on a contract to which you are a party.

In some cases, we may have to process your Personal Data under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.

Does Chia Share My Personal Data?

Chia is not in the business of selling your Personal Data. However, your Personal Data may be shared with others in accordance with this Policy in the following circumstances:

(a) Third-party service providers

Third-party providers employed by Chia to perform functions on our behalf may require access to Personal Data to perform their services. Such functions may include data analysis, payment processing, content transmission, and website analytics partners. However, all third-party providers must process Personal Data in accordance with this Policy and as permitted by applicable data protection laws.

Our payment processing partners, such as Stripe, Inc., collect your voluntarily-provided payment card information as necessary to process your payment. Please see their respective terms of service and privacy policy for information on their use and storage of your Personal Data.

(b) Protection of Chia and others

Chia may release Personal Data to comply with the law or with regulatory obligations; enforce or apply our Terms of Use and other agreements; protect Chia’s rights, property, and safety; and protect the rights, property, and safety of others.

How Secure is My Personal Data?

Chia Services is designed with security in mind. We use encryption protocols and software to protect your Personal Data during transmission, and work to maintain electronic, physical, and procedural safeguards when collecting, storing, or disclosing your Personal Data.

We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your passkey, password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

Can I Withdraw My Consent for Chia’s Processing of My Personal Data; Data Subject Rights?

If you consented to Chia’s processing of your Personal Data for a specified purpose, you may withdraw your consent at any time. Subject to applicable law, you have the right to request access to, correct, and delete your personal data, and to ask for data portability. You may also object to our processing of your personal data or ask that we restrict the processing of your personal data in certain instances. If you wish to do any of these things, please contact [email protected].

You may have certain applicable rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please contact [email protected]. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.

Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data. You can also access certain of your Personal Data by logging on to your account.
Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. You can also correct some of this information directly by logging on to your account.
Erasure: You can request that we erase some or all of your Personal Data from our systems.
Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of the applicable Chia Services.
Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
Restriction of Processing: You can ask us to restrict further processing of your Personal Data.

Transfers of Personal Data

The Chia Services may be hosted and operated in the United States (“U.S.”) and elsewhere throughout the world through Chia and its service providers, where the laws may differ from the laws where you reside. By using the Chia Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Chia and may be hosted on U.S. servers and elsewhere throughout the world, and you authorize Chia to transfer, store and process your information to and in the U.S. and elsewhere throughout the world as necessary to perform our duties in providing you with the Chia Services. Additionally, you understand that your Personal Data may be processed in countries (including the United States) where laws regarding processing Personal Information may be less stringent than in your country.

How Long Does Chia Keep My Personal Data?We keep your personal information to enable your continued operation of the Chia Services, for as long as it is required in order to fulfill the relevant purposes described in this Policy, or as may be required by law such as for tax and accounting purposes, or as otherwise communicated to you. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.