Privacy
Policy
This Privacy Policy (the “Policy”) explains how CK Finance (“the Company”, “we”, “us” or “our”) collects, uses, and shares data in connection with the CK Finance web app (ck.app), ck.finance website, and all of our other properties, products, and services (the “Services”). Your use of the Services is subject to this Policy as well as our Terms of Service
Please read this privacy notice carefully as it will help you understand what we do with the information that we collect.
High Level Summary
CK Finance is an incorporated company that operates through our domains, including ck.app and ck.finance, among other products and services. CK Finance complies with applicable laws and regulations. The CK Finance Protocol is a censorship-resistant set of smart contracts deployed across various Layer 1 and Layer 2 chains. It is not governed by CK Finance. CK Finance does not collect and store personal data, such as first name, last name, street address, date of birth, email address, or IP address, in connection with your use of the Services. CK Finance collects non-identifiable data, such as public on-chain data and limited off-chain data like device type, browser version, etc. This data is used to help drive our production vision, not to track users. If you specifically sign up to receive emails from us, we will store your email address to allow us to send you those emails. You can unsubscribe at any time. We will not attempt to link your email address to your wallet address, IP address, or other personal data. CK Finance continues to explore methods to further protect consumers' privacy, such as opt-out prompts, migrating to privacy-centric tooling, and deploying proxies to anonymize network traffic. Users are empowered to explore client-side privacy techniques and tools. Any material changes to our privacy practices will be reflected in an updated privacy policy.
Data We Collect
Privacy is central to everything we do at CK Finance, and we've enshrined transparency as one of our core values. Accordingly, we aspire to be transparent about the limited data we collect. We do not maintain user accounts and do not collect or store personal data, such as your name or internet protocol (“IP”) address. When you interact with the Services, we collect only:
- Publicly-Available Blockchain Data: When you connect your non-custodial blockchain wallet to the Services, we collect and log your publicly-available blockchain address to learn more about your use of the Services and to screen your wallet for any prior illicit activity. We screen your wallet using intelligence provided by leading blockchain analytics providers. Note that blockchain addresses are publicly available data that are not created or assigned by us or any central party and are not personally identifying by themselves.
- Information from LocalStorage and Other Tracking Technologies: We and our third-party service providers may access and collect information from localStorage, mobile device ID, cookies, web beacons, and other similar technologies to provide and personalize the Services and features across sessions. For example, we may use this information to remember tokens you import, star, or add to your shopping bag. This information may include browser type, referring/exit pages, operating system, device or browser language, and other device information. We analyze these user journeys collectively, in aggregate, to improve our product user experience.
- Information from Other Sources: We may receive information about your wallet address or transactions made through the Services from our service providers to comply with legal obligations and to prevent the use of our Services in connection with fraudulent or other illicit activities.
- Survey or Usability Information: If you participate in a survey or usability study with us, we will record any biographical information you directly provide (for example, your name, email, and job title), the responses you provide, and your interactions with the Services.
- Correspondence: We will receive any communications and information you provide directly to us via email, customer support, social media, or another support channel (such as Twitter or Discord), or when you participate in any surveys or questionnaires.
- Biographical Information: If you apply for a job with us, we collect all information provided through our Jobs form, including name, email, phone number, work and immigration status, and any other resume, cover letter, or free-form text you include.
- Information You Specifically Provide Us: If you provide us with information (such as your email address), we may use that information for the purposes described when you provide it. We will not attempt to link any information you provide to your wallet address, IP address, or other personal data. You do not need to provide us with any personal data to use the Services.
How We Share Data
We may share or disclose the data we collect:
- With Service Providers: We may share your information with our service providers and vendors to assist us in providing, delivering, and improving the Services. For example, we may share your wallet address with service providers like Infura and Cloudflare for technical infrastructure services, with blockchain analytics providers to detect, prevent, and mitigate financial crime and other illicit activities, and your activity on our social media pages with our analytics provider to learn more about how you interact with us and the Services.
- To Comply with Legal Obligations: We may share your data in the course of litigation, regulatory proceedings, compliance measures, and when compelled by subpoena, court order, or other legal procedures. We may also share data when we believe it is necessary to prevent harm to our users, CK Finance, or others, and to enforce our agreements and policies, including our Terms of Service.
- Safety and Security: We may share data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, resolve potential security issues such as bugs, enforce our agreements, and protect our users, CK Finance, and ecosystem.
- Business Changes: We may transfer or share data to another entity in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset or stock sale, or other business transaction.
- With Your Consent: We may share your information any other time you provide us with your consent to do so. We do not share your information with any third parties for any marketing purposes whatsoever.
Third Party Cookies
We use services provided by Google and other third parties that utilize tracking technology such as cookies, device ID, and localStorage to collect information about your use of the Services and our interactions with you. You can opt out of having your online activity and device data collected through these third-party services by:
- Blocking Cookies: Adjust your browser settings to block cookies. For more information about cookies, including how to view, manage, and delete them, visit www.allaboutcookies.org.
- Blocking Advertising ID: Limit the use of your advertising ID on your mobile device through your device settings.
- Using Privacy Plug-ins or Browsers: Certain browsers and browser extensions can be configured to block third-party cookies and trackers.
- Opting Out with Google: Utilize the platform opt-out provided by Google at https://adssettings.google.com. You can learn more about how Google uses your information by reviewing Google’s privacy policy at https://policies.google.com/privacy.
- Advertising Industry Opt-Out Tools: Use advertising industry opt-out tools on each device or browser where you use the Services, available at http://optout.aboutads.info and http://optout.networkadvertising.org.
Third-Party Links and Sites
We may integrate technologies operated or controlled by other parties into parts of the Services. For example, the Services may include links that hyperlink to websites, platforms, and other services not operated or controlled by us. Please note that when you interact with these other parties, including when you leave the site, those parties may independently collect information about you and solicit information from you. You can learn more about how those parties collect and use your data by consulting their privacy policies and other terms.
Security
We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the internet is not completely secure, and we cannot guarantee the security of information about you. You are responsible for all of your activity on the Services, including the security of your blockchain network addresses, cryptocurrency wallets, and their cryptographic keys.
Age Requirements
The Services are intended for a general audience and are not directed at children. We do not knowingly receive personal information (as defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) from children. If you believe we have received personal information about a child under the age of 18, please contact us at [email protected].
Additional Notice to California Residents (“CCPA Notice”)
The California Consumer Privacy Act of 2018 (“CCPA”) requires certain businesses to provide a CCPA Notice to California residents to explain how we collect, use, and share their personal information, as well as the rights and choices we offer California residents regarding our handling of their information.
- Privacy Practices: We do not “sell” personal information as defined under the CCPA. Please review the “How We Share Data” section above for further details about the categories of parties with whom we share information.
- Privacy Rights: The CCPA gives individuals the right to request information about how we have collected, used, and shared your personal information. It also gives you the right to request a copy of any information we may maintain about you. You may also ask us to delete any personal information that we may have received about you. Please note that the CCPA limits these rights by prohibiting us from providing certain sensitive information in response to access requests and limiting the circumstances under which we must comply with a deletion request. We will respond to requests for information, access, and deletion only to the extent we are able to associate, with a reasonable effort, the information we maintain with the identifying details you provide in your request. If we deny the request, we will communicate the decision to you. You are entitled to exercise the rights described above free from discrimination.
- Submitting a Request: You can submit a request for information, access, or deletion to [email protected].
- Identity Verification: The CCPA requires us to collect and verify the identity of any individual submitting a request to access or delete personal information before providing a substantive response.
- Authorized Agents: California residents can designate an “authorized agent” to submit requests on their behalf. We will require the authorized agent to have written authorization confirming their authority.
Disclosures for European Union Data Subjects
We process personal data for the purposes described in the section titled “How We Use Data” above. Our bases for processing your data include: (i) you have given consent to the processing by us or our service providers for one or more specific purposes; (ii) processing is necessary for the performance of a contract with you; (iii) processing is necessary for compliance with a legal obligation; and/or (iv) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests. Your rights under the General Data Protection Regulations (“GDPR”) include the right to (i) request access and obtain a copy of your personal data, (ii) request rectification or erasure of your personal data, (iii) object to or restrict the processing of your personal data, and (iv) request portability of your personal data. Additionally, you may withdraw your consent to our collection at any time. Nevertheless, we cannot edit or delete information that is stored on a particular blockchain. Information such as your transaction data, blockchain wallet address, and assets held by your address that may be related to the data we collect is beyond our control. To exercise any of your rights under the GDPR, please contact us at [email protected]. We may require additional information from you to process your request. Please note that we may retain information as necessary to fulfill the purpose for which it was collected and may continue to do so even after a data subject request in accordance with our legitimate interests, including to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.
Changes to this Policy
If we make material changes to this Policy, we will notify you via the Services. Nevertheless, your continued use of the Services reflects your periodic review of this Policy and other Company terms and indicates your consent to them.
Contact Us
If you have any questions about this Policy or how we collect, use, or share your information, please contact us at [email protected].