Privacy Policy

1. Who We Are

RWAddress.com is operated under the RWAddress™ brand. For privacy purposes, RWAddress™ is the data controller for all personal information collected through this Site.

Contact for privacy matters: privacy@rwaddress.com

2. What We Collect

Information You Provide Directly

• First name and last name — required for minting records
• Email address — required, verified, stored in lowercase (case-insensitive unique constraint)
• Company name — optional
• Cell phone number — optional
• Property address submitted for lookup or minting — required for service delivery
• Marketing preferences — your opt-in choices for email and SMS communications

Payment Information

Payment is processed exclusively by Stripe. We do not collect, store, or have access to your credit card number, bank account details, or any other financial account credentials. Stripe's privacy policy governs the handling of your payment data.

Automatically Collected Information

• IP address (used for fraud prevention and geographic analytics)
• Browser type and version
• Referring URL
• Pages visited and time spent on Site
• Date and time of access

Blockchain Data

When we mint an RWAddress™ on your behalf, the minting transaction — including the property address and the associated blockchain wallet address — is recorded permanently on a public blockchain. This data is by design public, immutable, and outside our ability to modify or delete. By requesting a mint, you acknowledge and accept this.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your minting order
• Send minting confirmation and post-mint instructions via email
• Communicate with you about your order or any service issues
• Send marketing and educational emails, where you have opted in
• Send SMS messages, where you have opted in
• Maintain internal records of all minting activity for audit and operational purposes
• Detect and prevent fraud or unauthorized use of our services
• Analyze Site usage to improve our services
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

4. Data Storage & Infrastructure

Your personal data is stored on server infrastructure located in the United States. Our infrastructure is protected by encrypted connections (TLS) and private network access controls.

5. International Data Transfers

Our primary data storage is located in the United States. If you are accessing this Site from outside the United States — including from the European Economic Area (EEA), United Kingdom, Canada, or other jurisdictions — your personal data will be transferred to and processed in the United States.

The United States has not received an adequacy decision from the European Commission for general data transfers. By using this Site and submitting your information, you explicitly consent to the transfer of your personal data to the United States and its processing there under the terms of this Privacy Policy.

Third-Party Services With Possible International Processing

• Stripe (Payment Processing): Stripe, Inc. is a US-based company with global operations. Your payment data may be processed in multiple jurisdictions. See Stripe's privacy policy for details.
• Cloudflare (Website Delivery): Cloudflare operates a global network and may route your connection through servers in various countries. Cloudflare may process limited request metadata globally.
• Public Blockchain Networks: Blockchain transaction data (property address, wallet addresses, transaction hashes) is broadcast to a decentralized global network of nodes. This data is public by design and has no geographic boundary.

For EEA/UK users: where we rely on your consent as the legal basis for processing, you may withdraw consent at any time by contacting us. Note that withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and will not apply to blockchain data which is irrevocably public.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, including:

• Minting records: Retained indefinitely for operational and audit purposes, given the permanent nature of blockchain transactions they correspond to
• Email marketing contacts: Retained until you unsubscribe or request deletion
• Payment transaction records: Retained for a minimum of 7 years in compliance with applicable US tax and financial recordkeeping requirements
• Server logs: Retained for 90 days, then purged

You may request deletion of your personal data at any time (see Section 14). Note that deletion requests cannot remove your data from public blockchain records, which are permanent by design.

7. Third-Party Services

We use the following third-party services in connection with operating this Site:

• Stripe — Payment processing. Governed by Stripe's Privacy Policy.
• Cloudflare Pages — Website hosting and CDN. Governed by Cloudflare's Privacy Policy.
• Alchemy — Blockchain node API for querying on-chain address status. Governed by Alchemy's Privacy Policy. Note: address queries sent to Alchemy contain the property address string.
• Cal.com — Appointment scheduling. If you book a session, governed by Cal.com's Privacy Policy.

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies directly.

8. Cookies & Tracking

We use cookies and similar tracking technologies. For full details, see our Cookie Policy. You can manage cookie preferences at any time using the cookie consent tool displayed on your first visit to the Site.

9. Security

We implement reasonable technical and organizational measures to protect your personal data, including encrypted data transmission (TLS/HTTPS), private network access controls, hardware firewall protection, and UPS-protected server hardware.

In the event of a data breach that poses a significant risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities as required by applicable law.

10. Children's Privacy

This Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe we have collected such information, please contact us immediately.

11. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know: You may request that we disclose what personal information we have collected about you, the categories of sources, the purposes of collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (including legal compliance and permanent blockchain records).
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale: We do not sell your personal information. You need not opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at privacy@rwaddress.com. We will respond within 45 days of receiving a verifiable consumer request.

12. EEA / UK Residents — GDPR Rights

If you are located in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR grants you the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal obligations and the permanent nature of blockchain records.
• Right to Restriction of Processing: Request that we limit how we use your data.
• Right to Data Portability: Request a machine-readable copy of your personal data.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time.

Our legal bases for processing your data include: performance of a contract (to fulfill your minting order), legitimate interests (fraud prevention, record-keeping), compliance with legal obligations, and consent (for marketing communications).

To exercise your rights, contact us at privacy@rwaddress.com. You also have the right to lodge a complaint with your local supervisory authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Site after such changes constitutes your acceptance of the revised Policy.

14. Contact & Data Requests