Privacy Policy

1. INTRODUCTION

This policy sets out the basis on which ONFINALITY PTE. LTD. (together with our subsidiaries, our holding company, or subsidiaries of our holding company from time to time, collectively “we”) collect Personal Data from you and how we process such data.

By using, visiting, accessing or registering to use, logging into the Platform found at our website at https://onfinality.io/ (our “Website”), and/or any of its subdomains, and/or accessing any of the products or services available on our Website or the platform thereon (“Platform”), you accept the practices described in this policy whether you are a paying user or a non-paying visitor. You may not use the Website if you do not accept the terms of this Privacy Policy.

If you are located in the United Kingdom or the European Economic Area your attention is drawn to the section below headed “Additional information for users of our Website/Platform who are located in the United Kingdom or the European Economic Area”..

This policy was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of personal information. We are happy to provide any additional information or explanation needed. Any request for further information should be sent to privacy@onfinality.io.

2. CHANGES TO THIS POLICY

We may change this policy by uploading a revised policy onto our website. The change will apply from the date that we upload the revised policy.

This policy was last updated on December 3rd 2024.

3. DEFINITIONS

In this Privacy Policy, unless the context otherwise requires, “Personal Data” means (a) data, whether true or not, about an individual who can be identified (i) from that data; or (ii) from that data and other information to which we have or are likely to have access, and (b) any other similar definition under any applicable Personal Data protection laws.

4. WHAT PERSONAL INFORMATION DO WE COLLECT?

Directly from you

We collect the following information directly from you:

• When you register for, or login to, an account on our website or related services, we collect your name, email address, user name, password, and any other information we require or ask for to set you up with an account. We may collect some of this information using third party authentication services (as described further in the from third party sources section below).
• When you fill in a contact or enquiry form on our website, call us, meet us in person or otherwise contact us, we collect your name, email address, and any other information you choose to provide to us.
• When you sign up to our newsletter and other electronic alerts, we collect your name, email address, any other information you provide to us when you ask to receive our newsletter or other alerts.
• When you respond to our feedback surveys, we collect your name, email address, any other information you choose to include in your response.
• When you purchase products or services from us, we collect your billing address, and any other information you submit to us for billing and order fulfilment purposes. We use a third party service provider (Stripe Inc) to process credit card transactions. We do not have access to your credit card information. You can see further information about how they process your credit card information in their privacy policy.

Some of the personal information that we collect directly from you may be mandatory and some may be optional. We will let you know which of these applies at the time we collect the relevant personal information. While you do not have to provide us with some of the information that we may request, this might mean that our products and services may not perform as well as they should, or that we may not be able to provide some parts of the website or all of our products or services to you. If you require further information about the consequences of not providing us with any information, please contact us at privacy@onfinality.io

Automatically when you use our website or services

When you access and use our website or related services we may automatically collect information about your device and usage of our website, products and services, including your operating system, browser type, time spent on certain pages of the website/pages visited/links clicked/language preferences.

For the sole purpose of providing our service, we temporarily record IP addresses and request origins to check against free usage limits, provide efficient load balancing, prevent denial of service attacks against our infrastructure, and to analyse the geographic origin of requests to determine where best to locate our nodes. We do not, and will never, correlate or link specific wallet addresses or transactions made over our infrastructure to the IP address or request origin making the RPC request. After processing IP addresses to identify the geographic source of the request, we discard the IP address value within 24 hours.

Some of this data is collected through third party tools and/or the use of cookies, web beacons and similar storage technologies. Please refer to our cookie policy below for further information, including information on how you can disable these technologies.

Children

We do not intend to collect personal information from or about children aged under 16. If you have reason to believe that we have collected personal information from or about a child under the age of 16, please contact us at privacy@onfinality.io.

5. HOW WE USE YOUR PERSONAL INFORMATION

We may use your Personal Data for the following purposes:

• providing, operating and administering the Website, Platform and/or services, which shall include the maintenance, servicing and termination of any accounts registered with the Platform;
• improving, enhancing and developing our Website, Platform and/or services;
• check against free usage limits, provide efficient load balancing, prevent denial of service attacks against our infrastructure, and to analyse the geographic origin of requests to determine where best to locate our nodes;
• researching, designing and launching new features or products;
• processing applications for the use of the Website, Platform and/or services, including the facilitation execution, or administration of any transaction(s) requested and/or authorised by you;
• managing, administering or presenting content and information on our Website, Platform and/or services in the most effective manner for you and for the device you use;
• providing you with alerts, updates, materials or information about our services or other types of information that you requested or signed up to;
• carrying out our contractual obligations arising from contracts entered into between you and us and for the enforcement of our legal or contractual rights;
• collecting overdue amounts;
• to verify your identity so as to ensure the safety and integrity of the transactions made through our Platform (including through any payment processor);
• to monitor electronic communications and calls for management quality control and training;
• where applicable, for complying with applicable local and foreign laws and regulations applicable to us in or outside of Singapore that may include the conduct of due diligence procedures for opening of accounts and ongoing monitoring purposes;
• where applicable, for legal and compliance purposes under applicable local and foreign laws that include the monitoring and compliance procedures that is in line with the internal risk management procedures, audit/financial accounting and for management reporting purposes;
• to comply with any applicable legislation, law, regulations, codes of practice, rules, including where information is to be disclosed to law enforcement agencies and other relevant authorities for investigations, crime prevention and detection purposes;
• to prevent and/or detect fraudulent behaviour or transactions or potential illegal or criminal activity as part of our efforts to keep our Platform safe and secure;
• responding or taking part in legal proceedings, including seeking professional advice;
• market our products and services to you, including contacting you electronically (e.g. by text or email for this purpose);
• communicating with you and responding to your questions or requests;
• for internal operations, including troubleshooting and data analysis to learn about and understand the behaviour and preferences of users, testing, research, statistical and survey purposes to identify products or services which we might offer to existing and future users;

We may use your Personal Data in direct marketing (i.e. offering or advertising products or services by sending the relevant information directly to you). In relation to direct marketing, where we are required to do so, we will obtain your consent before using your Personal Data for this purpose. If you prefer not to receive our direct marketing communications and/or not have your Personal Data shared among the members of our group for the purpose of marketing, you can have your name deleted from our direct marketing and/or shared information lists by clicking 'unsubscribe' at the footer of our emails or submit a request to us at privacy@onfinality.io.

By visiting or using our Website/Platform or our services, you expressly accept and acknowledge that we collect, use and/or disclose the Personal Data we collect in the ways listed above.

If we need to collect, use and/or disclose your Personal Data for additional purposes, unless excepted by law, we will seek prior consent from you where you will be informed of the new purposes, and we will obtain your consent before such Personal Data will be collected, used and/or disclosed by us.

6. PROTECTING YOUR PERSONAL INFORMATION

We will use technical and organisational measures to safeguard your Personal Data, for example:

• access to your account is controlled by a password of your choice and which you are responsible for maintaining the security of;
• all Personal Data you provide to us is stored on our secure servers;
• any payment transactions will be encrypted using TLS/SSL technology;
• where possible, any communications will be encrypted using TLS/SSL technology;
• we restrict access to Personal Data to our employees, service providers and contractors on a strictly need-to-know basis and ensure that those persons are subject to contractual confidentiality obligations;
• We review our Personal Data collection, storage and processing practices from time to time to guard against unauthorised access, processing or use.

You play an important role in keeping your personal information secure by maintaining the confidentiality of any password and accounts used in relation to our products and services. You should not disclose your password to third parties. Please notify us immediately if there is any unauthorised use of your account or any other breach of security.

While we will use all reasonable efforts to safeguard your Personal Data, you acknowledge that the transmission of information via the Internet is not completely secure and for this reason we cannot guarantee the security or integrity of any Personal Data that is transferred from you or to you via the internet; any transmission is at your own risk.

In the event that there is a security breach involving your Personal Data, we will inform you of the incident as soon as practicable and in accordance with the relevant data protection laws.

7. DISCLOSING YOUR PERSONAL INFORMATION

We will keep your Personal Data we hold confidential but you agree we may provide your Personal Data to:

• any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in Section 5 of the Companies Act (Chapter 50);
• employees, agents, advisers, auditors, contractors, financial institutions, and third party service providers in connection with our operations or services (for example staff engaged in the fulfilment of your order, the processing of your payment and the provision of support services);
• our overseas offices, affiliates, business partners and counterparts (on a need-to-know basis only);
• persons under a duty of confidentiality to us;
• persons to whom we are required to make disclosure under applicable laws and regulations in or outside of Singapore;
• or actual or proposed transferees of our operations (or a substantial part thereof) in or outside of Singapore.

We will also need to share your Personal Data if we are under a duty to disclosure or share it to comply with a legal obligations, in which case we will share your information with law enforcement agencies in connection with any investigation to help prevent unlawful activity.

We will also share your information with third parties in the event that:

• we sell or buy any business or assets, in which case we will disclose your Personal Data to the prospective seller or buyer of such business or assets (but only to the extent we need to, and always in accordance with data protection legislation) and/or
• if we or substantially all of our assets are acquired by a third party, in which case Personal Data held by us about our customers will be part of the assets transferred to such third party.

We process your Personal Data for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your Personal Data in this way, the relevant buyer of our business may not be able to provide services to you.

Where applicable, we will ensure that the Personal Data enjoys the same standards of protection as set out in this Policy.

If we transfer any of your Personal Data to a country or territory outside Singapore, or to our group or affiliates companies located outside Singapore, or to a permitted third party located outside of Singapore, we will only do so if we ensure that the overseas receiving party is bound by legally enforceable obligations to afford the transferred data a standard of protection that is comparable to that under Singapore law. We will also ensure that any overseas recipient is able to provide appropriate technical and organisational measures to protect your Personal Data and its confidentiality.

8. YOUR RIGHTS

You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all of the purposes listed above by submitting your request via email to our Data Protection Officer at the contact details provided below. We will endeavour to process your request within ten (10) business days from the day of receipt of your request, otherwise, we will provide you with the estimated time frame for us to carry out your request.

If you have consented or signed up to receive marketing materials, you may withdraw your consent at any time and request us to stop sending you marketing materials or to stop using your Personal Data for any other marketing activities by submitting your request via email to our Data Protection Officer at the contact details provided below. We will endeavour to process your request within seven (7) business days from the day of receipt of your request.

Please note that depending on the nature and scope of your request for withdrawal of consent, we may not be in a position to continue providing the Platform or our services to you. In our acknowledgement email to you upon your request for withdrawal of consent, we will inform you of the likely consequences of withdrawing consent.

If you do withdraw your consent, we will work with all relevant stakeholders such as data intermediaries and agents who have been authorised to collect, process or use your Personal Data to ensure that such relevant stakeholders also cease to collect, process or use your Personal Data.

You may have additional rights if you are located in the United Kingdom or the European Economic Area (see the section below headed “Additional information for users of our Website/Platform who are located in the United Kingdom or the European Economic Area”).

9. ACCESS

You may send our Data Protection Officer requests for:

• access to Personal Data which we hold about you;
• access to information about the ways in which we use or disclose or may have used or disclosed your Personal Data for the year immediately preceding the date of your request.

Subject to unforeseen circumstances, any access request may be subject to a reasonable fee to meet our costs in providing you with details of the information we hold about you.

If we are unable to respond to your requests within thirty (30) days after receipt of your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to the request.

If you are in the United Kingdom or the EEA you should refer to the section below headed “Additional information for users of our Website/Platform who are located in the United Kingdom or the European Economic Area”.

10. DATA RETENTION OBLIGATIONS

We will only retain and use Personal Data for as long as is required by law or for other legitimate business purposes including complying with our legal obligations, resolving disputes and enforcing our agreements.

• the purpose for which the Personal Data was collected is no longer relevant;
• where you have deleted your account with us, whichever is later.

To determine the appropriate retention period for the Personal Data we hold, we will consider the amount, nature and sensitivity of the Personal Data, the risk of harm from unauthorised use or disclosure of your Personal Data, the reasons why we handle your Personal Data, whether we can achieve those purposes through other means, and the applicable legal requirements.

We may also anonymise your Personal Data so that it can no longer be associated with you, in which case we may retain and use this information indefinitely without further notice to you.

11. ACCURACY OF AND CORRECTION OF PERSONAL DATA

We will make reasonable efforts to ensure the accuracy and completeness of the Personal Data you provide to us and/or update your Personal Data associated with your account on the Platform. However, we also will require you to provide us with accurate, up-to-date and complete information. In order to ensure that the Personal Data that we maintain is accurate, you may send our Data Protection Officer at any time requests to update your information or for correction of errors or omissions in Personal Data which we hold about you.

We will generally not charge for correction requests, although we reserve the right to do so under unforeseen circumstances. If we are unable to respond to your requests within thirty (30) days after receipt of your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to the request.

If you are in the United Kingdom or the EEA you should refer to the section below headed “Additional information for users of our Website/Platform who are located in the United Kingdom or the European Economic Area”.

12. THIRD-PARTY SITES

Our Platform/Website or our communication with you may, from time to time, contain links to third-party websites and/or websites of our partner networks, advertisers, affiliates and third party service providers, over which we have no control.

If you follow a link to any of these websites, please note that they have their own practices and policies. We encourage you to read the privacy policies or statements of these websites to understand your rights. We accept no responsibility or liability for your access of third-party websites.

13. OTHER RIGHTS

In addition to the rights to access and correct your personal information, if you are based in the EU or UK, you have the additional rights set out in the GDPR Additional Terms section of this privacy policy below.

14. INTERNET USE

While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk.

If you follow a link on our website to another website, the owner of that website will have its own privacy policy relating to your personal information. We suggest you review that website’s privacy policy before you provide personal information to that owner or website.

16. CONTACTING US

If you have any question about this privacy policy, or our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at privacy@onfinality.io.

The name and contact details of our Data Protection Officer, European Representative, and UK Representative for the purposes of the GDPR and the UK GDPR are:

17. ADDITIONAL INFORMATION FOR USERS OF OUR WEBSITE/PLATFORM WHO ARE LOCATED IN THE UNITED KINGDOM OR THE EUROPEAN ECONOMIC AREA

If you are in the United Kingdom or European Economic Area the GDPR will apply to our use of your Personal Data. The “GDPR” means the EU General Data Protection Regulation which applies to the European Economic Area and the UK GDPR which applies in the United Kingdom.

For the purposes of the GDPR, OnFinality Pte. Ltd. is the controller of the Personal Data about you that we process. Please refer to Section 16 of this Privacy Policy for our contact details.

We only process your Personal Data where applicable law permits or requires it, including where the processing is necessary for the performance of our contract to provide services to you, where the processing is necessary to comply with a legal obligation that applies to us, for our legitimate interests or the legitimate interests of third parties, or (in a few cases) with your consent. Our legitimate interests include to administer and market our business, improve, enhance and develop our Website and Platform and provide customer support. Please contact our Data Protection Officer if you require more details of the lawful basis we use to process your Personal Data in the ways described in Section 4 of this Privacy Policy.

• The right to request confirmation of whether we process Personal Data relating to you, and if so, to request a copy of that Personal Data;
• The right to request that we rectify or update your Personal Data that is inaccurate, incomplete or outdated;
• The right to request that we erase your Personal Data in certain circumstances provided by law;
• The right to request that we restrict the use of your Personal Data in certain circumstances, such as while we consider another request that you have submitted (including a request that we make an update to your Personal Data);
• The right to request that we export your Personal Data that we hold to another company, where technically feasible;
• Where the processing of your Personal Data is based on your previously given consent, you have the right to withdraw your consent at any time;
• In some cases, you may also have the right to object to the processing of your Personal Data.

You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). We may however charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is to ensure that personal data is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

18. COOKIE POLICY

Our Website uses cookies to distinguish you from other users of the Website. This helps us to provide you with a good experience when you browse our site and also allows us to improve our Website.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree to the use of cookies. Cookies contain information that is transferred to your computer's hard drive.

By continuing to browse the Website, you are agreeing to our use of cookies.

We use persistent cookies and session cookies. A persistent cookie stays in your browser and will be read by us when you return to our Website or a partner website that uses our services. Session cookies only last for as long as the session (usually the current visit to a website or a browser session).

• Strictly necessary cookies - These are cookies that are required for the operation of our Website. They include, for example, cookies that enable you to log into secure areas of our Website, use a shopping cart or make use of e-billing services.
• Analytical/performance cookies - They allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily.
• Functionality cookies - These are used to recognise you when you return to our Website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Cookies may be erased when you exit the Website or close the browser. Others are saved on your device for your next visit. You can delete all cookies placed by our Website on your device at any time. You can also set your browser to prevent all cookies from being placed by our Platform or to provide you with a warning before a cookie is placed. However, please note that some functionalities of the Platform may not work if all cookies are rejected. Please check your browser's instructions or help screen to learn more about these functions.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, which we do not have any control over. These cookies are likely to be analytical/performance cookies or targeting cookies.