Privacy Policy

1. Introduction

At The Blockchain ("we," "our," or "us"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you use our content management platform and services.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

2.1 Account Information

2.2 Authentication Data

We use Magic Email Link authentication, which involves:

• Session Tokens - Secure tokens to maintain your login session
• Email Verification Tokens - Temporary tokens sent to your email for secure login
• Session Expiry Data - To manage automatic logout for security

2.3 Content Data

• Blog Content - Titles, articles, and media you submit for publication
• Source URLs - Links to original content or references
• Editorial Feedback - Comments and suggestions from our editorial team
• Publication Status - Tracking the review and publication process
• Publication Dates - When content is published or scheduled

2.4 Financial Data

• Wallet Balance - Your credit balance for platform services
• Transaction Records - Purchase amounts, currencies, and dates
• Payment Processor IDs - Reference numbers from Coinbase Commerce and PayPal
• Transaction Status - Payment completion and processing states

2.5 Communication Data

• System Notifications - Updates about your content and account
• Email Communications - Support messages and important updates
• Read Status - Whether you've seen notifications

3. How We Use Your Data

3.1 Service Provision

• Authenticate and manage your account access
• Process and publish your blog content
• Manage your credit balance and transactions
• Provide editorial feedback and content review services
• Send notifications about content status and account updates

3.2 Communication

• Send authentication emails (Magic Link login)
• Provide customer support and respond to inquiries
• Send important service updates and policy changes
• Notify you about content publication and editorial feedback

3.3 Legal Compliance

• Comply with legal obligations and regulations
• Prevent fraud and ensure payment security
• Maintain records for financial reporting and tax purposes

4. Data Sharing and Third Parties

4.1 Payment Processors

We share necessary payment information with:

• Coinbase Commerce - For cryptocurrency payments
• PayPal - For traditional payment processing

These processors have their own privacy policies and data handling practices.

4.2 Email Service Provider

We use Resend for email delivery, including Magic Link authentication emails. Your email address is shared with this service solely for email delivery purposes.

4.3 No Data Sales

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption - Data is encrypted in transit and at rest
• Secure Authentication - Magic Email Link prevents password-related vulnerabilities
• Access Controls - Role-based access to limit data exposure
• Regular Updates - Security patches and system updates
• Database Security - Protected PostgreSQL database with secure hosting

6. Data Retention

6.1 Account Data

We retain your account information for as long as your account is active or as needed to provide services.

6.2 Content Data

Published blog content may be retained indefinitely as part of our publication archive. Unpublished drafts are retained until deleted by you or your account is closed.

6.3 Financial Records

Transaction records are retained for 7 years for accounting and legal compliance purposes.

6.4 Administrative Data Retention

We retain user information and transaction data for up to 7 years for administrative purposes, including:

• Financial record keeping and accounting compliance
• Tax reporting and audit requirements
• Legal compliance and regulatory obligations
• Dispute resolution and customer service
• Fraud prevention and security monitoring
• Business analytics and service improvement

6.5 Authentication Data

Session tokens and verification tokens are automatically deleted upon expiration or logout.

7. Your Rights (GDPR)

To exercise these rights, please contact us at support@the-blockchain.com. We will respond to your request within 30 days.

8. Account Deletion

8.1 Self-Service Deletion

You can delete your own account through the platform interface. This will:

• Permanently delete your account and profile data
• Remove your unpublished blog drafts
• Cancel your wallet and credit balance
• Anonymize transaction records (keeping only necessary financial data)

8.2 Published Content

Published blog posts may remain on our website for archival purposes, but will be disassociated from your personal information.

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

10. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data during international transfers, in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through our platform. The "Last updated" date at the top of this policy indicates when it was last revised.

12. Contact Information

12.1 Data Protection Inquiries

For questions about this Privacy Policy, data protection, or to exercise your rights, please contact us:

12.2 Data Protection Authority

If you have concerns about our data handling practices that we cannot resolve, you have the right to file a complaint with your local data protection authority.

13. Legal Basis for Processing

We process your personal data based on the following legal bases:

• Contract Performance - To provide our content management and publishing services
• Legitimate Interests - To improve our services and prevent fraud
• Legal Compliance - To meet financial reporting and tax obligations
• Consent - For optional features like profile images and marketing communications