Privacy Policy

Last Revised on August 30, 2025

This Privacy Policy ("Policy") for the Rocket Foundation, a Rocket Foundation foundation, and its subsidiaries ("Organization", "we", "our", or "us") describes the basis on which we will process personal data we may collect from users of the Organization's website, https://rocketfoundation.io, including any of its subdomains ("Website"), and any tools, services, features, and functionalities available through the Website (collectively, the "Services"), in accordance with applicable law. For purposes of applicable data protection laws, the Organization is the data controller. For the purposes of this Policy, "you" and "your" refers to you as the user of the Services.

Read this Policy carefully so that you understand your rights in relation to your personal data and how we might collect, use, and process your personal data. If you do not agree to this Policy, do not use, access, connect to, interact with, or download any of the Services or otherwise provide your information to us.

PERSONAL DATA WE COLLECT ABOUT YOU, WHY WE PROCESS IT, AND THE LEGAL BASIS FOR PROCESSING

When you access, use, connect to, or interact with the Services, we may collect certain categories of information about you, including personal data, from a variety of sources.

Information you provide to us:

Personal data may include (i) any internet-protocol address ("IP Address"), (ii) any digital-asset, smart-contract, or protocol address ("Wallet") information, associations, and/or identifiers; and (iii) geolocation data.

In addition, personal data may include your social media handle and related information, transaction data or history (such as your blockchain transaction history and other information associated with a linked address or Wallet), certain information needed to transfer or allocate tokens, marketing data (such as preferences for receiving marketing communications and related details), token holdings, and any other information collected through the Services. Should you contact us, we will collect the content of the communications we have with you and any personal data contained within.

We process this information to perform our contract with you, such as to provide you with our Services.

Information we collect automatically:

When you visit certain pages on our Website or access, use, connect to, or interact with certain Services, our servers save each access in a log file. The following data may be collected: (i) the IP Address of the requesting computer or device; (ii) the date and time of access; (iii) the country from which the website is accessed; (iv) any API endpoint; (v) user agent details; (vi) the operating system of your computer and the browser you are using (provider, version, and language); and (vii) the transmission protocol used (e.g., HTTP/1.1).

The processing of this data is carried out for the purpose of enabling your access to, use of, connection to, and interaction with the Services, including (i) to facilitate your connection to the Website, (ii) to identify if you are likely to be a Prohibited Person, as defined in our general Terms of Use, or if you are subject to any prohibitions with respect to the Services; and/or (iii) to verify your identity, identifying information, certain facts with respect to your identity or identifying information, and location to determine eligibility for certain Services. Each case with respect to any of (i), (ii), and/or (iii) is in order for us to perform our contract with you and in our legitimate interests to provide effective Services to you.

We may also process this data in our legitimate interests to provide effective Services to you by processing the data to assist system security and stability for provision of the Services, to conduct troubleshooting, data analytics, testing, and research, and to enable optimization and internal statistical analysis with respect to the Services, as well as to maintain the safety and security of our users, the Website, our Services and business and to improve and develop our Services and Website.

Finally, the Organization may use cookies, web beacons/clear gifs, geolocation and tracking technologies, and other applications when you visit the Website, including technologies collecting certain information about your access to, use of, connection to, or interaction with the Services ("Usage Data") that may be integrated with third-party service providers.

With your consent, we may use any data collected, including Usage Data, to tailor features and content to you and to ensure content is presented in the most effective manner for you and your device and to run analytics and better understand your user experience with respect to the Services and, if you have opted into marketing, for marketing purposes.

We may also use your information to provide the Services and perform our contract with you. In our legitimate interests to provide effective services to you, we may also use this data to create aggregated, anonymized, or de-identified data.

In addition to the foregoing, we may use any of your information to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Information we may collect from third-party wallet extensions or connections:

Certain transactions conducted via our Services may require you to connect a compatible third-party digital Wallet to the Services. By using such Wallet to conduct such transactions via the Services, you agree that your access to, use of, connection to, and/or interactions with such third-party Wallets are governed by the privacy policy for the applicable Wallet, and you agree that you are using the Wallet in accordance with the terms and conditions of the applicable third-party provider of such Wallet.

Wallets are not maintained or supported by, or associated or affiliated with, the Organization. We expressly disclaim any and all liability for actions arising from your use of third-party Wallets, including but without limitation, actions relating to the use and/or disclosure of personal information by such third-party Wallets.

YOUR RIGHTS

Under applicable data protection laws, you may have certain rights in relation to your personal data. These rights may include the following:

  • Access to your personal data that the Organization holds, information on how we use it, and who we share it with;
  • Correction of your personal data that the Organization holds, subject to the Organization's investigation and verification of any disputed information;
  • Deletion or removal of your personal data, in certain circumstances;
  • Objection to the processing of your personal data, in certain circumstances;
  • Restriction of processing of your personal data, to stop us from processing the personal data we hold about you other than for storage purposes, in certain circumstances;
  • Portability of your personal data; the Organization will endeavor to provide you, or a third party, with a copy of the personal data that we hold about you and transfer it to a third party in a structured, commonly used, machine-readable format;
  • Objection to marketing communications; you may opt out of any marketing communications at any time by using any unsubscribe or opt-out functionalities displayed in any such communications to you;
  • Notice of a personal data breach (unless the breach is unlikely to be prejudicial to you);
  • Complaint to the Rocket Foundation data protection authority, if applicable;
  • Withdrawal of consent, where the Organization is relying on consent to process personal data; this will not affect the processing of personal data carried out before consent is withdrawn or on legal bases other than consent.

Automated decision-making

The Organization will not take decisions producing legal effects concerning you, or otherwise significantly affecting you, based solely on automated processing of your personal data, unless we have considered the proposed processing in a particular case and concluded in writing that it meets the applicable requirements under applicable data protection laws. You may submit a written request concerning the processing of your personal data to info@rocketfoundation.io. The Organization shall use reasonable means to verify your identity before making any determination with respect to your request.

SHARING OF PERSONAL DATA

In certain circumstances, we may share your information with third parties with your consent, as necessary, or as otherwise required or permitted by law. Specifically, we may share your personal data:

  • With service providers and vendors: The Organization may share your personal data with third parties to process on the Organization's behalf. Such third parties could include blockchain analysis service providers, know-your-customer and screening service providers, developers, content delivery service providers, and data analytics service providers. Such service providers may assist us with many different functions and tasks, including determining your eligibility with respect to participation in certain Services.
  • With professional advisors, in our legitimate interests or as required by law.
  • For legal and security reasons and to protect our services and business, in our legitimate interests or as required by law.
  • With law enforcement and regulatory authorities, in order to comply with applicable legal and regulatory requirements.
  • With our affiliates, in our legitimate interests.
  • In connection with an asset sale or purchase, merger, bankruptcy, or other business transaction or re-organization, in our legitimate interests.

Your personal information may be transferred to and stored or processed in countries outside the jurisdiction in which you live and reside, including outside Rocket Foundation, the European Economic Area ("EEA") and United Kingdom ("UK"), and including to the U.S., in order to provide the Services. We will take steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Policy and applicable data protection laws. Should we transfer your personal information to third parties located outside Rocket Foundation/EEA/UK, we will seek to put in place appropriate safeguards.

RETENTION

We will retain your personal data only for so long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements, or as otherwise required by law. The length of time we retain your data will depend on the nature of the data and the purpose for which it was processed.

CHILDRENS' PRIVACY AND DATA PROTECTION

Persons under the age of eighteen (18) are not permitted to use the Services, and we do not seek to or knowingly collect any personal data about children under thirteen (13) years of age (or sixteen (16) years of age for individuals in the EEA/UK). If we become aware that we have unknowingly collected information about any person under eighteen (18) years of age, we will make commercially reasonable efforts to delete such personal data and other information from our records.

SECURITY MEASURES TAKEN TO PROTECT PERSONAL DATA

Despite our efforts to protect your personal data and other information, we cannot guarantee "perfect security" of your information transmitted through the Website. Any transmission is at your own risk.

SOCIAL MEDIA AND OTHER THIRD-PARTY WEBSITES AND LINKS

On the Website, the Organization may provide links to websites or online platforms operated by third parties, including social media or content platforms. We do not own, operate, or control such third-party websites. If you follow links to sites not owned or operated by us, you should review their privacy and security policies and other terms and conditions.

PERIODIC REVIEWS AND UPDATES TO POLICY

This Policy takes into account the requirements of Rocket Foundation data protection law and general privacy principles. Individuals located in the EU and the UK may have rights under the EU General Data Protection Regulation 2016/679 and the UK General Data Protection Regulation. Other applicable global privacy and data-protection laws may provide you rights with respect to your personal data and other information.

The Organization may review and update this Policy from time to time. Updates will apply only to information collected after the date of the change. If we make material changes, we will update the "Last Revised" date at the top of this Policy.

CONTACT

Should you have any questions or complaints about our privacy or data-protection practices, your personal data, or this Policy, you can email us at info@rocketfoundation.io