Privacy Policy

1. Introduction

AvenueD ("we," "us," or "our") operates the AvenueD platform (the "Platform"), a gamified engagement platform where brands create communities and users earn $AVED token rewards for participation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

Data Controller: AvenueD
Contact Email: info@aved.ai

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Blockchain wallet address (primary identifier)
• Email address (optional)
• Username (optional)
• Profile picture/avatar URL (optional)
• Account creation and last login timestamps

2.2 Identity Verification (KYC) Data

2.3 Social Media Account Data

When you connect social media accounts for mission verification, we collect:

• X (Twitter): User ID, username, OAuth access and refresh tokens
• LinkedIn: User ID, name, headline, profile picture, professional verification status
• TikTok: User ID and basic profile information

2.4 Financial & Transaction Data

We collect information related to your transactions on the Platform:

• Cryptocurrency wallet addresses
• Blockchain transaction hashes and details
• Token amounts and types ($AVED, USDC, ETH)
• Payment method information (cryptocurrency or card)
• Transaction timestamps and status
• Membership payment history and subscription details
• Reward allocations and distributions

2.5 Usage & Analytics Data

We automatically collect information about your Platform usage:

• Session information and duration
• Page views and navigation patterns
• Click events and engagement metrics
• Mission completions and game scores
• Raffle and parlay entries
• Referral activity

2.6 Device & Technical Data

We collect technical information including:

• Device type (mobile, desktop, tablet)
• Operating system and browser type
• IP address (stored in hashed form for privacy)
• User agent string
• Referrer URLs
• Platform (web, iOS, Android)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process transactions and distribute token rewards
• Verify your identity for KYC/AML compliance
• Verify completion of missions and engagement activities
• Process payments and manage subscriptions
• Provide customer support
• Analyze and improve our Platform
• Send transactional communications (e.g., reward notifications, KYC status updates)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Enforce our Terms of Service

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services, including account management, transaction processing, and reward distribution.
• Legal Obligations: Processing required to comply with applicable laws, including KYC/AML regulations, tax requirements, and regulatory requests.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as connecting social media accounts or receiving marketing communications. You may withdraw consent at any time.

5. Information Sharing & Third Parties

5.1 Service Providers

We share information with third-party service providers who assist us in operating our Platform:

5.2 Blockchain Networks

When you conduct transactions on the Platform, certain information is recorded on public blockchain networks (Base Network). This includes your wallet address and transaction details. Blockchain data is public and immutable and cannot be deleted.

5.3 Community Owners

Community owners on our Platform may receive limited information about members of their communities, including usernames, engagement metrics, and mission completion data. Community owners do not receive your KYC documents or payment card information.

5.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have different data protection laws than your country.

When we transfer personal data from the EEA, UK, or Switzerland, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure your data is protected in accordance with this Privacy Policy and applicable law.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law:

• Account data: Retained while your account is active and for a reasonable period thereafter
• KYC documents: Retained for a minimum of 5-7 years after account closure, as required by AML regulations
• Transaction records: Retained for at least 7 years for financial and tax compliance
• Analytics data: Retained in aggregated/anonymized form indefinitely
• Blockchain data: Permanently recorded on public blockchains and cannot be deleted

8. Your Rights

8.1 General Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

8.2 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale or sharing of personal information
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information

We do not sell your personal information. To exercise your rights, contact us at info@aved.ai.

9. Cookies & Tracking Technologies

9.1 Cookies We Use

9.2 Local Storage

We use browser local storage to maintain session data and user preferences, including analytics session identifiers and application state.

9.3 Analytics

We use Vercel Analytics and our internal analytics system to understand how users interact with our Platform. This includes page views, click events, and engagement metrics. IP addresses are hashed for privacy protection.

10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure cloud storage with access controls
• Signed URLs for secure file uploads
• Row-level security policies in our database
• Regular security assessments
• Limited access to personal data on a need-to-know basis
• Webhook signature verification for payment processing

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@aved.ai, and we will take steps to delete such information.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification if you have provided us with your email address. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about our data practices, please contact us:

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.