Privacy Policy

CBX Platform ("we," "our," or "us") collects information to provide and improve our blockchain-based token platform services on BNB Smart Chain. The types of information we collect depend on how you interact with our platform. Personal Information: When you create an account or interact with our services, we may collect your name, email address, phone number, and government-issued identification documents as part of our KYC (Know Your Customer) verification process. This information is processed through our identity verification partner, Sumsub. Blockchain Data: As a blockchain platform, we automatically collect and store data related to on-chain transactions, including wallet addresses, transaction hashes, token transfer amounts, and timestamps. This data is inherently public on the BNB Smart Chain. Technical Data: We collect your IP address, browser type, operating system, device identifiers, and browsing patterns on our platform. This helps us maintain security, detect fraud, and improve user experience. Communication Data: We retain records of communications between you and our support team, including support tickets, email correspondence, and chat transcripts.

CBX Platform is registered as a Money Services Business (MSB) with FinCEN in the United States and is pursuing Virtual Asset Service Provider (VASP) registration in the Cayman Islands. As part of our regulatory obligations, we require KYC (Know Your Customer) and AML (Anti-Money Laundering) verification. Identity Verification: We use Sumsub, a regulated identity verification provider, to process your KYC data. When you complete verification, you provide documents such as a passport or national ID, proof of address, and a live selfie. This data is transmitted securely to Sumsub and processed in compliance with international data protection standards. Sanctions Screening: Your identity information is screened against international sanctions lists (OFAC, UN, EU) and PEP (Politically Exposed Person) databases. If a match is found, we are legally obligated to report it and may restrict or terminate your access to the platform. Transaction Monitoring: All blockchain transactions are monitored for suspicious activity patterns in compliance with AML regulations. Unusual transaction patterns may trigger enhanced due diligence, which may require additional information from you. Data Retention for KYC: KYC data is retained for the duration of your account plus a minimum of 5 years after account closure, as required by financial regulations. This retention period is non-negotiable under current regulatory frameworks.

As a decentralized platform on BNB Smart Chain, CBX Platform interacts with public blockchain infrastructure. Understanding what blockchain data we collect and how it is used is important. On-Chain Records: All transactions on BNB Smart Chain are publicly recorded and immutable. This includes token purchases (CBX ICO), staking operations, governance votes, and any transfers involving CBX tokens. We index and store references to these transactions linked to your account. Smart Contract Interactions: When you interact with our smart contracts (CBXToken, CBXICO, CBXStaking, VeCBX, CBXBuybackBurn), the transaction details including function calls, parameters, gas fees, and execution status are recorded on-chain and accessible through BscScan. Wallet Address Tracking: We associate your verified wallet addresses (MetaMask, WalletConnect, hardware wallets) with your KYC-verified account. This linkage is necessary for enforcing purchase limits, distributing vesting tokens, and complying with regulatory requirements. Public Nature of Blockchain: You should be aware that blockchain transactions are public by nature. Even though we link wallet addresses to your account, the underlying blockchain data is visible to anyone. We recommend exercising caution when making on-chain transactions.

CBX Platform uses cookies, web beacons, and similar tracking technologies to enhance your experience and analyze platform usage. Essential Cookies: These are necessary for the platform to function properly. They include session cookies for authentication, security tokens for CSRF protection, and preference cookies for language and theme settings. Essential cookies cannot be disabled. Analytics Cookies: We use privacy-respecting analytics to understand how users interact with our platform. This includes page views, navigation patterns, and feature usage. Analytics data is aggregated and anonymized — we do not track individual user behavior across sessions. Third-Party Cookies: Our platform integrates with third-party services that may set their own cookies: - Wallet providers (MetaMask, WalletConnect) set cookies for connection management - Blockchain explorers (BscScan) may set cookies when you view transaction details - CloudFlare sets security cookies for DDoS protection Managing Cookies: You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality. You can also opt out of analytics through platform settings.

To use CBX Platform services, you connect a Web3 wallet. We collect and process data related to your wallet connections. Wallet Types Supported: We support MetaMask, Coinbase Wallet, WalletConnect v2 (including TokenPocket and Trust Wallet), and hardware wallets (Ledger, Trezor) via WalletConnect. Different wallet types may share different data with our platform. Public Key Data: When you connect your wallet, we access your public wallet address(es) and CBX token balance. We do not have access to your private keys or seed phrase — this is a fundamental principle of Web3 that we strictly uphold. Transaction History: We can view and index your CBX-related transaction history on BNB Smart Chain. This includes token purchases, staking deposits, reward claims, and governance votes cast through our platform. WalletConnect Sessions: When using WalletConnect, a temporary session is established between your wallet and our platform. Session data (including approved chains and methods) is processed by the WalletConnect protocol. We do not store session data beyond the active connection. Multi-Wallet Support: If you connect multiple wallets, each wallet address is separately associated with your account. Each wallet's transaction history and balances are tracked independently for regulatory compliance.

CBX Platform uses IPFS (InterPlanetary File System) via Pinata for decentralized storage of certain documents and data. What We Store on IPFS: Compliance documents, audit reports, and official platform documents are stored on IPFS for tamper-proof, decentralized access. User-uploaded KYC documents are securely transmitted to Sumsub and are not stored on IPFS. Pinata Service: We use Pinata as our IPFS pinning service. When documents are uploaded to IPFS through our platform, Pinata manages the pinning and retrieval. Pinata's Privacy Policy (pinata.cloud/privacy) governs their handling of this data. CID and Access: Documents stored on IPFS are identified by Content Identifiers (CIDs). CIDs are derived from the content itself — changing the document produces a different CID. This provides cryptographic verification of document integrity. Data Persistence: IPFS storage relies on pinning services to maintain data availability. While we strive for persistent storage, IPFS data availability depends on continued pinning. We maintain backups through Pinata's redundant pinning across multiple regions.

CBX Platform integrates with third-party services to provide our features. We may share limited data with these providers as necessary for service delivery. Identity Verification — Sumsub: Your KYC documents and personal information are shared with Sumsub for identity verification. Sumsub is ISO 27001 certified and complies with GDPR, CCPA, and other data protection regulations. Wallet Infrastructure — WalletConnect: Wallet connection sessions are routed through WalletConnect's relay servers. Wallet addresses and chain information are transmitted. WalletConnect does not access private keys. Blockchain Infrastructure — BNB Smart Chain: All on-chain transactions are processed by BNB Smart Chain validators. Transaction data is public and stored on the blockchain permanently. Security — CloudFlare: We use CloudFlare for DDoS protection, SSL termination, and web application firewall. CloudFlare processes IP addresses and request headers. Their Privacy Policy (cloudflare.com/privacypolicy) applies. Analytics: We may use privacy-focused analytics tools that process anonymized usage data. No personally identifiable information is shared with analytics providers. Legal and Regulatory: We may disclose your information to law enforcement, regulators, or legal proceedings when required by law, court order, or regulatory investigation. This includes KYC data, transaction records, and account information.

CBX Platform retains your data for defined periods based on the type of data and applicable regulations. KYC/AML Data: Identity verification documents, screening results, and due diligence records are retained for a minimum of 5 years after account closure, as required by FinCEN regulations and international AML standards. Transaction Records: Blockchain transaction records linked to your account are retained for the lifetime of the platform. On-chain data is inherently permanent and cannot be deleted from the blockchain. Account Data: Your account information (email, preferences, settings) is retained while your account is active. If you request account deletion, we remove personal data within 30 days, except where retention is required by law (KYC data). Support Communications: Support tickets and correspondence are retained for 2 years after resolution for quality assurance and dispute resolution purposes. Analytics Data: Anonymized analytics data is retained for 26 months in aggregate form. No individual user analytics data is retained beyond this period. Automatic Deletion: Data that reaches the end of its retention period is automatically deleted or anonymized in our next scheduled data maintenance cycle, which occurs quarterly.

Depending on your jurisdiction, you have certain rights regarding your personal data. Right of Access: You have the right to request a copy of the personal data we hold about you. This includes account information, KYC data, and transaction history. You can submit a data access request through support@cbxplatform.io. Right to Rectification: You can request correction of inaccurate personal data. Account information can be updated through your account settings. KYC data corrections require re-verification through our identity verification process. Right to Erasure (GDPR Article 17): You can request deletion of your personal data, subject to legal retention requirements. Note that KYC/AML data cannot be deleted while retention obligations exist, and blockchain transaction data is immutable. Right to Data Portability: You can request your personal data in a structured, machine-readable format (JSON or CSV). This includes account data and transaction history. Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you can withdraw consent at any time through account settings or by contacting support. Right to Object: You can object to processing of your data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, where applicable. Exercising Your Rights: To exercise any of these rights, contact our Data Protection Officer at privacy@cbxplatform.io. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

If you have questions about this Privacy Policy or our data practices, please contact us: Data Protection Officer: privacy@cbxplatform.io General Support: support@cbxplatform.io Business Inquiries: contact@cbxplatform.io CBX Platform Ltd. Cayman Islands For data access, correction, or deletion requests, please email privacy@cbxplatform.io with the subject line "Data Request — [Your Account Email]". We aim to respond within 30 days. Regulatory Information: - FinCEN MSB Registration: United States - Cayman Islands VASP Registration: In Progress This Privacy Policy may be updated periodically. We will notify users of material changes via email and platform announcements. Continued use of the platform after updates constitutes acceptance of the revised policy.