Privacy Policy

At Xi Project, we respect your privacy and are committed to protecting your personal data. This policy outlines how we handle your information across the XXI Portal and your rights under global standards.

1. Data Controller

The data controller for this platform is Xi Project. For any privacy-related inquiries or to exercise your data rights, please contact us at cs-g2@xiproject.com.

2. Data We Collect

We collect only the minimum data necessary to provide our services:

• Identity & Contact Data: Email address and profile information provided via social login (Google, LinkedIn, Apple).
• Technical Data: IP address, browser type, and device information for security and performance monitoring.
• On-Chain Data: Public wallet addresses and transaction metadata. Note: This data is recorded on the XXI Network blockchain.
• Usage Data: Information on how you interact with our interface to improve user experience.

3. How We Use Your Data

• Authentication: To manage your account and secure your login.
• Platform Maintenance: To monitor the health of the portal and troubleshoot technical issues.
• Compliance: To prevent fraudulent activity or unauthorized access.
• Legal: To meet our obligations under applicable laws.

4. Blockchain Immutability Notice

The XXI Portal utilizes the XXI Network, a decentralized blockchain.

• Public Record: Transactions you initiate are broadcast to a public, decentralized ledger.
• Immutability: Due to the nature of blockchain technology, data written to the blockchain (such as your wallet address and transaction history) cannot be deleted or altered. By using the platform, you acknowledge that Xi Project cannot fulfill “Right to Erasure” requests for data stored on-chain.

5. Data Sharing & Disclosure

We do not sell your personal data. We only share information:

• With service providers (e.g., hosting providers) who assist in operating the portal.
• If required by law, such as a court order or regulatory requirement.
• With the decentralized XXI Network (limited to on-chain transaction data).

6. International Data Transfers

As a global platform, your data may be processed in countries outside of your residence. We ensure all transfers comply with legal requirements, including the use of Standard Contractual Clauses (SCCs) where applicable under GDPR.

7. Your Rights (GDPR & Global Standards)

Depending on your location, you have the following rights regarding your off-chain personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure (Right to be Forgotten): Request deletion of your account and off-chain data.
• Data Portability: Request a transfer of your data to another provider.
• Object/Restrict: Object to certain types of processing.

8. Data Retention

We retain off-chain personal data only as long as necessary to provide our services or comply with legal obligations. On-chain data remains on the XXI Network indefinitely.

9. Security

We implement industry-standard security measures (encryption, secure logins) to protect your information. However, no digital platform is 100% secure, and users are responsible for securing their own private keys and login credentials.

10. Consent

By using the XXI Portal, you consent to the collection and processing of your data as described in this Policy.

Effective Date: May 10, 2026