Privacy Policy

This policy explains what personal data we collect when you use gg.xyz, the gg web app, the gg Telegram bot and mini app and our related services (the Services), how we use it, who we share it with and the choices you have.

1. Who is responsible for your data

The data controller is ggQUEST CORPORATION, a corporation organised under the laws of the Republic of Panama, registered at the Public Registry of Panama under Mercantile Folio No. 155790938, with its address c/o PARALELAW, Calle 74, San Francisco, Edificio Midtown, Piso 16, Oficina 1601, Panama City, Republic of Panama.

Privacy questions: privacy@gg.xyz

2. What we collect

Account data. When you sign in through Privy we receive an identifier for your login method and, depending on the method, your email address, your username and public profile on Google, X, Discord, GitHub, Farcaster or Telegram, or the address of an external wallet you connect. We do not receive your passwords for those services.

Wallet data. The public addresses of the embedded wallets Privy creates for you and of any external wallet you connect. We never hold your private keys.

Profile data. The username, display name, avatar and bio you set on gg, and your referral code.

Content. Posts, comments, reactions, group chat messages, watchlists and lists, quest and tournament entries, and anything else you publish or send through the Services.

Trading and activity data. The trades you make through gg (token, chain, amount, price, time, transaction hash), the post a trade started from, fee share, referral commissions and claims, points and quest progress, who you follow, your trading permissions status, and your notification settings.

Telegram data. If you use the gg Telegram bot or mini app, your Telegram user id, chat id, username and the messages you send the bot.

Device and usage data. IP address, approximate location derived from it, browser and device type, operating system, language, referring page, pages viewed, features used, time on page, crash and performance data. Some of this is collected through cookies and similar technologies described in our Cookies Policy.

Notification data. If you turn on web push notifications, the subscription endpoint and keys your browser gives us and your user agent.

Support and communications. Messages you send to support@gg.xyz or other channels, and your newsletter subscription if you opt in.

Public blockchain data. Your wallet addresses and every transaction they make are recorded on public blockchains that nobody controls. We read that public data to show your trades and positions. We cannot change or delete it.

We do not knowingly collect data from anyone under 18.

3. How we use your data

• To provide the Services: create and secure your account, display the feed, record entry prices on posts, route your trades, calculate and pay fee share and referral commissions, run points, quests and promotions, deliver notifications you turned on.
• To keep gg safe: detect fraud, spam, manipulation, abuse of promotions, sanctions exposure and security incidents, and enforce our Terms.
• To improve gg: understand how features are used, fix bugs, measure performance, test changes.
• To communicate: service messages, responses to support requests, and marketing you have opted into. You can opt out of marketing at any time.
• To comply with law: respond to lawful requests, keep required records, protect our rights.

4. Legal bases

Where data protection law (including the EU and UK GDPR) requires a legal basis, we rely on: performance of our contract with you (providing the Services); our legitimate interests (security, fraud prevention, analytics, improvement, marketing to existing users), balanced against your rights; your consent (non-essential cookies, push notifications, newsletter); and compliance with legal obligations.

5. Who we share data with

We do not sell personal data. We share it with:

Service providers who process data for us, under contracts that limit what they may do with it:

• Privy, Inc.: authentication, embedded wallets, fiat onramp access.
• Reservoir Labs (Relay): swap and bridge routing. Relay receives your wallet address and trade details.
• Fiat onramp providers reached through Privy, such as Stripe: only if you choose to buy crypto with fiat. They collect identity and payment data directly from you under their own privacy policies.
• Supabase, DigitalOcean and Vercel: hosting, database and infrastructure.
• Google Analytics, Vercel Analytics and Safary: usage and attribution analytics (see Cookies Policy).
• Telegram: if you use the bot or mini app.
• Push notification services operated by your browser vendor.
• Email and newsletter providers.
• Our affiliates and contractors who develop and operate the Services under our instructions.

Other users and the public. Your username, avatar, bio, posts, comments, follows, lists and the performance of your calls are public. Your trades are visible on public blockchains and gg shows the trades linked to your posts. Group chat messages are visible to the members of that group.

Authorities and others when required by law, to enforce our Terms, or to protect the rights, safety or property of gg, our users or others.

A buyer or successor if we are involved in a merger, acquisition or sale of assets. We will notify you if your data becomes subject to a different privacy policy.

6. International transfers

We are based in Panama and our providers operate in the United States, the European Union and elsewhere. Your data may be transferred to and processed in countries whose data protection laws differ from yours. Where required we use appropriate safeguards such as standard contractual clauses.

7. Retention

We keep account, content and trading data for as long as your account is active and for a reasonable period afterwards to resolve disputes, prevent fraud, meet legal and tax obligations and maintain accurate fee and commission records. Analytics data is kept in aggregated or pseudonymised form. Data on public blockchains stays there permanently and is outside our control.

8. Security

We use access controls, encryption in transit, logging and other technical and organisational measures appropriate to the risk. No system is perfectly secure. You are responsible for keeping your login method, Telegram account and devices secure. We never ask for your private key or seed phrase.

9. Your rights

Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent where processing is based on consent. Panama's Law 81 of 2019 and its regulations give residents of Panama rights of access, rectification, cancellation, opposition and portability. Residents of the EU, UK, Switzerland and certain US states have similar rights under their laws.

To exercise a right, email privacy@gg.xyz from the email linked to your account, or write to the address above. We will respond within the time the applicable law requires. We may ask you to verify your identity. Some data cannot be deleted, for example records we must keep by law, data needed to resolve a dispute, and anything recorded on a public blockchain.

You may also complain to a supervisory authority. In Panama that is the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI). In the EU or UK it is your local data protection authority.

10. Your choices

• Delete posts and comments from your profile.
• Turn web push and Telegram notifications off in settings or in your browser.
• Unsubscribe from marketing emails using the link in each email.
• Manage cookies as described in the Cookies Policy.
• Export your wallet keys through Privy at any time.
• Close your account by emailing support@gg.xyz.

11. Children

The Services are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact privacy@gg.xyz and we will remove it.

12. Changes

We may update this policy. We will post the new version here with a new effective date and, for material changes, give notice in the app or by email.

13. Contact

ggQUEST CORPORATION
c/o PARALELAW, Calle 74, San Francisco, Edificio Midtown, Piso 16, Oficina 1601, Panama City, Republic of Panama
privacy@gg.xyz