Privacy Policy
Last Updated: August 8, 2026
Operating Entity: Youareright Inc (also referred to in this document as YOUARETIGHT, the Company, we, or us)
In this Policy, the Terms of Use and the Terms of Service collectively refer to the bilateral service agreement between the parties, which, together with this Privacy Policy, constitute the complete legal agreement between you and us.
1.Introduction
1.1 Scope of Applicable Services
This Privacy Policy applies to our online websites, web interfaces, web applications, mobile applications, affiliated sites, social media pages, marketing activities, offline activities, online services, platforms, websites, and all related business vehicles listed in this Policy, all of which are collectively referred to as the “Services.”
1.2 Agreement on the Effect of this Policy
Please read this Privacy Policy in its entirety. If you do not agree with all of the contents of this Policy, please stop accessing, registering for, or using the relevant Services. Your access to, browsing of, registration of an account with, use of platform functions of, or clicking of any button with the same meaning as Accept / Agree / OK constitutes your full knowledge of and agreement to all the provisions of this Privacy Policy, and authorizes us to collect and process your relevant information in accordance with the rules of this Policy. For matters that require separate consent or additional consent under applicable law, we will separately inform you and obtain the corresponding consent before processing your relevant information.
1.3 Scope and Boundaries of this Policy
This Policy only governs data collected through our online Services and does not apply to information independently collected through offline channels or by other third-party websites. It does not apply to the personal data of the Company’s employees, job candidates, or contractors and outsourced personnel performing similar duties.
Definition under this Policy: “Personal Information” means data that can locate or identify a specific natural person. Data that has been aggregated, anonymized, or de-identified and cannot be associated with a specific user does not constitute Personal Information. If the content you provide to us contains the Personal Information of third parties, such information is also subject to this Policy.
1.4 Consequences of Providing Information
You are under no obligation to provide us with any Personal Information. However, if you refuse to provide certain necessary information, we may be unable to fully open all Service functions to you, the scope of your use of the Services may be limited, or the Services may be unable to operate normally as designed.
1.5 Basic Rules for Policy Revisions
We will update the content of this Policy from time to time in accordance with legal and regulatory requirements, business operations, and changes in data-processing practices. The last revision date will be updated at the top of the page, and the updated version will take effect from the date of publication. Where laws and regulations otherwise require, or where major changes involving the purpose of processing, method of processing, or categories of Personal Information require renewed consent under applicable law, we will separately inform you and obtain the corresponding consent before implementing such changes. Your continued use of the Services constitutes acceptance of revisions that do not require additional consent. If you cannot accept the modified content, you must immediately stop using all Services. You are required to regularly check for Policy updates yourself.
1.6 Consultation and Contact Channels
Questions related to privacy, applications to exercise data rights, and feedback regarding the inadvertent collection of minors’ information may all be sent by email for consultation. Consultation email: yarteam@youareright.org
2.Scope of Application of this Policy
This Policy covers all information we collect from you through all Service channels. It does not apply to information independently collected offline or data independently collected by third-party platforms.
Definition under this Policy: Personal Information is data that can lock onto a specific natural person. Data that has been aggregated, anonymized, or de-identified and cannot identify an individual user does not constitute Personal Information. If the content you upload contains third-party Personal Information, such information is also subject to the control of this Policy.
3.Channels of Information Collection and All Information Collected
We collect information through three categories of channels: information you directly and actively provide, information automatically collected through device access, and information obtained through third-party channels. Public blockchain-related data is explained separately.
3.1 Information Directly Collected from You
Contact information: name, email address, mailing address, residential address, mobile phone number;
Demographic information: city of residence, country, postal code, age, gender, personal interests and preferences, date of birth, hometown;
Account information: username, login password, account registration time, redemption codes, personal bio, avatar, social account links, questionnaire/activity participation records;
Communication records: all emails and conversation archives between you and customer service or within the platform, with complete retention of all contact and communication materials;
Marketing preferences: your choices regarding receipt of promotional content and records of interaction with various activities;
Social association data: other accounts you follow, friends within the platform, and interaction behaviors;
Bank card, bank account, wallet login information, transaction flows, billing data, bank routing numbers, credit card brand, expiration date, and other payment and settlement-related information. Regarding highly sensitive information such as payment account login credentials, full card numbers, and online banking login information, we generally do not directly retain such data. Where such data must be collected and retained by third-party payment service providers or wallet service providers, those service providers shall process the data within the lawful and necessary scope in accordance with their own privacy policies and adopt corresponding security protection measures. Where separate consent is required by law, we will separately inform you and obtain the corresponding consent;
Third-party account association information: basic account data, asset balances, and transaction records exchanged between the parties after you bind social or financial third-party accounts. Before binding a third party, please review the other party’s privacy policy yourself. Account connections include social media login, financial data aggregation platform binding, and wallet payment authorization. After the connection is established, the parties may directly exchange personal and transaction data;
Identity verification document information: passports, identity cards, driver’s licenses, national identity cards, and other official identity documents, used for identity verification, risk control, anti-fraud, compliance review, and address verification;
Questionnaire surveys: all personal-related content filled in when participating in platform questionnaires, with complete retention of questionnaire responses;
Other actively submitted information: customer consultation feedback, activity registration materials, and all materials actively uploaded by individuals.
3.2 Information Automatically Collected from Devices and Access
When you open the website or mobile Services, the system automatically captures the following data:
IP address, browser type, operating system, device model, unique device identifier, time zone, system language, screen parameters, memory storage, CPU usage data, carrier, WiFi/cellular network information, and approximate geographic location (latitude and longitude, city, region, state/province obtained via GPS/WiFi/base-station triangulation);
Access logs: time of entry to the site, time of exit, pages browsed in sequence, page dwell time, page operation behaviors, referring pages, email opens and clicks, and email forwarding records;
Network usage traces and full operational data of device hardware;
All behavioral records generated by Cookies, pixel tags (web beacons / transparent GIFs / single-pixel GIFs), and HTML5 local storage tracking;
Session identifiers, transaction identification numbers, risk assessment signals, and fraud-detection device characteristic data.
3.3 Information Obtained through Third-Party Channels
Activity participation data shared by cooperative marketing parties, activity organizers, and joint promotion partners;
Basic account information synchronized from wallet, social, and data aggregation third-party platforms after your authorization. Third-party login integration service providers may synchronize your publicly available account information such as name, username, email, and avatar;
Publicly disclosed on-chain wallet addresses and public transaction records of users on the public network;
Publicly filed and disclosed external public information;
Verification and risk-related data provided by cloud service providers, risk-control, compliance, and verification third parties;
Compliant user data lawfully shared by professional cooperative institutions and commercial partners.
3.4 Explanation Regarding Public Blockchain Information
Your wallet address, all on-chain transaction records, account registration time, public avatar, and username are, due to the technical characteristics of blockchain, in a publicly queryable state. Any internet user as well as third-party APIs, plugins, and integration tools may read such public information. We cannot restrict the dissemination of public on-chain data. Such information is not subject to internal information disclosure rules. However, our collection, use, storage, sharing, provision to external parties, and other processing activities regarding such information shall still comply with applicable data protection rules and be conducted within the lawful and necessary scope.
4.Minors’ Protection Provisions
All of our Services are open only to users who have reached the age of 18. We do not actively collect any Personal Information of minors under the age of 18.
If we actually become aware that we have collected data of a minor, we will immediately and completely delete it, provided there is no mandatory legal retention requirement. If you discover that the platform has inadvertently collected a minor’s information, you may send an email to the official contact email to contact us for handling.
5.Rules for Cookies, Web Beacons, and Local Storage Tracking Technologies
Technical definitions: Cookies are small text files stored by websites on your local device and are classified as session Cookies (automatically deleted at the end of the session), persistent Cookies, first-party Cookies, and third-party Cookies. Web beacons (transparent GIFs, pixel tags, single-pixel GIFs) are small electronic markers embedded in pages. HTML5 local storage can store large volumes of local data.
Users and purposes: We and our cooperative advertising and analytics service providers use the above technologies to identify users, personalize content display, measure promotional conversion effects, perform risk control and anti-fraud, enhance Service security, record login status, save user preferences, analyze page visit heat, and verify server integrity.
Users’ basic setting rights: Browsers receive Cookies by default. You may manually delete or refuse Cookies; however, after disabling Cookies, a large number of core platform functions will be unable to operate normally and some page interactions will be restricted.
Limitation rules for web beacons: Web beacons cannot be blocked separately and can only be rendered ineffective by completely disabling Cookies or restricting automatic image loading.
Rules for handling DNT signals: We do not respond to browser “Do Not Track (DNT)” settings and will not adjust data collection strategies based on such signals.
Explanation regarding third-party tracking: Advertising partners may collect cross-website browsing records through Cookies and pixel tags for targeted advertising. Users need to adjust advertising preferences themselves on third-party platforms.
6.All Purposes of Use of Personal Information
We may use all information collected for all of the following lawful scenarios, and may also use it for other purposes separately notified at the time of collection:
Creating, maintaining, and managing your exclusive account; generating and updating personalized user profiles; remembering login devices and operational preferences;
Providing, operating, and optimizing all online Services; iterating product functions; developing new Services; fixing program vulnerabilities; and conducting technical testing;
Completing transaction processing, refunds and charges, sending bills, transaction notifications, fund settlement, and full-process order management;
Conducting lotteries, promotions, online activities, and joint promotions; pushing activity notifications and managing activity participation;
Comparing multi-party data, verifying the authenticity of information, and completing identity, address, and qualification verification;
Risk control identification, detecting network security incidents, combating fraud, hacking, identity theft, violations, and illegal acts, holding violators accountable, and preventing sanctions-related risks;
Sending official notifications and Service announcements regarding platform updates, system maintenance, security alerts, and account management;
Handling user consultations, complaints, and after-sales issues; providing customer support, feedback follow-up, and dispute resolution;
Supporting intra-platform messaging, interactive communication, friend invitations, and content interaction among users;
Compiling anonymous, de-identified, and aggregated data for internal business analysis, presenting platform operational status to partners, and industry benchmark comparisons;
Targeted pushing of advertisements, coupons, information, and marketing emails; personalizing content and pushing local offers based on user interests;
Researching user usage habits; conducting product and technology R&D, algorithm training, AI model training, and machine-learning related businesses;
Implementing all applicable laws, regulations, and regulatory requirements; cooperating with official compliance reviews, subpoenas, investigation procedures, and lawful government information requests;
Enforcing all provisions of this Privacy Policy, the Terms of Use, and the Terms of Service; handling legal claims and contract performance;
Compiling page visit and function usage trends; optimizing page layout and interaction; and improving Service operational efficiency;
Retaining communication, transaction, compliance, financial, risk-control, and customer-service records to meet legally required retention periods and accounting and reporting obligations;
Aggregating, de-identifying, and anonymizing data for industry analysis, business promotion, and internal quality control. Anonymized data that cannot identify a specific natural person and cannot be restored may be retained long-term within the scope permitted by law. We will not attempt to re-identify personal identity in anonymized data unless required by mandatory law;
Safeguarding the security of the Services and protecting the major personal and property rights and interests of users, us, and third parties;
Other notified use scenarios conducted after obtaining your separate written consent.
Rules for Unsubscribing from Marketing Information
All promotional emails contain an unsubscribe link at the bottom; clicking it will stop the pushing of marketing emails. You may also send an email with a specified subject to the corresponding customer service email to cancel marketing pushes. Official notifications regarding transactions, account security, and system updates are necessary Service notifications and cannot be unsubscribed from. We will process unsubscribe requests within the compliance timeframe after receipt. Unsubscribing from marketing does not affect the lawful processing of information previously collected.
7.Information Storage, Retention Periods, and Data Security
7.1 Retention Rules
Personal Information is retained only until the corresponding purposes of collection are completed, while also satisfying the minimum retention periods required by law, tax, litigation, anti-fraud, and compliance:
Transaction, payment, risk-control, customer-service, compliance, settlement, security, and financial records: retained long-term until regulatory, dispute-resolution, contract-performance, and accounting archiving requirements are met;
Biometric data: deleted within three years after account cancellation or completion of the collection purpose;
Anonymous, aggregated, and de-identified statistical data may be retained long-term without limitation;
Data stored by third-party service providers follows their own retention rules; cooperative institutions keep data in accordance with bilateral contracts and local law;
When determining retention periods, comprehensive consideration is given to: sensitivity of the information, risk of leakage, processing purpose, alternative realization methods, and requirements of local regulations.
7.2 Security Protection Measures
We adopt multiple means including administrative management systems, organizational controls, technical encryption, and physical controls to protect user data. We deploy firewalls, full-link data encryption, and hierarchical account minimum-privilege controls. Only staff members who have a genuine need arising from the performance of their duties may access Personal Information.
Risk Notice: Internet transmission and electronic storage do not provide 100% absolute security guarantees. Risks of leakage, tampering, loss, hacking attacks, and unauthorized access cannot be completely eliminated. You need to safeguard your account, wallet private keys, and login credentials yourself and must not share them with others. You bear the online risks of data transmission yourself. We do not assume responsibility for data leakage caused by third-party privacy settings, security vulnerabilities, users’ voluntary disclosure of credentials, or users’ circumvention of security mechanisms.
8.Scope of External Disclosure and Sharing of Personal Information
We transfer or share your information with third parties only in the following circumstances. In all other scenarios, we will fulfill notification, authorized consent, or other legitimacy requirements in accordance with applicable law before proceeding. Where the provision of Personal Information to other personal information processors, the sharing of sensitive Personal Information, or matters requiring separate consent under law are involved, we will separately inform you of the recipient’s information, processing purpose, processing method, and categories of information in accordance with law and obtain the corresponding consent. Without lawful and necessary grounds, we will not provide complete bank card or bank account payment information in full to third parties, and will not proactively synchronize private data to social platforms. Only content you manually publish will be synchronized to third parties; after synchronization, the data is controlled by the third party.
Lawful scenarios in which disclosure and sharing are permitted:
Internal data interchange among the group parent company, subsidiaries, affiliated enterprises, and entities under the same control;
Third-party service providers: cloud storage, customer service, risk control, verification, payment, wallet, advertising, analytics, hosting, compliance, security, and settlement service providers. Service providers may use the data only within the scope of the cooperation contract;
Judicial authorities, regulators, and law-enforcement agencies that have received subpoenas, court orders, or statutory request documents, and we lawfully cooperate in submitting information;
Reasonable external disclosure of necessary information to avoid major harm to person or property, or to combat illegal and fraudulent acts;
In the event of corporate mergers, divisions, asset sales, financing, public offerings, reorganization, consolidation, bankruptcy liquidation, receivership, or other business changes, user data is transferred together with the business assets to the transferee, potential transaction parties, and corresponding professional advisors;
When you actively authorize the binding of third-party platforms, the parties interchange account- and transaction-related data;
Advertising partners for interest-based targeted delivery, using only de-identified behavioral data;
Professional advisors such as law firms, auditors, banks, and insurers, processing only the information necessary for the corresponding legal or financial matters;
Publicly visible on-chain wallet addresses and public transactions that are permanently externally visible and not subject to internal disclosure restrictions;
Specified third parties to whom you have clearly instructed us in writing to deliver information;
Commercial partners in joint marketing and activity cooperation, sharing only information necessary for the conduct of the activities;
Disclosure of the minimum scope of information to private entities for fraud detection and rights protection based on lawful and compliant demands.
9.Explanation Regarding Third-Party Websites, Services, and Plugins
The Services contain external links, embedded third-party applications, wallets, analytics tools, advertising tools, widgets, and external payment pages. We cannot control the data-collection rules or privacy and security measures of third parties. Before jumping to a third-party site, you need to fully read the other party’s privacy policy yourself. The third party bears full responsibility for its own information-collection behavior.
Third parties may collect your cross-website browsing records through Cookies and pixel tags for targeted advertising. We cannot intervene in third-party tracking behavior. If you do not wish to receive targeted advertising, you need to complete the corresponding closing settings yourself within the browser, device, or third-party platforms.
10.Third-Party Analytics and Retargeting Advertising Tools
We use third-party analytics and advertising tools such as Google Analytics and Google Ads. These tools collect platform access data through Cookies and pixels to generate user behavior reports and deliver retargeting advertisements. Your access to the platform constitutes your agreement that the third parties process your data in accordance with their own privacy agreements. You may go to the corresponding vendors’ official websites to set advertising preferences and turn off interest-based advertising. After turning them off, some platform functions may be restricted.
11.All User Data Rights
In accordance with the applicable regulations of the region where you are located (users in the European Union, the United Kingdom, Switzerland, and Brazil additionally enjoy the right to lodge a complaint with a supervisory authority), you possess all of the following data rights. To exercise rights, you must send an email with the specified subject to the corresponding official email address and complete identity verification such as via the registered email. We have the right to reject requests that lack basis, harm others’ privacy, exceed the statutory scope, or cannot be identity-verified, and will inform you in writing of the reasons for rejection. You may designate an authorized agent to submit data applications on your behalf; the agent must provide written authorization documents and a power of attorney for our verification. If we reject your data application, you have the right to initiate an appeal.
Right of Access (Right to Know): Apply to obtain a copy of all Personal Information we store, and at the same time learn the history of information use and sharing as well as future processing rules;
Right of Rectification: Apply to modify or complete information when it contains errors or omissions;
Right to Object to Processing: Object to our processing of your data based on legitimate interests;
Right to Restrict Processing: Apply for temporary freezing of data-processing activities;
Right to Data Portability: Apply for a copy of Personal Information in a structured, commonly used, and machine-readable format;
Right to Withdraw Consent: Withdraw previously authorized data-processing permissions at any time. After withdrawal, we will immediately stop the corresponding processing. Withdrawal does not affect lawful data processing already completed on the basis of consent prior to withdrawal;
Right to Erasure (Right to be Forgotten): Apply for account cancellation and permanent clearing of all Personal Information, with simultaneous corresponding changes to all cooperative third parties. We support returning all personal data and deleting all backups as requested by you, or directly destroying all related data;
Right to Object to Targeted Advertising: The right to opt out of all processing activities that use Personal Information for targeted advertising.
Supplementary Rule: We will not discriminate against, restrict, or lower the treatment of your use of the Services because you lawfully exercise any of the above data rights.
12.Cross-Border Data Transfers
Your Personal Information may be stored and processed on servers located outside the country/region where you reside. Data protection regulatory standards in overseas regions may differ from those of your location. Your use of the Services constitutes your agreement to cross-border data transfers. We will adopt compliance controls and security safeguard measures and complete data transfers only in countries that possess adequate data protection legal measures. Overseas judicial and regulatory authorities may access the information about you that is stored pursuant to local law.
13.Policy Revision Rules
We may update this Privacy Policy at any time. The last revision date will be synchronized at the top of the page. The revised version takes effect immediately upon publication on the page, or on the effective date separately noted in the Policy if so indicated. You have the obligation to regularly check for Policy changes yourself. Continued use of the Services after a Policy update constitutes acceptance of all terms of the new version. If you do not accept the revised content, you must immediately stop using all Services. When applicable law mandatorily requires notification of changes, we will inform users in advance via email or in-platform announcements.
14.Jurisdiction
All online Services are operated under the jurisdiction of Panama. This Policy is governed by the laws of Panama and does not proactively accept the judicial jurisdiction of any other country or region.
15.User Autonomous Choice Settings
15.1 Management of Cookies and Tracking Technologies
Most browsers receive Cookies by default. Users may manually delete or refuse all Cookies, but this will cause platform functions to be restricted. You may visit www.allaboutcookies.org to inquire about complete Cookie management methods. On mobile devices, you may adjust system advertising identifier permissions. Using ad-blocking plugins or privacy browsers can limit third-party tracking. Devices can disable image loading to limit the effectiveness of web beacons. All devices and browsers need to be set separately; settings are not interconnected.
15.2 Management of Third-Party Linked Account Permissions
If you bind social media or third-party financial platforms, you may adjust the scope of information we can obtain within the third-party accounts. Revoking authorization only stops subsequent information synchronization and does not affect the lawful storage and processing of information already obtained.
15.3 Account Cancellation
You may submit an account closure and cancellation application through the official email. After cancellation, we will handle all Personal Information in accordance with the retention rules.
16.Official Contact Channels
Privacy questions, data rights applications, feedback regarding minors’ information, Policy consultations, and appeal submissions are unified under the contact email: yarteam@youareright.org