1. Introduction

Galaxia Creators ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. GDPR Compliance (EU Users)

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@galaxia.creators. We will respond within 30 days.

3. Information We Collect

3.1 Personal Information

• Wallet addresses and blockchain transaction data
• KYC/AML verification documents (government ID, proof of address)
• Contact information (email, phone if provided)
• Source of funds information
• Beneficial ownership information (for entities)

3.2 Technical Information

• IP address and geolocation data
• Device information and browser type
• Usage data and analytics
• Cookies and similar tracking technologies

4. How We Use Your Information

We use your information for:

• KYC/AML compliance and identity verification
• Transaction monitoring and suspicious activity detection
• Sanctions screening and compliance checks
• Regulatory reporting (as required by law)
• Platform operation and service delivery
• Security and fraud prevention
• Legal compliance and dispute resolution

5. Data Retention

We retain your personal data for the following periods:

• Transaction Records: Minimum 5 years (AML requirement)
• KYC Documents: 5 years after account closure or last transaction
• Compliance Records: 7 years (regulatory requirement)
• Marketing Data: Until consent is withdrawn

Data may be retained longer if required by law, ongoing investigations, or legal proceedings.

6. Data Sharing and Disclosure

We may share your data with:

• Regulatory Authorities: As required by law (FCA, FinCEN, etc.)
• Law Enforcement: In response to valid legal requests
• Service Providers: KYC providers, cloud services, analytics (under strict confidentiality)
• VASPs: For Travel Rule compliance (transaction information only)

We do not sell your personal data to third parties.

7. Cross-Border Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Encryption and security measures

8. Security Measures

We implement comprehensive security measures including:

• End-to-end encryption for sensitive data
• TLS 1.3+ for data in transit
• At-rest encryption for all PII
• Multi-factor authentication
• Regular security audits and penetration testing
• Access controls and audit logging

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify relevant supervisory authorities within 72 hours (GDPR requirement)
• Notify affected users without undue delay
• Provide details of the breach and mitigation measures

10. Cookies and Tracking

We use cookies and similar technologies for:

• Essential platform functionality
• Analytics and performance monitoring
• Security and fraud prevention

You can manage cookie preferences through our Cookie Settings. See our Cookie Policy for details.

11. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.

12. Contact Us

For privacy-related inquiries or to exercise your rights:

Data Protection Officer
Email: privacy@galaxia.creators
Address: [Your Registered Address]