CADMOS ("CADMOS", "we" or "us" or "our") respects the privacy of our Users ("User" or "you" or "your"). This privacy policy (hereinafter referred to as the "Privacy Policy") explains how we collect, use, disclose, and safeguard your Information when you visit our website cadmospay.com and our mobile application, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the "Site").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site, and you waive the right to receive specific notice of each such change or modification.

You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Site after the date such revised Privacy Policy is posted.

We may collect the following information (hereinafter referred to as the "Information") when you use the Services :

1.1 Personal Data

1.2 Derivative Data

1.3 Mobile Device Data

Device Information, such as your mobile device ID, advertising identifier where available and permitted by your device settings, model, manufacturer, operating system and version, and IP address.

1.4 Third-Party Data

Information from third parties, such as personal Information, if you connect your account to the third party and grant the Site permission to access this Information.

1.5 Mobile Application Information

We may share Information we have collected about you in certain situations. Your Information may be disclosed as follows:

3.1 By Law or to Protect Rights

If we believe the release of Information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your Information as permitted or required by any applicable law, rule, or regulation. This includes exchanging Information with other entities for fraud protection.

3.2 Third-Party Service Providers

We may share your Information with third parties that perform services for us or on our behalf, including fraud detection and prevention, payment processing, data analysis, app-install and marketing attribution, customer support, and hosting services. All service providers that we engage with are restricted to only utilizing the Information on our behalf and in accordance with our instructions.

3.3 Affiliates

We may share your Information with our Affiliates and related entities, in which case we will require those affiliates to honor this Privacy Policy.

3.4 Business Partners

We may share your Information with our business partners to offer you and improve certain products, services.

3.5 Sale or Bankruptcy

If we reorganize or sell all or a portion of our assets, undergo a merger, or are acquired by another entity, we may transfer your Information to the successor entity. If we go out of business or enter bankruptcy, your Information would be an asset transferred or acquired by a third party. You acknowledge that such transfers may occur and that the transferee may decline honor commitments we made in this Privacy Policy.

3.6 Consent and request

We may share Information about you with your consent or at your request.

We are not responsible for the actions of third parties with whom you share personal or sensitive data, and we have no authority to manage or control third-party solicitations. If you no longer wish to receive correspondence, emails or other communications from third parties, you are responsible for contacting the third party directly.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4.1 Cookies and Similar Technologies

The Site uses cookies, local storage, tags, pixels, and similar browser technologies. These technologies may collect or receive personal Information, including your IP address, browser or device Information, page views, interactions, and advertising or referral identifiers. The mobile application uses software development kits rather than browser cookies for analytics and attribution. Browser and device controls may let you delete, block, or limit some of these technologies. Doing so may affect measurement or certain features.

4.2 Analytics and Attribution

We use Google Analytics and an X advertising measurement tag on the Site to measure visits and interactions. When you follow an app-download link, the link may include referral, campaign, Google Ads, or Meta identifiers and send them to Tenjin for install and referral attribution.

The mobile application uses Firebase Analytics to record events such as app opens and screen views. After you sign in, CADMOS provides Firebase with your CADMOS account identifier and email address as analytics properties, and provides Tenjin with your CADMOS account identifier as an attribution identifier. The application also uses Tenjin to measure installs, referrals, and campaign attribution. These providers receive Information from the Site or application to provide those services.

On iOS, the application requests App Tracking Transparency permission. Granting permission allows Tenjin to access the iOS advertising identifier and use data to track activity across other companies' apps and websites. You can deny the request or change the permission later in your device settings. Denying permission limits access to this advertising identifier, but does not disable Firebase Analytics or attribution methods that do not use it. On Android, the application may access the advertising ID where it is available under your device settings.

The Site and our mobile application may contain links to third-party websites and applications of interest, including external services that are not affiliated with us. Once you have used these links to leave the Site or our mobile application, any Information you provide to these third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your Information. Before visiting and providing any Information to any third-party websites, you should inform yourself of the privacy policies and practices (if any) of the third party responsible for that website, and should take those steps necessary to, in your discretion, protect the privacy of your Information. We are not responsible for the content or privacy and security practices and policies of any third parties, including other sites, services or applications that may be linked to or from the Site or our mobile application.

We use administrative, technical, and physical security measures to help protect your Information. While we have taken reasonable steps to secure the Information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any Information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal Information.

7.1 Cookies and similar technologies. You can use your browser settings to delete or block cookies and similar browser storage. You can change the iOS tracking permission and Android advertising-ID settings in your device settings. These choices may not stop analytics or attribution that do not rely on cookies or advertising identifiers.

7.2 Do Not Track: see article 8 below

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

The General Data Protection Regulations in the European Economic Area and the United Kingdom ("GDPR") distinguish between organizations that process personal data for their own purposes (known as "controllers") and organizations that process personal data on behalf of other organizations (known as "processors"). We act as a controller with respect to personal data collected as you interact with the Services.

We have detailed above what data we collect, how we collect this data, how we use this data, the use of cookies privacy notice, the purpose of the collection, that you consented to the processing of your data.

The following developments aim to be bring the Privacy Policy to be in full compliance with the GDPR.

9.1 Lawfulness of processing.

According to Article 6 of the GDPR, processing is legal if it is based on certain grounds qualified as lawful.
CADMOS lawful grounds for processing are as follows:
9.2.1. you have given consent to the processing of your personal data and Information for one or more specific purposes, either to us or to our service providers or partners;
9.2.2. processing is necessary for the performance of the Services that you use, knowing that the Site is which is an interface to decentralized protocols;
9.2.3. processing is necessary for compliance with a legal obligation to which CADMOS may be subject;
9.2.4. processing is necessary for the purposes of the legitimate interests pursued by CADMOS or a third party, and your interests and fundamental rights and freedoms do not override those interests. Where applicable, we will transfer your personal data to third parties subject to appropriate or suitable safeguards, such as standard contractual clauses.

9.2 Your Data Subject Rights

As a reminder, according to Article 3 of GDPR, the regulation applies to the processing of personal data of data subjects who are in the Union or the United Kingdoms by a controller not established in the Union.

In other words, if you are a user in the European Economic Area or the United Kingdom, you have certain rights under the GDPR. These rights are as follows:

9.3.1 request access and obtain a copy of your personal data;
9.3.2. request rectification or erasure of your personal data;
9.3.3. object to or restrict the processing of your personal data;
9.3.4. request portability of your personal data. Additionally, if we have collected and processed your personal data with your consent, you have the right to withdraw your consent at any time.
9.3.5. right to object to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you when your fundamental rights and freedoms override the legitimate interests pursued by CADMOS or by a third party.

Despite the aforementioned, we cannot edit or delete information that is stored on a blockchain. This information may include transaction data (i.e., purchases, sales, and transfers) related to your blockchain wallet address and any NFTs held by your wallet address.

To exercise any of these rights, please contact us via our email or postal address listed in the "Contact Us" section above and specify which right you are seeking to exercise.

We will respond to your request within thirty (30) days. We may require specific information from you to help us confirm your identity and process your request. Please note that we retain information as necessary to fulfill the purpose for which it was collected and may continue to retain and use information even after a data subject request in accordance with our legitimate interests, including as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

If you have any issues with our compliance, please contact us as set out in the "Contact Us" section above. You also reserve the right to lodge a complaint with the data protection regulator in your jurisdiction.