Privacy Policy

We collect information you provide directly to us, including: • Account registration information (name, email, password) • Identity verification documents for KYC compliance • Payment and transaction information • Communications with our support team • Profile information and preferences We automatically collect certain information when you use our platform: • Device and browser information • IP address and location data • Usage patterns and interaction data • Cookies and similar tracking technologies

We use the information we collect to: • Provide, maintain, and improve our services • Process transactions and send related notifications • Verify your identity and prevent fraud • Comply with legal and regulatory requirements • Send you updates, security alerts, and support messages • Analyze usage patterns to improve user experience • Personalize content and recommendations • Protect the security of our platform and users

Please be aware that blockchain transactions are public by nature: • Wallet addresses and transaction amounts are visible on the blockchain • This information cannot be deleted or modified once recorded • We cannot control access to public blockchain data • Your wallet address may be linked to your identity if disclosed We recommend using separate wallets for privacy-sensitive transactions and being cautious about publicly associating your identity with wallet addresses.

We use cookies and similar technologies to enhance your experience. Here are the specific cookies we use: ESSENTIAL COOKIES (Required): • Session cookie: Maintains your login session (expires on browser close) • CSRF token: Protects against cross-site request forgery (session duration) • Language preference: Stores your selected language (1 year) • Theme preference: Stores light/dark mode setting (1 year) FUNCTIONAL COOKIES: • Wallet connection: Remembers your connected wallet (session duration) • User preferences: Stores dashboard and display settings (1 year) ANALYTICS COOKIES: • We may use privacy-focused analytics to understand platform usage • No third-party advertising or tracking cookies are used MANAGING COOKIES: You can control cookies through your browser settings. EU/UK users will see a cookie consent banner on first visit. Essential cookies cannot be disabled as they are required for the platform to function. To opt out of analytics, you can use your browser's Do Not Track feature or contact us at privacy@hbc-engineering.com.

We work with trusted third-party service providers to operate our platform: AUTHENTICATION SERVICES: • Google OAuth: For social login (governed by Google's Privacy Policy) • Facebook OAuth: For social login (governed by Meta's Privacy Policy) • WalletConnect/Reown: For cryptocurrency wallet connections INFRASTRUCTURE: • Cloud hosting providers for secure data storage • Email service providers for transactional emails • CDN providers for content delivery BLOCKCHAIN: • BNB Smart Chain (BSC) network for token transactions • PancakeSwap for DEX liquidity (public blockchain interactions) We may also share information with: • Law enforcement when required by law or legal process • Professional advisors (lawyers, auditors, consultants) • Regulatory authorities for compliance purposes IMPORTANT: We do NOT sell your personal information to third parties. We do NOT use third-party advertising networks. All service providers are bound by data processing agreements.

We implement robust security measures to protect your information: • Encryption of data in transit and at rest (AES-256) • Two-factor authentication for account access • Regular security audits and penetration testing • Access controls and employee training • Secure data centers with physical security • Incident response and monitoring systems While we take extensive precautions, no system is completely secure. We encourage you to use strong passwords and enable all available security features.

We retain your personal information for as long as necessary to: • Provide our services to you • Comply with legal and regulatory obligations • Resolve disputes and enforce agreements • Maintain security and prevent fraud Specific retention periods: • Account information: Duration of account plus 5 years • Transaction records: 7 years for tax and regulatory compliance • Security logs: 2 years • Marketing preferences: Until you unsubscribe You may request deletion of your data subject to legal retention requirements.

Your rights depend on your location: FOR EU/UK RESIDENTS (GDPR): • Right of Access: Request a copy of your personal data • Right to Rectification: Correct inaccurate or incomplete data • Right to Erasure: Request deletion of your data ("right to be forgotten") • Right to Data Portability: Receive your data in a machine-readable format • Right to Restrict Processing: Limit how we process your data • Right to Object: Object to processing based on legitimate interests • Right to Withdraw Consent: Revoke consent at any time • Right to Lodge a Complaint: File with your local supervisory authority FOR CALIFORNIA RESIDENTS (CCPA): • Right to Know: What personal information we collect and how it's used • Right to Delete: Request deletion of your personal information • Right to Opt-Out: We do not sell personal information • Right to Non-Discrimination: Equal service regardless of privacy choices TO EXERCISE YOUR RIGHTS: Email: privacy@hbc-engineering.com Response time: Within 30 days (GDPR) or 45 days (CCPA) Verification: We may need to verify your identity before processing requests Note: Some data cannot be deleted due to legal retention requirements (e.g., financial records, blockchain transactions).

Your information may be transferred to and processed in countries other than your own: WHERE DATA IS PROCESSED: • United States: Primary servers and infrastructure • European Union: For EU user data where applicable • Other jurisdictions: Through our service providers SAFEGUARDS FOR EU/UK DATA: • Standard Contractual Clauses (SCCs) approved by the European Commission • Data Processing Agreements with all service providers • Technical and organizational security measures • Regular compliance assessments LEGAL BASIS FOR TRANSFERS: • Your explicit consent when you create an account • Necessity for contract performance (providing our services) • Compliance with legal obligations For questions about international transfers, contact: privacy@hbc-engineering.com

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@hbc-engineering.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes: • We will update the "Last Updated" date • We will notify you of material changes via email or platform notification • We may ask for your consent if required by law We encourage you to review this policy periodically. Your continued use of the platform after changes constitutes acceptance of the updated policy.