Privacy Policy
Last Updated July 20264 min read
This Privacy Policy explains what information Boundless collects when you use the Platform, how we use it, who we share it with, and the choices you have. It applies to the Boundless website and applications.
In short: we collect what we need to run accounts, organizations, programs, and payouts; identity verification is handled by a specialist provider; and anything written to a public blockchain is, by design, public and permanent.
Contents
Information we collect
- Account information: name, email address, username, password (stored as a hash), and sign-in metadata such as the method you last used.
- Profile information you choose to add: photo, bio, skills, location, social links, and the persona you select at onboarding.
- Organization information: organization names, logos, membership, roles, and invitations, including the email addresses of people you invite.
- Program activity: submissions, judging assignments and scores, comments, claims, and contribution history.
- Wallet and payment information: Stellar wallet addresses associated with your account or organization, balances of managed wallets, and transaction records.
- Identity verification: we receive the outcome of verification (for example approved, declined, in review) and session metadata from our verification provider. Identity documents themselves are collected and processed by the provider.
- Usage and device information: log data, IP address, browser type, and diagnostic events (including crash reports) used to keep the Platform working.
How we use information
- Operate the Platform: accounts, organizations, programs, judging, payouts, and support.
- Verify identity where required for payouts, withdrawals, or by law.
- Send notifications you can manage in settings (in-app, email, and push) about invitations, program updates, and money movements.
- Secure the Platform: detect abuse, enforce our Terms, and audit sensitive actions.
- Improve the Platform through aggregate analytics and diagnostics.
- Comply with legal obligations, including anti-money-laundering and sanctions rules.
Blockchain data is public
Payouts, escrows, and other on-chain operations are recorded on the Stellar network. Blockchain records, including wallet addresses, amounts, and transaction history, are public and cannot be edited or deleted by Boundless or anyone else. Do not use the Platform if you are not comfortable with that permanence.
Identity verification provider
Identity verification is performed by a third-party specialist. When you verify, you submit your documents and biometric checks directly to that provider under its own privacy terms; Boundless receives the verification outcome and limited session metadata, not your document images. We link the outcome to your account so verified actions can proceed.
Data retention
We keep personal information for as long as your account is active and as needed for the purposes above. Some records must be kept longer, such as verification outcomes, payout records, and audit logs retained to meet legal and accounting obligations. On-chain records cannot be deleted.
Security
We protect data with measures appropriate to its sensitivity, including encrypted transport, hashed credentials, role-based access to organization data, audit logging of sensitive actions, and custody controls around managed wallet keys. No system is perfectly secure; report concerns to support@boundlessfi.xyz.
Your rights and choices
- Access and update your profile and settings at any time in the app.
- Control notification channels (in-app, email, push) in settings.
- Request a copy of your personal information, or deletion of information we are not legally required to keep, by contacting support@boundlessfi.xyz.
- Depending on where you live, you may have additional statutory rights (such as objection, restriction, or portability). We honor valid requests under applicable law.
International transfers
The Platform is operated globally and your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
Children
The Platform is not directed to children and may not be used by anyone under 18. If we learn we have collected personal information from a child, we will delete it.
Changes to this policy
We will update this policy as the Platform evolves and will give notice of material changes before they take effect. The "Last Updated" date above reflects the latest revision.
Contact
Privacy questions or requests: support@boundlessfi.xyz.