Privacy policy

The short version

We collect what we need to operate a settlement network and to know who our counterparties are. We do not sell it, and we do not run advertising. One thing here is unusual and you should read it before you integrate: some records are written to a chain and cannot be deleted.

What we collect

• Account information. Name, business, email address, and the identity evidence required by the verification tier you request.
• Transaction records. The parties, amounts, models and outcomes of settlements you execute.
• Technical logs. Request metadata, IP address and user agent, retained for security and for debugging.
• Correspondence. What you send us and what we send back.

The part about immutability

Transactions committed to xodiak-1 are hash-linked and cannot be altered or removed. That is the property the network exists to provide. Before you write anything to it, understand that a right to erasure cannot be exercised against committed blocks.

Because of that, we keep personal data out of transaction payloads by design. Identities are referenced by opaque account addresses and identifiers; the mapping from an identifier to a person lives in the off-chain compliance store, which we can and do amend, correct and delete on request.

Why we process it

• To perform the contract you have with us.
• To meet identity, sanctions and record-keeping obligations.
• To keep the network secure and to investigate abuse.
• To answer you when you write to us.

Who else sees it

Infrastructure providers who host the systems, and identity verification providers where a tier requires one. We do not sell data, and we do not share it with advertisers. We disclose to a government or a court only where we are legally compelled, and we will tell you unless we are prohibited from doing so.

Retention

Off-chain account and compliance data is retained for the life of the relationship and afterwards for as long as our record-keeping obligations require. Technical logs are kept for a rolling operational window. On-chain records are permanent, as described above.

Your rights

Depending on where you are, you may have rights of access, correction, deletion, portability and objection over the off-chain data we hold. Write to bill@bdsrvs.com and we will handle it. We will explain honestly where a right cannot be exercised against chain state, and what we can do instead.

Children

This is business infrastructure. It is not directed at anyone under 18 and we do not knowingly collect their data.

Changes

If this policy changes materially we will say so here with a new date, and we will contact account holders directly rather than relying on you to re-read the page.

Contact

bill@bdsrvs.com