Service Time Privacy Statement

1.1 Introduction

Service Time respects your privacy and is committed to protecting your data. This privacy statement explains how we collect, process, and protect personal information when you visit ServiceTime.ai, interact with our blockchain-based services, purchase our products, or otherwise communicate with us. It also describes your rights under the EU General Data Protection Regulation ("GDPR"), the ePrivacy Directive, and other applicable laws.

1.2 Who We Are

Service Time ("Service Time", "we", "our" or "us") is a blockchain project that operates globally through its website ServiceTime.ai. Unless otherwise stated, Service Time is the data controller responsible for the processing of personal data described in this statement. You may contact us at:

• Email: privacy@servicetime.ai
• Postal address: [Coming Soon USA]

1.3 Scope

This privacy statement applies to personal data that we collect through our website, mobile applications, social media pages, and other digital properties that link to this statement. If you access third-party websites or services through our site, those services have their privacy notices; we are not responsible for their practices.

1.4 Data We Collect

We collect the following categories of personal data:

1. Identification and contact data – such as your name, email address, telephone number, postal address, and professional affiliation. We collect this information when you create an account, subscribe to newsletters, communicate with us, or participate in promotions.
2. Blockchain wallet data – such as public wallet addresses and transaction identifiers. Blockchain addresses can be associated with individuals under certain circumstances and, therefore, may constitute personal data.
3. Transaction and payment data – such as records of purchases, token transfers, and payment methods. Payment data may include partial credit-card details or cryptocurrency transaction metadata.
4. Technical data – including internet protocol (IP) address, browser type, operating system, device identifiers, login data, language preferences, and other device characteristics. These data are collected automatically through cookies and similar technologies when you access our website.
5. Usage data – such as pages viewed, links clicked, time spent on the site, referring URLs, and interactions with our services.
6. Marketing and communications data – including your preferences for receiving marketing communications from us and your communication history with us.
7. Customer support data – any information you provide when you contact customer support, including records of correspondence and problem-resolution notes.
8. Other information – such as demographic information or survey responses you choose to provide.

We do not intentionally collect personal information from children under the age of 16 or from minors in jurisdictions where parental consent is required by law. If you believe we have collected personal data from a minor without appropriate consent, please contact us so we can remove the data.

1.5 How We Collect Data

We collect personal data in three ways:

1. Direct interactions. You may provide personal data to us when you create an account, complete a transaction, fill out forms, subscribe to newsletters, or communicate with us by email, telephone, or otherwise.
2. Automated technologies. When you use our website, we automatically collect technical and usage data through cookies, server logs, and other similar technologies. These technologies enable us to recognize your device, maintain your session, analyze trends, and improve our services.
3. Third parties or publicly available sources. We may receive information about you from publicly available blockchain ledgers, from business partners (such as payment processors or KYC/AML service providers), or marketing partners.

1.6 Purpose and Legal Basis for Processing

We only process your data when we have a legal basis under the GDPR. Our purposes and legal bases include:

• Contractual necessity. We process your identification, contact, wallet, and transaction data to provide our services, fulfil your orders, authenticate log-ins, and manage your account.
• Legal obligations. We process certain data (such as transaction records and KYC/AML information) to comply with anti-money-laundering regulations, tax laws, and other legal requirements.
• Legitimate interests. We process technical and usage data to secure our platform, prevent fraud, improve the user experience, and develop new features. We ensure that our legitimate interests do not override your rights and freedoms.
• Consent. We process your marketing preferences and set non-essential cookies only when you have given us explicit consent. You may withdraw your consent at any time, but that will not affect the lawfulness of processing before withdrawal.
• Public interest. When operating a blockchain service, certain information (e.g., wallet addresses, transaction hashes) may be stored on a public, distributed ledger. We minimize on-chain personal data, use cryptographic techniques to anonymize or pseudonymize data, and store personal data off-chain whenever possible.

1.7 Data Retention

We will retain your data only as long as necessary to fulfil the purposes described above or as required by law. Because blockchain ledgers are immutable by design, transaction data recorded on the blockchain cannot generally be erased or altered. To honor the principle of storage limitation and respect data subject rights, we minimize the personal data included on-chain, store off-chain references separately, and unlink wallet addresses from personal profiles when accounts are closed. For off-chain data (such as account information or communications), we apply fixed retention periods based on legal obligations and legitimate business needs; after these periods expire, we delete or anonymize the data.

1.8 Data Security

We implement appropriate technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption of data at rest and in transit, pseudonymization, access controls, security monitoring, and regular testing of our systems. We also limit access to your data to employees and service providers who have a business need to know and are subject to confidentiality obligations.

1.9 International Transfers

Because our services are global, your data may be stored and processed outside your country of residence. When we transfer personal data to countries that have not been deemed to provide an adequate level of protection, we rely on Standard Contractual Clauses or other approved safeguards to ensure that your data remains protected.

1.10 Data Sharing

We may share your data with the following categories of recipients:

1. Service providers. We utilize third-party service providers (e.g., payment processors, cloud hosting providers, analytics companies, and KYC/AML verification services) to operate our business. These providers process personal data on our behalf and are contractually obligated to protect it and use it only for the purposes specified by us.
2. Blockchain network participants. When you interact with the blockchain, your wallet address, transaction amount, and timestamp are broadcast to the network. We cannot control how other participants use publicly accessible blockchain data. We therefore recommend that you use pseudonymous addresses and take steps to protect your privacy.
3. Affiliates. We may share your information with our affiliates and subsidiaries for internal business purposes, provided that they are bound by privacy obligations consistent with this statement.
4. Legal and regulatory authorities. We may disclose personal data if required by law, court order, or governmental authority; to comply with anti-money laundering and anti-terrorism obligations; or to enforce our Terms of Service, protect our rights, or investigate fraud or security issues.
5. Business transfers. If we are involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and inform you of your rights and options.

We do not sell or rent your data to third parties.

1.11 Your Rights

Under the GDPR, individuals whose data we process have several rights, including:

1. Right to be informed – to receive clear information about how we use your data. This privacy statement serves that purpose.
2. Right of access – to request a copy of your data and information about how it is processed.
3. Right to rectification – to request that we correct inaccurate or incomplete personal data.
4. Right to erasure – to ask us to delete your data when certain conditions apply. Because data recorded on public blockchains cannot be modified or erased, we will remove or anonymize off-chain references and unlink your identity from any on-chain data to the extent technically feasible.
5. Right to restrict processing – to request a temporary halt to processing under specific circumstances.
6. Right to data portability – to receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
7. Right to object – to object to the processing of your data, including profiling, when it is based on our legitimate interests or for direct marketing.
8. Right not to be subject to automated decision-making – to request human intervention in decisions that significantly affect you and are based solely on automated processing.

You also have the right to withdraw consent at any time when we rely on consent to process your data. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal. Additionally, you may complain to your local data protection authority if you believe we have violated your rights.

1.12 Exercising Your Rights

To exercise any of the rights above, please contact us at privacy@servicetime.ai with sufficient information to verify your identity. We must respond to your request within one month and may extend this period by up to two months if necessary. We will not charge a fee for complying with a request unless it is manifestly unfounded or excessive in nature.

1.13 Cookies and Similar Technologies

We use cookies and similar technologies to recognize your device, remember your preferences, analyze usage, and deliver customized content. According to the GDPR and the ePrivacy Directive, we must obtain your consent before using cookies other than those that are strictly necessary for our website to function. For more information, please see our separate cookie policy.

1.14 Changes to This Privacy Statement

We may update this privacy statement from time to time to reflect changes in our services or legal requirements. We will post the updated statement on our website, indicating the date of the latest revision. If the changes are material, we will provide additional notice or obtain your consent, as appropriate. Your continued use of the website after the effective date of the updated statement constitutes acceptance of the changes.

1.15 Contacting Us

If you have any questions, concerns, or complaints regarding this privacy statement or our data handling practices, please contact us at privacy@servicetime.ai or our postal address above. You also have the right to complain to a supervisory authority in the EU member state of your habitual residence or place of work.