Plain-language summary: Tapioca does not use cookies. We collect only what is necessary to operate the platform: your wallet address, authentication credentials, and on-chain activity. We do not sell your personal data. You have the right to access, correct, or delete the information we hold about you.
Version: v1.0.1
1. Overview
1.1 No cookies
Tapioca does not use cookies. We do not set first-party or third-party cookies on your browser. We do not use tracking pixels, browser fingerprinting techniques, or any similar persistent client-side identifiers for advertising, analytics, or any other purpose. Certain third-party services embedded in the platform (see Section 4) may have their own data-collection practices. Where a third party is involved, we link to their privacy policies so you can review them directly.1.2 Scope
This Privacy Policy applies to personal data processed by Automata AI in connection with the Services. It does not apply to on-chain data — transactions recorded on the Base blockchain are public by nature and are outside our control.2. Information we collect
We collect only the information necessary to operate the Services safely and effectively.2.1 Information you provide
2.2 Information collected automatically
2.3 Information we do not collect
We do not collect:- Private keys or seed phrases (these are managed non-custodially by your authentication provider, Privy);
- Payment card numbers or bank account details;
- Government-issued identification documents;
- Precise geolocation data;
- Behavioural analytics or browsing history outside the Services.
3. How we use your information
We use the information we collect for the following purposes, in each case based on a legitimate legal basis:
We do not use your personal data for targeted advertising. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
4. Data processors
To operate the Services, we engage third-party data processors. Each processor handles only the data necessary for its specific function and is bound by a data processing agreement requiring them to protect your data in accordance with applicable law.4.1 Current processors
4.2 Planned processors
The following processors are not yet active but are expected to be integrated in future versions of the Services. This table will be updated when they go live:5. Your rights
5.1 GDPR rights (EEA, UK, and Switzerland)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or equivalent applicable law:- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data where we no longer have a legal basis to process it.
- Right to restriction: You may request that we restrict our processing of your personal data in certain circumstances.
- Right to data portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another controller.
- Right to object: You may object to processing based on our legitimate interests, including any profiling based on those interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before the withdrawal.
- Right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority in your country of residence.
5.2 CCPA and US state privacy rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):- Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties to whom we have disclosed it.
- Right to delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to correct: You may request correction of inaccurate personal information.
- Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioural advertising. There is nothing to opt out of, but you may contact us to confirm this.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
5.3 How to exercise your rights
To exercise any of the rights described above, please contact us at hello@beautomata.com with the subject line “Privacy Rights Request.” We will respond within the timeframe required by applicable law (generally 30 days for GDPR requests and 45 days for CCPA requests). We may ask you to verify your identity before processing your request.6. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
On-chain data (transactions recorded on Base) is permanently public and cannot be deleted. When you request erasure, we delete the associated off-chain records we control; we cannot remove data from the blockchain.
7. Security
We implement technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:- Encryption of data in transit using TLS;
- Encryption of sensitive data at rest;
- Access controls limiting data access to authorised personnel with a legitimate need;
- Operational monitoring and incident response procedures managed in part through PagerDuty;
- Regular review of security practices.
8. Children’s privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at hello@beautomata.com and we will take steps to delete the information as soon as practicable.9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will revise the “Effective Date” at the top of this page and, where practicable, notify you by email or through an in-app notice. We encourage you to review this Privacy Policy periodically. Your continued use of the Services after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.10. Contact
If you have questions, concerns, or requests relating to this Privacy Policy or our data-handling practices, please contact us at: Automata AI, Inc.Email: hello@beautomata.com
Website: beautomata.com For GDPR-related inquiries, you may also contact us using the subject line “Data Protection Inquiry.”