1. Scope
This Privacy Policy applies to the MeritX website, applications, APIs, and related services. It explains what information we process, why we process it, and the choices available to you.
2. Information we process
Wallet information
We process public wallet addresses, signed authentication messages, session records, and public blockchain activity needed to verify token ownership or campaign eligibility. A signature proves control of a wallet; it does not give MeritX access to your private key.
X account information
When you connect X, we receive your X account identifier, username, display name, profile image, authorization scopes, and OAuth credentials. OAuth credentials are encrypted at rest and used only to provide requested identity and contribution-verification features.
Campaign and contribution information
We process campaign rules, task submissions, post links, verification results, votes, points, rankings, appeals, and reward or claim records. Published campaign rules, public usernames, scores, and rankings may be visible to other users.
Technical information
Our servers may record IP addresses, timestamps, request identifiers, browser or device information, security events, and cookies required for authenticated sessions and abuse prevention.
3. How we use information
- Authenticate wallets and maintain secure sessions.
- Connect an X identity to one verified participant.
- Verify campaign tasks, calculate scores, and publish rankings.
- Prevent duplicate participation, manipulation, fraud, and abuse.
- Operate, secure, troubleshoot, and improve MeritX.
- Comply with legal obligations and enforce our Terms.
4. Sharing and third-party services
We may share limited information with service providers that help us host, secure, and operate MeritX. When you connect X or use blockchain features, information is also processed by X, wallet software, RPC providers, Robinhood Chain, Pons, and other services you choose to use. Their own terms and privacy policies apply.
We do not sell personal information. We may disclose information when required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate safeguards.
5. Public blockchains
Blockchain transactions and wallet addresses are public and may be permanent. MeritX cannot edit or erase records written to a public blockchain. Do not use a wallet address if you do not want its public activity associated with your participation.
6. Retention and security
We retain information for as long as needed to provide the service, preserve campaign integrity and audit history, resolve disputes, meet legal obligations, and protect MeritX. We use access controls, encryption for OAuth credentials, secure cookies, backups, and operational monitoring. No system can guarantee absolute security.
7. Your choices
You can disconnect your wallet locally, revoke MeritX access from your X account settings, and stop using the service. You may request access, correction, or deletion of eligible off-chain account information through the official support channel published by MeritX. Security, fraud-prevention, legal, and public blockchain records may need to be retained.
8. International use and age requirement
MeritX may process information in countries other than where you live. You must be at least 18 years old, or the age of legal majority where you live, to use MeritX. The service is not directed to children.
9. Changes and contact
We may update this policy as MeritX changes. The effective date above identifies the current version. Questions or privacy requests can be submitted through the official support channel identified on the MeritX website or application listing.