Privacy Policy
Built By DAO collects and processes personal data to operate the platform, track contributions, and enable governance. This policy explains what data we collect, how we use it, how we protect it, and your rights regarding your information.
Profile, activity, wallet
Encrypted at rest & transit
Access, correct, delete
On-chain data is permanent
🎯 Purpose: Transparent data handling that respects member privacy while enabling contribution tracking and governance
📍 Jurisdiction: Wyoming, USA (Built By DAO LLC)
📊 What We Collect
We collect data in several categories, each serving specific functions within the platform and DAO operations.
Profile Information
When you join Built By DAO, we collect personal information:
📱 Phone
+1 (555) 123-4567
Two-factor authentication
👤 Name
Full legal name
Membership records, legal agreements
📍 Location
City, state, country
Geographic compliance, housing eligibility
🪪 Identity info
Date of birth, government ID
KYC/AML verification for investors
Onboarding Data
During the onboarding process, you provide additional information:
💼 Skills
Carpentry, electrical, design
Task matching and role placement
⏰ Availability
Full-time, part-time, hours/week
Workload planning
🏠 Housing interest
Interested in equity-building lease
Property matching
📸 Group photo consent
Opt-in/out
Community materials, documentation
👤 Named likeness consent
Opt-in/out
Public promotion materials, announcements
💬 Communication preferences
Email, SMS, Discord
How we contact you
Wallet & Blockchain Data
You connect a cryptocurrency wallet to interact with the DAO:
💳 Wallet address
0x1234...abcd
Identity on blockchain, NFT ownership, token transfers
🔑 Connected networks
Base, Ethereum, others
Multi-chain transaction tracking
Activity Data
The platform tracks your contributions and participation:
🔨 Tasks completed
Task ID, duration, compensation
EQTBLT earning, rank progression
📊 Work hours
Hours logged, time entries
Contribution tracking, activity multiplier
🏠 Rent payments
Payment date, amount, EQTBLT conversion
Equity building, income tracking
🗳️ Governance participation
Proposals viewed, votes cast, weight
Activity-based voting multiplier
📚 Training & certifications
Courses completed, scores
Skill tracking, EQTBLT rewards
💬 Communication
Discord messages, forum posts (optional)
Community engagement metrics
Technical Data
When you use the platform, we collect technical information:
🖥️ Device info
Browser, OS, device type
Platform compatibility, usability
📍 IP address
Session IP during login
Security, fraud detection
🔌 Connection logs
Login times, session duration
Account security, API monitoring
🍪 Cookies & tokens
Session ID, authentication tokens
User authentication, preferences
📈 Analytics
Page views, feature usage, errors
Platform improvement, debugging
Payment & Financial Data
For investors and renters, we collect additional information:
💳 Payment info
Wallet address for funds transfer
Investment processing, rent collection
💰 Investment amount
Amount invested, tier qualification
Investor NFT minting, multiplier calculation
📄 Bank details
For fiat on/off ramps (processed by third-party)
KYC compliance, fund transfers
Note: We do NOT store bank account numbers or credit card details. Payment processing is handled by third-party providers with their own privacy policies.
Consent Data
We track your explicit consent decisions:
✅ Consent records
Terms acceptance, privacy policy, NDA
Legal compliance, audit trail
📅 Timestamp
Date/time of consent
Regulatory documentation
🔄 Data Uses & Purposes
Your data enables core platform functionality and governance operations. We use data only for the purposes listed here.
Membership & Identity
🎫 Membership verification
Confirm you're a member for access control
🖥️ NFT minting
Create your soul-bound membership NFT on Base blockchain
🎖️ Rank management
Track rank progression, promotions, demotions
📋 Credential verification
Validate membership status for governance voting
Contribution Tracking
🔨 Task assignment
Match you with tasks based on skills and availability
⏱️ Hours logging
Record contribution time for compensation and progression
📊 Performance tracking
Monitor work quality, completion rates, feedback
💎 EQTBLT calculation
Determine equity token awards based on contributions
📈 Rank progression
Assess advancement eligibility with evidence-based reviews
Governance & Voting
🗳️ Voting power calculation
Compute EQTBLT balance, rank multiplier, activity weight
📊 Activity multiplier
Track 30/90/180 day activity windows for voting modifier
💪 Voting eligibility
Verify membership status and voting rights for proposals
📋 Proposal participation
Record votes on-chain for governance transparency
Communication
📧 Notifications
Send task assignments, payment confirmations, announcements
💬 Community updates
Share governance proposals, voting deadlines, DAO news
🆘 Support requests
Answer questions, resolve issues via email/chat
📢 Community outreach
Marketing materials based on consent preferences
Platform Operations
🔐 Security & fraud detection
Monitor for suspicious activity, unauthorized access
🛡️ Account protection
Verify transactions, prevent account takeover
🔧 Technical support
Debug issues, resolve errors, improve stability
📊 Analytics & improvement
Analyze feature usage, identify bottlenecks, plan updates
Legal & Compliance
📋 KYC/AML verification
Comply with regulatory requirements for investors and renters
💰 Tax reporting
Document income for 1099 reporting and member records
⚖️ Legal obligations
Respond to legal requests, maintain audit trails
📜 Contract enforcement
Verify terms compliance, track agreement acceptance
Housing & Equity-Building Leases
🏠 Lease administration
Process lease agreements, track rent payments
💵 Equity conversion
Calculate EQTBLT earnings from rent (7-12% conversion)
📊 Payment tracking
Record rent history, payment status, late notices
🏘️ Property management
Assign units, manage maintenance requests, coordinate repairs
What We DON'T Use Data For
We explicitly do NOT:
🚫 Sell personal data to third parties
🚫 Use data for targeted advertising
🚫 Share contact information for marketing without consent
🚫 Build profiles for discrimination
🚫 Use data for surveillance beyond platform operations
🔐 How We Protect Your Data
Security is foundational. We implement multiple layers of protection.
Encryption
🔒 In Transit
TLS 1.2+ (HTTPS)
All connections encrypted
🔐 At Rest
AES-256
Database encryption, file storage encryption
🔑 Key management
AWS KMS
Secure key rotation and storage
Infrastructure Security
🏗️ Cloud hosting
AWS Lightsail (US-East region)
📦 Database
PostgreSQL (encrypted)
🗄️ File storage
S3 with encryption
🔥 Firewall
Security groups, WAF rules
🛡️ DDoS protection
CloudFront edge distribution
Access Control
🔑 Role-based access
Only authorized staff access sensitive data
🔐 Authentication
Multi-factor authentication for admin accounts
📋 Access logs
All data access tracked and audited
🚫 Principle of least privilege
Employees access only necessary data
Application Security
🧪 Security testing
Regular penetration tests and vulnerability scans
🔒 Input validation
Prevent injection attacks, XSS, malicious input
🔄 Secure coding
Code review, security-focused development practices
📦 Dependency updates
Keep libraries patched against known vulnerabilities
Monitoring & Incident Response
📊 Activity monitoring
Real-time logs of access and transactions
🚨 Anomaly detection
Alerts on suspicious patterns
⚡ Incident response plan
Documented procedures for security events
🔔 Breach notification
Members notified within 72 hours of confirmed breaches
Limitations
Despite our security measures, no system is 100% secure. Risks include:
🚫 Sophisticated hacking
🚫 Insider threats
🚫 Zero-day exploits
🚫 Supply chain attacks
🚫 Third-party service compromises
We maintain cyber liability insurance and follow industry best practices to minimize these risks.
🌐 Third-Party Services
We use external services to provide platform functionality. These vendors process your data under their own privacy policies.
Authentication & Identity
🔐 Google OAuth
Optional login method
Email, name, Google ID
🔑 Coinbase OnchainKit
Wallet connection, SIWE
Wallet address
🔄 Reown AppKit
Multi-wallet support
Wallet address, chain ID
Email & Communication
📧 AWS SES
Transaction emails (notifications, confirmations)
Email address, subject, content
💬 Discord (optional)
Community channels, announcements
Discord username, messages
Blockchain & Web3
⛓️ Base (Ethereum L2)
Smart contract execution, token minting, voting
Wallet address, transaction data (permanently public)
🔌 Block explorers
Transaction verification (Basescan)
All on-chain activity (permanently public)
💱 DEX services
Optional token trading (user-initiated)
Wallet address, amounts (public on blockchain)
Payment Processing
🏦 Stripe or similar
Fiat on/off ramps (investor tier)
Payment info (processed by third party, not stored by us)
💳 Bank transfers
Wire transfers for investments
KYC info, investment amount
Important: We do NOT store credit card or bank account numbers. Payment processors handle sensitive financial data under their own security.
Analytics & Monitoring
📊 Sentry
Error tracking, debugging
Error logs, stack traces (no PII unless included)
📈 Mixpanel or similar
Platform analytics, feature usage
Anonymized usage data, feature interactions
KYC/AML Verification
🆔 Third-party KYC provider
Identity verification for investors/renters
Name, ID, address, photos
Note: KYC providers are regulated entities with legal obligations to protect your information.
Data Processor Agreements
All third-party vendors sign Data Processing Agreements (DPAs) that:
📋 Limit data use to contracted services only
🔐 Require equivalent security standards
📍 Restrict data location to US
🚨 Mandate breach notification
🔑 Allow audits of their practices
Your Third-Party Rights
You can:
📧 Contact vendors directly with privacy requests
🗑️ Request data deletion from integrated services
📋 Review vendor policies before using features
❌ Decline optional services (e.g., Discord integration)
🍪 Cookies, Local Storage & Tokens
The platform uses browser storage to enhance functionality and security.
Session Management
🔐 Session token
Keep you logged in
Browser session (cleared on logout)
🔑 Auth cookie
Authentication persistence
30 days or logout
📋 CSRF token
Prevent cross-site attacks
Session duration
User Preferences
🎨 UI preferences
Dark mode, sidebar state, language
Until cleared
🔔 Notification settings
Email frequency, SMS opt-out
Until changed
💾 Draft saves
Incomplete proposals, form data
Until submission
Analytics
📊 Analytics ID
Unique visitor tracking for aggregate metrics
2 years
🔗 Referrer tracking
Where you came from
Session
Wallet & Blockchain
💳 Wallet address
Remember your connected wallet
Browser session or until cleared
🔌 Network preference
Which blockchain you're using
Until changed
Your Cookie Control
You can:
🚫 Disable cookies in browser settings (may break functionality)
🗑️ Clear cookies anytime (will log you out)
🔓 Block third-party cookies (prevents some integrations)
📱 Use private browsing (no persistent storage)
Note: Some cookies are essential for security and cannot be disabled without breaking the platform.
localStorage & IndexedDB
The app may use browser storage for:
🔑 Wallet connection state
Remember wallet choice
📊 UI state
Sidebar, modals, panels
💾 Offline caching
Load platform without network
You can clear this data in browser DevTools → Application tab.
💬 Communication Preferences
You control how we contact you.
Opt-In Consent
During onboarding, you explicitly choose communication channels:
All, essential only, none
📱 SMS
All, essential only, none
💬 Discord
Join community, decline
🔔 In-app notifications
All, essential only, none
Email Categories
We send emails in these categories:
🔐 Security
As needed
❌ No (essential)
📋 Account
As needed
❌ No (essential)
💼 Task assigned
When matched
✅ Yes
💰 Payment received
When paid
✅ Yes
🗳️ Governance
Per proposal
✅ Yes
📢 Community
Weekly digest
✅ Yes
📰 Marketing
Monthly newsletter
✅ Yes
Unsubscribe & Manage Preferences
You can:
📋 Update preferences in app settings → Communications
🔗 Click unsubscribe links in any email
📧 Email [email protected] to modify preferences
🚫 Request removal from all non-essential lists
Changes take effect within 24 hours.
Discord & Community Channels
Discord is optional and run by Discord Inc., not Built By DAO:
📋 Consent required to join community channels
🔐 Discord privacy policy governs Discord data
🚫 You can leave anytime
📊 Channel activity visible to members only
We do NOT harvest Discord data without explicit consent.
Media Consent (Photos & Likeness)
You control use of your image:
✅ Photo consent granted
Can appear in group photos for docs, social, announcements
❌ Photo consent declined
Excluded from photos, blurred, or not included
✅ Named likeness consent
Name/likeness can be used in promotion materials
❌ Named likeness declined
Only identified as "community member"
Consent Changes
You can update consent preferences anytime:
📱 In app
My Profile → Privacy & Consent
[email protected] with preferred settings
📋 In writing
Mail to registered office (see contact info)
Changes apply to future communications only. Past uses remain valid.
⛓️ On-Chain Data Transparency
Some of your data is permanently recorded on the Base blockchain and cannot be deleted.
What Goes On-Chain
💳 Wallet address
Public
Permanent
💎 Token balances
Public
Permanent (history visible)
🗳️ Governance votes
Public
Permanent
🎫 NFT ownership
Public (address is pseudonymous)
Permanent
📝 Proposals
Public
Permanent
💰 Transactions
Public
Permanent
Pseudonymity vs. Privacy
On-chain data is pseudonymous, not anonymous:
Your wallet address is a string like
0x1234...abcdA blockchain analyst can link your address to your identity
DAO members know your address and can view your vote history
Block explorers (Basescan) make transactions searchable
Consequence: Once you connect your wallet to your Built By DAO identity, your voting and transaction history becomes linkable to you.
Data You Cannot Delete
These on-chain records are immutable:
🗳️ Every vote you've cast
💰 Every transaction you've made
🎫 NFTs you've received or transferred
📝 Proposals you've submitted
🏘️ Properties your address holds equity in
You cannot ask the blockchain to "forget" you. This is fundamental to blockchain technology.
Linking Your Wallet
When you:
Complete onboarding and connect your wallet
Reveal your wallet address in the app
Receive onboarding email to your address
Sign governance transactions
Your wallet address becomes linkable to your identity. Consider:
🧠 Use a dedicated wallet for DAO activity if privacy matters
🔒 Don't reuse wallets with personal identifying info
🔍 Assume link analysis will connect your address to you
📊 Plan for permanent record of your votes and contributions
Public Query Rights
Because governance data is on-chain, anyone can query:
Your total EQTBLT balance
Your voting history (wallet address + vote choice)
Your rank and membership status
Properties you own equity in
Investment amounts (investor tier)
This is by design—governance transparency requires public records. To verify: visit Basescan.org and search your wallet address.
Off-Chain Data Still Private
Data NOT on the blockchain remains confidential:
🔐 Email address
📱 Phone number
🏠 Physical address (not for blockchain analysis)
💬 Internal messages
📋 Performance reviews
💰 Bank account details (for payment processing)
Only on-chain data is publicly queryable.
👤 Your Privacy Rights
You have specific legal rights regarding your personal data.
Right to Access
You can request all data we hold about you.
📋 Access request
Email [email protected] with "Data Access Request"
⏱️ Timeline
Response within 30 days
📑 Format
Receive data in machine-readable format (CSV, JSON, XML)
🆓 Cost
Free (one request per year)
Right to Correction
You can correct inaccurate data.
✏️ Update profile
Change name, email, location in app settings
📧 Correct records
Email [email protected] with corrections
⏱️ Timeline
Update immediately (or within 30 days if disputed)
Right to Deletion
You can request data deletion (with limits).
📧 Email address
✅
Not needed after account closure
📱 Phone number
✅
Not needed after account closure
📍 Location
✅
Can be removed from public profile
🔨 Task history
❌
Permanent record for rank/contribution proof
💎 EQTBLT earned
❌
Represents ownership, cannot be erased
🗳️ Governance votes
❌
On-chain, immutable by design
🎫 Membership NFT
❌
Proof of membership, cannot be deleted
📋 Legal records
❌
Required for compliance (7 year retention)
Note: We cannot delete on-chain data. It's permanent on the blockchain.
Right to Data Portability
You can request your data in portable format.
📊 All personal data
CSV, JSON
Import to another service
💾 Transaction history
CSV
Download for tax purposes
📈 Contribution records
Portfolio documentation
Email [email protected] to request.
Right to Opt-Out
You can withdraw consent for certain uses.
📧 Marketing emails
Click unsubscribe link or update settings
📱 SMS notifications
Reply "STOP" or update settings
📊 Analytics tracking
Opt-out in privacy settings
💬 Discord integration
Don't join community channel
📸 Photo/likeness use
Update consent in My Profile
Cannot opt-out of:
Security communications (essential)
Legal compliance data retention
On-chain governance records
Right to Complaint
You can file a complaint with regulators.
If you believe we've violated your privacy rights:
🇪🇺 GDPR Authority
If applicable
Your member state's DPA
How to Exercise Your Rights
For any privacy request:
[email protected] (include "Privacy Request" in subject)
📋 Include
Your name, email, wallet address, specific request
⏱️ Timeline
Response within 30 days
We will verify your identity before processing sensitive requests.
No Discrimination
We will NOT:
🚫 Deny service for privacy requests
🚫 Charge extra fees for exercising rights
🚫 Degrade service quality
🚫 Retaliate against requests
Your privacy rights come without penalty.
📋 How Long We Keep Data
We retain data only as long as necessary for the stated purposes.
Active Member Data
While you're an active member:
📋 Profile info
Duration of membership + 30 days after departure
🔨 Task history
Permanent (proof of contribution)
💎 EQTBLT earned
Permanent (represents ownership)
🗳️ Governance votes
Permanent (on-chain immutable)
💬 Communications
Duration of membership + 30 days
After You Leave
If you depart the DAO:
👤 Personal info
30 days
Account shutdown, data deletion requests
🔨 Contribution history
Permanent
Proof of work for references
💎 EQTBLT
Permanent
You retain ownership
📋 Legal records
7 years
Tax, compliance, audit
🔐 Security logs
1 year
Fraud investigation
Investor & Financial Data
Special retention for compliance:
💰 Investment records
7 years
Tax law (IRS requirement)
🆔 KYC information
5 years + 7 years after termination
FinCEN, AML regulations
💳 Payment records
7 years
Tax documentation
📋 Agreements
7 years
Legal compliance
Automatic Deletion
After retention periods end:
📧 Email addresses deleted
📱 Phone numbers deleted
🔐 Password hashes deleted
🍪 Cookies and tokens cleared
Permanent Records
These cannot be deleted:
⛓️ On-chain blockchain data
🎖️ Your rank and title history
🗳️ Governance participation record
💎 EQTBLT balance and history
Data Deletion Request
You can request earlier deletion of non-essential data:
Email [email protected] with:
Your name and wallet address
Specific data to delete
Reason for request
We'll delete non-essential data within 30 days if legal obligations allow.
Backups & Archival
Note: Data may persist in:
🔄 Database backups (retained 90 days)
📊 Archival systems (for regulatory compliance)
💾 Disaster recovery copies
These follow the same retention schedules but may take longer to purge.
👶 Children's Privacy
Built By DAO is not intended for children.
Age Requirement
✅ Minimum age
Must be 18+ to join
🔐 Age verification
Verified during KYC (investors) or onboarding
🚫 No minors
We do not knowingly collect data from children under 13
For Parents/Guardians
If your child under 18 creates an account:
📧 Contact us immediately at [email protected]
📋 Provide proof that you are the guardian
🗑️ Request deletion of all data
We will delete the account and data within 30 days.
COPPA Compliance (USA)
For users under 13 in the USA:
🚫 We do not collect personal information
🚫 We do not create tracking profiles
🚫 We do not use targeting or cookies
This complies with the Children's Online Privacy Protection Act (COPPA).
Teen Users (13-17)
Built By DAO is designed for adults. Teens should:
📧 Ask a parent or guardian before joining
🔒 Understand blockchain data is permanent
⚠️ Recognize this is not a social network
Parents can request account deletion at any time.
📝 Policy Changes & Updates
This policy may change as the DAO evolves. We notify members of significant changes.
How We Update Policy
When the policy changes:
🟢 Clarifications
Updated quietly, no action needed
🟡 Minor changes
Email notification, 14-day notice
🔴 Major changes
Email + in-app notice, 30-day notice, consent re-required
Example major changes: New data sharing, retention policy overhaul, new purposes.
What "Significant" Means
You'll receive notice for changes that:
Expand data collection beyond originally disclosed
Change how we use existing data
Share data with new third parties
Reduce your privacy protections
Affect payment/housing data
You will NOT get notice for:
Security updates or improvements
Typo fixes or clarifications
Changes that increase privacy protection
Your Options When Policy Changes
If we make a major change and you disagree:
📋 Review new policy (30-day notice period)
❌ Reject the change by contacting [email protected]
🗑️ Request account deletion if unwilling to continue
Continued use of the platform after the notice period constitutes acceptance.
Version History
1.0
2025-02-23
Initial policy
See header of this document for Last Updated date.
Policy Archive
Previous versions of this policy are available at:
Email: [email protected] with "Privacy Policy Archive" in subject
We maintain version history for 7 years.
⚠️ Critical: Blockchain Data is Permanent
When you interact with Built By DAO governance and tokens on Base blockchain:
🔗 Your wallet address is linked to you forever
🗳️ Every vote you cast is recorded permanently on the blockchain
💎 Your EQTBLT holdings and history are publicly viewable
📊 Anyone can analyze transaction data to identify you
You cannot delete on-chain data. Design your privacy approach accordingly:
Use a dedicated wallet for DAO activity
Understand your address may be deanonymized through analysis
Plan for permanent records of your governance participation
Review Governance documentation for details on public voting records
🔐 Sensitive Data Handling
What We NEVER Do
We explicitly do NOT:
🚫 Store passwords in plain text
Hashed with bcrypt + salt
🚫 Store credit card numbers
Third-party payment processors
🚫 Store API keys in databases
Managed separately via secrets vault
🚫 Log sensitive data
Redacted from logs automatically
🚫 Email passwords
Password reset links only
🚫 Share data with ad networks
No behavioral advertising
🚫 Sell member lists
Data is for DAO operations only
Wallet Private Keys
IMPORTANT: We NEVER have access to your wallet private keys.
🔐 You own and control your private keys
💾 Keys are stored on your device, not our servers
🚫 We cannot access, recover, or reset your keys
🔄 If you lose keys, the wallet is permanently inaccessible
Protect your private keys like you would protect your house keys. We cannot help if they're stolen or lost.
🇺🇸 Geographic & Regulatory Notes
Jurisdiction
Built By DAO is a Wyoming DAO LLC. This policy is governed by:
Wyoming law (primary)
Federal law (USA laws apply)
Base blockchain (Ethereum L2, decentralized)
For EU Residents (GDPR)
If you're in the EU, you have additional rights under GDPR:
📋 Right to access (as described above)
✏️ Right to rectification
🗑️ Right to erasure ("right to be forgotten")
⚠️ Right to restrict processing
📤 Right to data portability
🚫 Right to object
🤖 Right regarding automated decision-making
Note: On-chain blockchain data falls outside GDPR erasure rights (immutable by design). For questions: [email protected]
For California Residents (CCPA)
California Consumer Privacy Act rights:
📋 Know: Request what data we hold
🗑️ Delete: Request data deletion (with legal exceptions)
⚠️ Opt-out: Decline sales of personal information (we don't sell)
📋 Know recipients: Learn who we share data with
Contact: [email protected] for CCPA requests.
For Wyoming Residents
Wyoming has no state privacy law equivalent to CCPA/GDPR, but Wyoming DAO LLC structure provides statutory liability protection.
📞 Contact Information
Privacy Inquiries
Email: [email protected]
Address: Built By DAO LLC Registered Office: [Wyoming registered address]
Response Time: 30 days for formal requests
Other Legal Contacts
🔒 Data security issues
⚖️ Legal questions
💼 Compliance questions
🆘 General support
Report a Privacy Violation
If you believe we've violated your privacy:
📧 Email [email protected] with:
Description of violation
Date it occurred
Data affected
What you'd like corrected
⏱️ Timeline: We respond within 30 days
🔍 Investigation: We investigate and remediate
💬 Communication: You receive status updates
Escalation
If unsatisfied with our response:
📋 File complaint with Wyoming Attorney General
🇪🇺 GDPR complaint (if EU resident) with your data protection authority
⚖️ Legal action under applicable law
🔒 Privacy Summary
📊 We collect data to operate the platform and track contributions
🔐 Data is encrypted and protected with industry standards
⛓️ Governance and token data lives permanently on blockchain
👥 You have rights to access, correct, and delete personal data
🚫 On-chain data cannot be deleted (fundamental to blockchain)
💬 You control communication preferences and consent
📋 We comply with Wyoming law and applicable regulations
Questions? Email [email protected]
🔗 Related Pages
⚖️LegalNDA & IP AssignmentCompliance🎯Member OnboardingKYC & Compliance💻Overview🗳️Overview🪙OverviewLast updated