DGT 隐私政策 / Privacy Policy

1. 适用范围 / Scope

本政策适用于 dgt-x.io、DGT 账户与钱包登录、预售订单、推荐与奖励功能，以及为维护平台可靠性而运行的后台服务。公开区块链由独立网络运行，链上记录不受 DGT 单方面控制。

This policy applies to dgt-x.io, DGT accounts and wallet sign-in, presale orders, referral and reward features, and the supporting services used to keep the platform reliable. Public blockchains operate independently, and DGT cannot unilaterally alter on-chain records.

2. 我们处理的数据 / Data We Process

• 账户标识：DGT public ID、显示名称、在用户主动提供时的邮箱，以及账户状态。
• 钱包验证：钱包公开地址、链 ID、一次性挑战和签名验证结果。签名仅用于验证地址控制权；私钥始终留在用户钱包中。
• 交易与业务记录：认购档位、订单状态、付款金额、交易哈希、区块确认、推荐关系、奖励与提现记录。
• 安全与运行数据：防滥用、故障排查和审计所需的有限请求、时间、错误和服务日志。

We process account identifiers, public wallet addresses and verification results, order and payment records, referral and reward records, and limited operational or security logs. We do not receive seed phrases or wallet private keys.

3. 使用目的与法律基础 / How and Why We Use Data

我们使用数据来创建和保护账户、确认付款与链上最终性、避免重复入账、提供个人资产及订单视图、执行预售与奖励规则、响应支持请求、检测欺诈与攻击、备份数据库以及履行适用的法律义务。

We use data to create and protect accounts, confirm payments and blockchain finality, prevent duplicate settlement, provide account views, apply presale and reward rules, respond to support, detect abuse, back up the database, and meet applicable legal obligations.

4. Google Drive 备份 / Google Drive Backups

DGT 可使用项目专属 OAuth 客户端和 Google Drive 的 drive.file 权限保存加密数据库备份。该权限仅允许备份工具管理其通过该 OAuth 应用创建的文件，不授予读取用户其他 Drive 文件的权限。备份在上传前使用 Restic 加密，云端按运维保留策略自动清理。

DGT may use a project-specific OAuth client and Google Drive's drive.file scope for encrypted database backups. This scope permits the backup tool to manage only files it creates through that OAuth application, not unrelated Drive content. Backups are encrypted with Restic before upload and removed under the operational retention policy.

5. 共享与处理方 / Sharing and Processors

我们不会出售个人数据。仅在提供基础设施、数据库备份、安全服务或依法响应有效请求所必需时，向受约束的服务提供商或主管机关披露有限数据。交易哈希和钱包地址一旦写入公共区块链，将对公众可见。

We do not sell personal data. Limited data may be handled by infrastructure, encrypted-backup, and security providers, or disclosed when required by a valid legal process. Wallet addresses and transaction hashes recorded on a public blockchain are publicly visible.

6. 保存、安全与恢复 / Retention, Security, and Recovery

数据按业务、审计、安全和法律需要保留；不再需要时将删除或去标识化。DGT 使用访问隔离、最小权限、加密备份、服务健康检查和日志审计等措施。任何系统都无法保证绝对安全，用户也应保护钱包和设备。

Data is retained for operational, audit, security, and legal needs, then deleted or de-identified when no longer required. DGT uses access isolation, least privilege, encrypted backups, health checks, and audit logging. No system can guarantee absolute security, and users must also protect their wallets and devices.

7. 用户选择与权利 / Choices and Rights

在适用法律允许的范围内，用户可以请求访问、更正或删除由 DGT 控制的账户数据，或反对、限制某些处理。公共区块链记录和为防欺诈、审计或履行法律义务必须保留的数据可能无法删除。

Subject to applicable law, users may request access, correction, or deletion of account data controlled by DGT, or object to or restrict certain processing. Public blockchain records and data required for fraud prevention, audit, or legal obligations may not be removable.

8. 联系与变更 / Contact and Changes

隐私请求可通过 DGT 平台公布的支持渠道，或 OAuth 权限请求页面显示的支持联系方式提交。重大变更将在本页更新生效日期，并在适当情况下通过平台提示。

Privacy requests may be submitted through support channels published by DGT or the support contact displayed on the OAuth consent screen. Material changes will update the effective date on this page and, where appropriate, be announced in the platform.