1. Personal Information We Process
We may process the following information when you create an account and use the service.
- Google and Privy authentication identifiers and your verified email address
- Nickname, Embedded Wallet address, and blockchain network identifiers
- Fan verification participation and results, and Fan Passport and Stamp issuance and status information
- LIVE reservations, attendance, and survey participation information
- Benefit application, receipt, and usage status, and notification settings and subscription information
- Access logs, errors, and security events generated while you use the service
2. Purposes of Processing
- Identifying members, maintaining login sessions, and protecting accounts
- Providing fan verification, issuing Passports and Stamps, and confirming ownership
- Providing LIVE reservations, attendance, surveys, and benefits
- Sending notifications, responding to inquiries, and improving service quality
- Preventing misuse, responding to security incidents, and complying with legal obligations
3. Retention and Use Period
We retain personal information for as long as necessary to provide the service and maintain your account. We delete it without undue delay when the purpose of processing has been fulfilled or when you request deletion. If applicable laws require retention for a certain period, or if information is needed to resolve a dispute or respond to a security incident, we may store it separately for the scope and period necessary for that purpose.
4. Use of External Services
We use Google and Privy authentication and wallet services to provide login and Embedded Wallet functionality. Each provider may process identifiers and technical information required for authentication under its own policies. We do not sell personal information beyond what is necessary to provide the service.
5. Your Rights
You may request access to, correction or deletion of, restriction of processing of, or withdrawal of consent for your personal information. You may submit a request using the email address below. After verifying your identity, we will process the request in accordance with applicable laws.
6. Security Measures
We apply technical and administrative measures necessary to protect personal information, including server-side verification of authentication information, role-based access controls, non-public handling of sensitive information, and restricted access to and review of operational records.
7. Contact
For privacy inquiries or requests to exercise your rights, contact the Sallylab Inc. privacy team at biz@sallylab.io.
8. Changes to This Policy
If we revise this Policy because of changes to applicable laws or the service, we will provide notice of the changes and their effective date through the ByUs service before the revised Policy takes effect.