Privacy Policy

This Privacy Policy explains how Veilon AG (“we,” “us,” or “the Company”), registered at Oberdorfstrasse 12, 8853 Lachen SZ, Switzerland (UID: CHE-258.053.888), collects, uses, stores, and protects information in connection with the BASIS platform at https://launchonbasis.com (the “Platform”).

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

We use the information collected to:

• Operate the Platform — process transactions, maintain accounts, and deliver Platform features.
• Index blockchain data — sync on-chain events to provide real-time data, portfolio views, and leaderboard rankings.
• Calculate points and rewards — determine airdrop allocations and tier progression.
• Detect and prevent abuse — enforce anti-gaming measures, rate limits, and content moderation.
• Provide community features — enable The Reef forum, voting, and social interactions.
• Improve the Platform — analyze usage patterns to enhance features and user experience.
• Ensure security — monitor for suspicious activity, unauthorized access, and potential threats.
• Comply with legal obligations — respond to lawful requests from authorities where required by Swiss law.

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), we process your data based on:

• Contractual necessity — processing required to provide the Platform services you use.
• Legitimate interests — security monitoring, fraud prevention, platform improvement, and anti-gaming enforcement.
• Consent — where you voluntarily provide information (e.g., social links, profile data, Reef posts).
• Legal obligations — where required by Swiss law or applicable regulations.

• Data is stored on secured servers (AWS infrastructure) with encryption in transit and at rest.
• API keys are encrypted with AES-256-GCM.
• The backend indexer processes blockchain data and stores it in a secured MySQL database.
• We implement industry-standard security measures including access controls, monitoring, and regular security reviews.
• Despite these measures, no system is completely secure. You acknowledge the inherent risks of transmitting data over the internet and interacting with blockchain-based systems.

The Platform may use:

• Session cookies — to maintain your authenticated session (SIWE).
• Functional cookies — to remember your preferences and settings.
• Analytics cookies — to understand Platform usage (aggregated data only).

You can manage cookie preferences through your browser settings. Disabling cookies may affect Platform functionality.

• Blockchain data is permanent and immutable by nature. On-chain data cannot be deleted.
• Platform account data is retained as long as your wallet has interacted with the Platform.
• Reef content may be retained even after deletion for moderation and compliance purposes.
• Technical logs (IP addresses, access logs) are retained for a reasonable period for security purposes, typically no longer than 12 months.
• Points and leaderboard data are retained for the duration of the airdrop program and any subsequent reference periods.

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the data we hold about your wallet address.
• Rectification — request correction of inaccurate profile data.
• Deletion — request deletion of off-chain data associated with your wallet (note: on-chain data cannot be deleted).
• Restriction — request limitation of processing in certain circumstances.
• Data portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at the address listed in Section 13. We will respond within 30 days.

Data may be processed in jurisdictions outside Switzerland, including where our cloud infrastructure is located. Where data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses.
• Adequacy decisions recognized by Swiss or EU authorities.
• Other lawful transfer mechanisms under applicable data protection law.

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors. If we become aware that a minor has used the Platform, we will take steps to delete their associated data.

We may update this Privacy Policy from time to time. Changes will be posted on the Platform with a revised “Last Updated” date. Material changes will be communicated through the Platform or other reasonable means. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

For privacy-related inquiries or to exercise your data rights, contact: