XBR PROTOCOL PRIVACY POLICY

ANY SIGNIFICANT MODIFICATIONS TO PRIVACY WILL BE INCLUDED IN AN UPDATED PRIVACY POLICY

This Privacy Policy outlines the data collection, usage, and sharing practices of XBR FOUNDATION LAB. (referred to as "XBR Protocol Labs", "the Company", "we", "us", or "our") in relation to the X BULL RUN WEB APP (app.xbullrun.org), www.xbullrun.org website, and all other properties, products, and services provided by us (collectively referred to as "the Services"). The utilization of the Services is bound by this Policy in addition to our Terms of Service.

o XBR FOUNDATION LAB, an unregistered web-based entity, functions as a decentralized protocol within the realm of Web3, leveraging blockchain technology to facilitate transparent, secure, and efficient interactions across the global digital landscape. It operates many services but not limited, including https://app.xbullrun.org/. The XBR Foundation Lab adheres to all applicable rules and regulations in accordance with the jurisdiction of its users.

o THE X BULL RUN PROTOCOL consists of a collection of smart contracts that are resistant to censorship. These contracts are deployed on the Polygon MATIC blockchain as well as on different Layer 1 and Layer 2 services such as 1inch router and others. XBR Foundation Lab does not govern it.

o THE XBR FOUNDATION LAB refrains from gathering and retaining personal information, including but not limited to first name, last name, street address, date of birth, email address, and IP address, in relation to your utilization of the Services.

o THE XBR FOUNDATION LAB gathers non-identifiable data, including publicly available on-chain data, as well as a restricted amount of off-chain data such as device type and browser version. The purpose of this is to enhance the application, rather than monitor or trace users.

o If you opt to subscribe to our email list, we will retain your email address for the purpose of sending you the requested emails. It is possible to cancel your subscription at any given moment. We will refrain from establishing a connection between your email address and your wallet address, IP address, or any other personal information.

o THE XBR FOUNDATION LAB is actively researching several strategies to enhance consumer privacy, including implementing opt-out prompts, transitioning to privacy-focused tools, and utilizing proxies to anonymize network data. Users have the ability to investigate client-side privacy methods and tools.

Privacy is of the utmost importance to the organization in all of its activities. In addition, we have made transparency one of the core values that we uphold as a Foundation. It is for this reason that we strive to be open and honest about the limited amount of data that we do gather. In addition, we do not collect and retain any personal information, such as your name or internet protocol (IP) address, and we do not save user accounts. Only the following information is collected from you when you interact with the Services:

o Information from local storage, mobile device ID, cookies, web beacons, and other comparable technologies may be accessed and gathered by us and our third-party service providers in order to provide and personalize the Services and their features for you across sessions. This information could be utilized, for instance, to recall tokens that you import, star, or add to your purchasing bag. Additionally, we may utilize this data to gain insights into your preferences, service usage, and our interactions with you. The data obtained from these technologies may consist of browser type, referring/exit pages, operating system, language of the device or browser, and additional device-specific information. We compile and perform a collective analysis of these user journeys in order to enhance the overall user experience of our products.

o Our service providers may provide us with information regarding the address of your wallet or transactions conducted via the Services. This is done to ensure that we adhere to our legal responsibilities and to prevent the misuse of our Services for fraudulent or unlawful purposes.

o We collect and log your publicly-accessible blockchain address when you link your non-custodial blockchain wallet to the Services in order to gain insight into your usage of the Platform and to verify whether your wallet has been involved in any previous fraudulent activities. We examine your wallet utilizing the intelligence of the industry's foremost blockchain analytics providers. It should be noted that blockchain addresses are data that is accessible to the public and were not generated or assigned by any central entity, including ourselves. Consequently, they do not possess the ability to identify individuals.

o Your responses to surveys and questionnaires, as well as any communications and information you provide directly to us via social media, customer support, email, or another support channel (e.g., X or Discord, Telegram), will be retained.

As required by law and in accordance with your instructions, including any applicable provisions in our provisions of Service, we utilize the data we collect. Data may also be utilized for the subsequent objectives:

o We may utilize information to prevent, investigate, and halt unlawful, fraudulent, or unauthorized activity. Additionally, it may be employed to mitigate security risks, resolve prospective security concerns like bugs, enforce contractual obligations, safeguard both users and X Bull Run Foundation Lab.

o As required or requested by regulatory bodies, government agencies, law enforcement, or regulatory bodies, we reserve the right to utilize the information that we gather in accordance with relevant legislation and regulations.

o We may compile aggregated data from a subset of the information we collect or access in order to gain a better understanding of how users interact with the services and identify areas for experience enhancement.

o The information we gather is utilized to deliver, maintain, tailor, and enhance our services and their components. We may utilize the information in order to respond to inquiries and provide customer service regarding the Services.

We have the option to share or reveal the data we gather but your information is not shared with any third parties for any marketing reasons whatsoever:

o Your data may be disclosed during legal processes, regulatory actions, compliance efforts, or when legally required by a subpoena, court order, or other legal process. In certain circumstances, we may disclose information if we deem it essential to safeguard the well-being of our users, our organization, or third parties, as well as to uphold our contractual obligations and policies, such as our Terms of Service.

o We may disclose data in order to prevent, investigate, and halt fraudulent, unauthorized, or unlawful activities. Additionally, we can utilize it to mitigate security vulnerabilities, resolve prospective security concerns such as software defects, uphold our contractual obligations, and safeguard the interests of our users, organization, and platform.

o We may disclose your information to our service providers and contractors to aid us in the provision, delivery, and enhancement of the Services. As an illustration, we might disclose your wallet address to 3rd party service providers for the purpose of offering technical infrastructure services. Additionally, we may share your wallet address with blockchain analytics providers to identify, prevent, and alleviate financial misconduct and other unlawful or detrimental activities. Furthermore, we may provide our analytics provider with information about your engagement with us and our Services on our social media platforms to gain a better understanding of how you interact with us.

o In the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset, or other business transaction, we have the possibility to transfer or exchange data with another corporation. Your information may be shared with others if you give us your agreement to do so at any given time.

We gather data about your use of the Services and our interactions with you through the use of services offered by Google and other third parties that employ tracking technologies including cookies, device ID, and local Storage. You have the choice to refuse these third-party services' collection of your device data and online activities by doing the following:

o By following the directions in your browser's settings, you can block cookies. Visit www.allaboutcookies.org for more details on cookies, including how to see, manage, and remove them from your device.

o Use the device settings to restrict or block the use of your advertising ID on a mobile device.

o Third-party cookies and trackers can be blocked by configuring specific browsers and browser extensions.

Parts of the Services may incorporate technologies run or owned by third parties. For instance, the Services can contain hyperlinks to other platforms, websites, and services that are not run or under our control. Please be aware that these third parties may independently gather information about you and request information from you when you interact with them, including after you leave the site. Consult their privacy policies and other agreements to find out more about how those parties gather and handle your data.

To assist prevent data loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction, we adopt and maintain appropriate administrative, physical, and technical security measures. However, we are unable to guarantee the security of the information we transmit about you because communication over the internet is not entirely secure. Your actions on the Services are entirely your responsibility, including safeguarding your wallets, blockchain network addresses, and cryptographic keys.

The Services are not meant for children; rather, they are meant for a wider audience. We do not intentionally obtain personal information from minors, as that term is defined under the Children's Privacy Protection Act of the United States, or "COPPA." Please email us at [e-mail] if you think we may have obtained personal information about a minor.

The California Consumer Privacy Act of 2018, also known as CCPA, mandates that specific businesses must furnish a CCPA Notice to individuals residing in California. This notice is intended to elucidate the methods by which we gather, employ, and distribute their personal data, as well as the privileges and alternatives we extend to California residents concerning the management of their information.

o To initiate a request for information, access, or deletion, please send an email to [e-mail].

o Pursuant to the CCPA, we are obligated to gather and authenticate the identity of any person making a request to obtain or erase personal data prior to furnishing a substantial reply.

o We do not engage in the commercial exchange of personal information as defined by the California Consumer Privacy Act (CCPA). Please refer to the "Sharing and Disclosure of Information" section above for more information regarding the specific groups of individuals or organizations with whom we exchange information.

o The CCPA grants individuals the privilege to solicit details regarding the acquisition, utilization, and dissemination of their personal information. Additionally, it grants you the privilege to seek a duplicate of any data that we may possess regarding your person. You have the option to request the deletion of any personal information that we may have obtained regarding you. It is important to understand that the CCPA imposes restrictions on these rights. For instance, it prohibits us from disclosing some sensitive information when responding to access requests and restricts the situations in which we are required to comply with a deletion request. We will only fulfill requests for information, access, and deletion if we can reasonably link the information we have with the identifying details you provide. In the event that we decline the request, we will promptly inform you of our decision. You have the right to freely exercise the aforementioned rights without any kind of discrimination.

o Residents of California have the ability to appoint a "authorized agent" to make petitions on their behalf. A written authorization certifying their authority will be necessary for the authorized agent.

If you wish to exercise any of your rights under the General Data Protection Regulation (GDPR), kindly reach out to us at [e-mail]. Further information may be necessary in order to proceed with your request. Kindly be aware that we may keep information as required to achieve the intended purpose for which it was gathered, and we may continue to do so even after receiving a request from a data subject, in accordance with our lawful interests. This includes fulfilling our legal obligations, settling disputes, preventing fraud, and enforcing our agreements.

For the reasons listed in the above section labeled "Our Use of Data," we process personal data. Our legal justifications for processing your data are as follows:

(i) you have consented to the processing to be carried out by us or our service providers for one or more specific purposes;

(ii) processing is required to fulfill a contract with you;

(iii) processing is required to comply with legal requirements; and/or

(iv) processing is required to further legitimate interests that we or a third party are pursuing, provided that your interests and fundamental freedoms do not conflict with those interests.

The General Data Protection Regulations ("GDPR") grant individuals the following rights:

(i) the ability to request access to and obtain a copy of their personal data;

(ii) the ability to request rectification or erasure of their personal data;

(iii) the ability to object to or restrict the processing of their personal data; and

(iv) the ability to request portability of their personal data. Furthermore, at any time, you have the option to revoke your consent to our collection. However, it is not possible to modify or remove data that is stored on a specific blockchain. Information beyond our control, including transaction data, blockchain wallet address, and assets held by your address, may be associated with the data we collect.

You will be notified through the Services in the event that we make significant modifications to this Policy. Nevertheless, the fact that you continue to use the Services demonstrates that you have reviewed this Policy and other conditions of the Foundation on a regular basis, and it also implies that you agree to be bound by them.

Please do not hesitate to get in touch with us at [e-mail] if you have any inquiries regarding this Policy or the manner in which we collect, utilize, or disclose your information.