Privacy Policy
Last updated: December 15, 2024
This Privacy Policy describes how Aave ("we," "our," or "us") collects, uses, and protects your personal information when you use our decentralized finance platform and related services.
Information We Collect
Personal Information
We may collect the following types of personal information:
- Contact information (email address, name) when you subscribe to our newsletter or contact us
- Technical information (IP address, browser type, device information) for platform functionality
- Usage data and analytics to improve our platform performance
- Wallet addresses and transaction data necessary for DeFi protocol operations
Automatically Collected Information
When you interact with our platform, we automatically collect certain information including log data, device information, and usage patterns to ensure optimal platform performance and security.
How We Use Your Information
We use collected information for the following purposes:
- To provide and maintain our DeFi platform services
- To process transactions and ensure protocol functionality
- To communicate with you about platform updates and important notices
- To analyze usage patterns and improve user experience
- To comply with legal obligations and regulatory requirements
- To detect and prevent activities and security threats
Cookies and Tracking Technologies
Our platform uses cookies and similar tracking technologies to enhance your experience:
Essential Cookies
Required for basic platform functionality and security features.
Analytics Cookies
Help us understand how users interact with our platform to improve services.
You can control cookie preferences through your browser settings. However, disabling certain cookies may affect platform functionality.
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:
- With service providers who assist in platform operations under strict confidentiality agreements
- When required by law, regulation, or legal process
- To protect our rights, property, or safety, or that of our users
- In connection with blockchain transactions that are inherently public
- With your explicit consent for specific purposes
Your Rights Under GDPR
If you are a resident of the European Union, you have the following rights regarding your personal data:
Right to Access
Request copies of your personal data and information about how we process it.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data under certain circumstances.
Right to Data Portability
Receive your personal data in a structured, machine-readable format.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication mechanisms
- Secure development practices and code reviews
- Incident response procedures and monitoring systems
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Blockchain transaction data may be permanently recorded on public ledgers and cannot be deleted.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission and adequacy decisions where applicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our platform and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Data Protection Officer
Email: privacy@aave.com
Response time: 30 days
Postal Address
Aave Companies
1 Way, Suite 200
London, EC2A 4BX
United Kingdom
You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.