Privacy Policy
Last updated: 6 April 2026
1. Who we are
GivChain is a decentralised charitable donation platform built on the XRP Ledger. We facilitate wallet-to-wallet donations between donors and verified UK charities with just 0.5% platform fees.
Website: www.givchain.io
2. What data we collect
Account data
- XRPL wallet address (your unique identifier)
- Display name and email address
- Postcode (optional, for Gift Aid purposes)
Donation data
- Donation amounts (GBP and crypto)
- Campaign and charity associations
- XRPL transaction hashes and timestamps
- Gift Aid declarations
Technical data
- IP address, browser type, and device information (collected via Sentry for error tracking only)
3. What we do NOT collect
- Credit card or bank account details
- Wallet private keys or seed phrases
- Health or biometric data
- Social media account credentials
4. How we use your data
- Process and display donations on campaign pages
- Generate Gift Aid declarations for HMRC (charity campaigns only)
- Send email notifications (welcome, donation confirmations, campaign updates)
- Display your donation history on your dashboard
- Error tracking and platform improvement
5. On-chain vs off-chain data
Off-chain (our database): Personal information (name, email, postcode) is stored in an encrypted PostgreSQL database hosted by Neon in the EU region. This data can be deleted on request.
On-chain (XRP Ledger): Transaction data (wallet addresses, amounts, timestamps) is recorded on the public XRP Ledger. On-chain data is pseudonymous (identified by wallet address only) and is immutable — it cannot be deleted. On-chain records contain no personally identifiable information.
6. Data sharing
We do not sell or share personal data with third parties for marketing purposes.
We share data with the following service providers, solely for platform operation:
- Resend — email delivery
- Sentry — error tracking and monitoring
- Vercel — web application hosting
- Neon — database hosting (EU region)
- Railway — API server hosting
For charity campaigns, your display name may be visible on the campaign page unless you choose to donate anonymously. Gift Aid declarations are submitted to HMRC on behalf of the charity.
7. Data retention
- Account data: retained while your account is active. Deleted on request.
- Donation records: retained for 6 years (HMRC Gift Aid compliance requirement).
- Email logs: retained for 30 days.
- Error logs: retained for 90 days (Sentry).
8. Your rights (UK GDPR)
Under UK data protection law, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your off-chain personal data
- Data portability (receive your data in a machine-readable format)
- Object to processing
- Withdraw consent at any time
To exercise these rights, contact us at privacy@givchain.io.
9. Cookies and local storage
GivChain uses essential local storage only — authentication tokens and wallet connection state. We do not use tracking cookies, analytics cookies, or advertising cookies. No cookie consent banner is required.
10. Children
GivChain is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
11. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.
12. Contact
Email: privacy@givchain.io
Data Controller: GivChain (company details pending incorporation).