1. Introduction to Our Privacy Commitment
At SidraChain (sidrachains.cc), your privacy is a fundamental right. In alignment with both the General Data Protection Regulation (GDPR) and the ethical principles of Shariah (Maqashid Shariah), which emphasizes the protection of personal honor and confidentiality, we have developed a protocol that prioritizes data minimization and user sovereignty.
This policy explains how we collect, process, and safeguard the information you provide through the KYC Port and our decentralized ecosystem. By using our services, you consent to the practices described herein.
2. Information We Collect
We collect information necessary to fulfill our legal obligations and to provide a secure Shariah-compliant financial environment.
2.1 Personally Identifiable Information (PII)
During the KYC (Know Your Customer) process, we collect:
- Full Legal Name and Date of Birth.
- Government-issued Identification (Passports, National IDs).
- Contact Information (Email Address and Phone Number).
- Biometric Data (Facial Recognition patterns for P2P validation).
2.2 Technical and Blockchain Data
As a decentralized network, we also record:
- Public Wallet Addresses.
- Decentralized Identifiers (DIDs).
- Transaction Metadata (timestamps, gas usage, etc.).
- Device Information (IP addresses, browser types, and operating systems).
3. How We Use Your Data
Your data is used exclusively for the following purposes:
- Identity Verification: To ensure every account belongs to a unique human user, preventing bot manipulation.
- Compliance: To satisfy Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) requirements.
- P2P Validation: To facilitate the peer-based trust network required for Mainnet migration.
- Ecosystem Security: To detect, prevent, and mitigate fraudulent or illegal activities.
4. Data Storage and Security
4.1 Decentralized Storage: Whenever possible, SidraChain utilizes decentralized storage solutions. This means that while a cryptographic hash of your verification status exists on the blockchain, your sensitive PII is stored in encrypted off-chain "Identity Vaults" that only you can unlock with your private keys.
4.2 Military-Grade Encryption: All data transmitted to the KYC Port is protected by Transport Layer Security (TLS 1.3) and AES-256 encryption at rest.
5. Sharing of Information
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share information with:
- Regulatory Authorities: When legally compelled to do so by a court order or official government request.
- Service Providers: Verified third-party KYC providers who are bound by strict confidentiality agreements.
- Binance & Partners: During the 2026 listing phase, anonymized validation proofs may be shared with exchanges to confirm the legitimacy of our circulating supply.
6. Your Rights (GDPR & Global Standards)
Under modern 2026 privacy laws, you have the following rights:
- The Right to Access: You can request a copy of the data we hold about you.
- The Right to Rectification: You can correct any inaccurate information in your profile.
- The Right to Erasure ("Right to be Forgotten"): You may request the deletion of your account, though blockchain records (hashes) are immutable by nature.
- The Right to Data Portability: You can export your DID and credentials to other compatible web3 platforms.
7. Shariah-Compliant Ethical Use
In accordance with Islamic ethics, we believe that "The secret of a Muslim is sacred." We pledge to never use your data to facilitate interest-based marketing or to profile users for any activity deemed "Haram" or harmful to the community (Ummah).
8. Cookies and Tracking
We use minimal functional cookies to maintain your session in the login.html area. We do not use cross-site tracking or third-party advertising pixels.
9. Changes to This Policy
The SidraChain Foundation reserves the right to update this policy as the 2026 roadmap evolves. Users will be notified via the SidraNews portal of any significant changes.