Gojo Privacy Policy

Effective date: May 11, 2025

This Privacy Policy describes how Gojo(“we,” “us,” or “our”) collects, uses, and shares information when you use our platform at gojo.gg (the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect information in three ways:

1.1 Information You Provide Directly

  • Account details (name, email address, username);
  • Shipping addresses for physical card redemption;
  • Identity verification documents (when required for seller verification or compliance);
  • Payment information processed by our payment partners;
  • Communications with us (support emails, dispute messages).

1.2 Information Collected Automatically

  • Device information (browser type, operating system, IP address);
  • Usage data (pages visited, features used, time on page);
  • Blockchain wallet addresses and on-chain transaction data (public by nature);
  • Cookies and similar tracking technologies (see Section 6 below).

1.3 Information from Third Parties

  • Privy: Authentication data when you sign in via email, Apple, Google, or a Web3 wallet;
  • Payment processors: Transaction confirmations and fraud signals;
  • Analytics providers: Aggregated usage statistics;
  • Blockchain networks: On-chain activity associated with your wallet address.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account;
  • Process draw entries, marketplace transactions, and payouts;
  • Ship physical cards to your address;
  • Detect and prevent fraud, abuse, and prohibited conduct;
  • Comply with legal obligations (tax reporting, sanctions screening, law enforcement requests);
  • Improve the Service through analytics and user feedback; and
  • Communicate with you about your account, transactions, and policy updates.

Where required by law (e.g., GDPR), we rely on one or more of the following legal bases: performance of a contract, compliance with a legal obligation, legitimate interests, or your consent.

3. How We Share Your Information

We do not sell your personal information.

We share your information only in the following circumstances:

  • Service providers: Third parties that help us operate the Service (authentication, payments, shipping, analytics), bound by confidentiality obligations;
  • Marketplace counterparties: When you complete a transaction, your shipping address may be shared with the other party as necessary to fulfill the order;
  • Legal requirements: When required by law, court order, or government authority;
  • Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality protections; and
  • With your consent: In any other circumstances where you have given explicit permission.

4. Data Retention

We retain your data for as long as necessary to provide the Service and comply with our legal obligations:

  • Account information: duration of account plus a reasonable post-closure period;
  • Transaction records: minimum seven years for tax and legal compliance;
  • Communications: up to three years;
  • Analytics data: up to 26 months in aggregated or pseudonymized form.

After applicable retention periods, data is securely deleted or anonymized.

5. Your Rights & Choices

5.1 All Users

You may at any time:

  • Access and update your account information in Settings;
  • Request deletion of your account by contacting support@gojo.gg;
  • Opt out of marketing emails via the unsubscribe link.

5.2 EEA & UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights including: access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. To exercise these rights, contact support@gojo.gg.

5.3 California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of any sale or sharing of personal information. We do not sell personal information. To submit a request, contact support@gojo.gg. We will not discriminate against you for exercising these rights.

6. Cookies & Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and analyze Service usage. You can control cookie settings through your browser, though disabling certain cookies may affect Service functionality.

We use analytics tools to understand how users interact with the Service. These tools may collect pseudonymized data in accordance with their own privacy policies.

7. Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and security monitoring. However, no system is perfectly secure. You are responsible for maintaining the security of your account credentials and wallet.

In the event of a data breach affecting your personal information, we will notify you and applicable authorities as required by law (within 72 hours under GDPR Article 33 where applicable).

8. Children's Privacy

The Service is not directed at or intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at support@gojo.gg and we will delete it promptly.

9. Blockchain & Wallet Data

Wallet addresses and on-chain transactions are publicly visible on the Solana blockchain and are not within our control to delete. By connecting a wallet or transacting on-chain through the Service, you acknowledge that this activity is permanently recorded on the blockchain.

10. International Data Transfers

Your information may be processed in countries outside your own, including the United States. Where we transfer data internationally, we take appropriate steps to ensure adequate protections are in place in accordance with applicable law, including standard contractual clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-Service notice at least 30 days before taking effect. Your continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy inquiries, data deletion requests, or to exercise your rights, contact us at support@gojo.gg.