Privacy Policy

1. Who we are and what this policy covers#

Tenfold is a platform that brands and merchants use to run loyalty, rewards, quest, and collectible programs. This policy is published by Goonz LLC, doing business as Tenfold ("Tenfold", "we", "us"), based in New York, United States.

This policy describes how we handle personal information across:

• our marketing website at tenfold.so;
• the Tenfold app, including brand-branded versions of it served on Tenfold subdomains and on custom domains;
• the Tenfold admin portal used by brands and their staff;
• our APIs, our Shopify app, and our Discord integration.

We call the brands and merchants who use Tenfold "Brands." We call the people who participate in a Brand's program "Participants."

Please read Section 3 carefully. It explains a distinction that matters a great deal: for some information we decide what happens to it, and for other information we act only on a Brand's instructions. When we act on a Brand's instructions, that Brand's own privacy notice governs, not this one.

2. Quick summary#

• Brands are responsible for their own loyalty programs, including the program's rules, its lawful basis, its participant-facing privacy notice, and its customer communications.
• We provide the technology that runs those programs, and for that program data we act as a processor or service provider on the Brand's behalf.
• We do control a smaller, important set of information: your Tenfold account, the wallets and social accounts you link to it, our own website and analytics, and our error monitoring.
• Blockchain data is public. We can read it, and we may display it, but we cannot change it or remove it.
• We do not sell personal information as "sell" is defined under California law.
• We use product analytics and a sampled session replay to run and improve the Services. There is no in-product opt-out switch yet — Section 8 explains what does control them today, and describes the consent prompt we are building for visitors from the EEA, the UK, and Switzerland.
• If you want a Brand's program data corrected or deleted, contact that Brand first. We will help them respond.

3. When this policy applies, and when a Brand's policy applies#

3.1 Information Brands control (this policy does not govern it)

When you take part in a Brand's program, the Brand decides what the program is, what earns rewards, what those rewards are, and how long records are kept. We store and process that program information on the Brand's behalf and on the Brand's instructions, which the Brand gives us through its configuration of our product and through its agreement with us.

Program information includes:

• your progress against that Brand's quests and their individual requirements;
• your points, currency balances, and the transaction ledger behind them within that Brand's program;
• badges, VIP tier, leaderboard placement, and streaks within that Brand's program;
• check-ins at that Brand's locations, and digital check-ins in that Brand's program;
• taps of that Brand's physical items and NFC chips;
• item claims, raffle entries, and rewards issued under that Brand's program;
• referral codes, referral leads, and the referrals attributed to that Brand's program;
• social account verifications and Discord role assignments created to satisfy that Brand's requirements;
• store connection and order attribution data for that Brand's commerce integration.

For this information, the Brand is the controller (or, under US state privacy laws, the "business"), and we are the processor (or "service provider"). The Brand's own privacy notice governs it. If you want to know why a program collects something, how long it keeps it, or on what legal basis, ask the Brand.

We do not use Brand program information for our own marketing. We do not sell it. We do not share it with other Brands.

3.2 Information we control (this policy governs it)

We are the controller of:

(a) Your Tenfold account. A Tenfold account can be used across more than one Brand's program. Because of that, the account itself is ours, not any one Brand's. It includes your email address, your username, your profile picture, your bio, your date of birth if you provide one, your phone number if you provide one, the social accounts you link, and the blockchain wallet addresses you link.

If you use a Brand's program without a shared Tenfold account — for example through a Brand-specific sign-in — your account information is scoped to that Brand and the Brand's notice governs more of it. Where the two overlap, both the Brand and Tenfold will hold a view of the same record.

(b) Our marketing website. Pages you view, the section of the site you were in, approximate location inferred from IP address, and the identifiers our analytics tools set.

(c) Demo and sales enquiries. If you book a call with us, we collect the name, email address, and any notes you provide, along with the meeting details.

(d) Brand staff accounts. Names, email addresses, roles and permissions, API key metadata, and an audit log of administrative actions that includes the acting user, the action, the target, a timestamp, and the IP address the action came from.

(e) Our analytics, error monitoring, and security data. Described in Sections 7 and 8.

(f) Support communications. Anything you send us directly.

3.3 Information nobody controls: public blockchain data

Blockchain networks are public. Wallet addresses, token ownership, transfers, mints, burns, and transaction hashes are visible to anyone, permanently, and are not secret.

We read public blockchain data to run the Services — for example to check whether a wallet holds a token a quest requires, to build galleries and leaderboards, and to attribute rewards. We may display wallet addresses, token ownership, and related onchain activity within the Services, including on publicly visible profiles, galleries, and leaderboards.

We cannot alter, reverse, or delete anything recorded on a blockchain. If you ask us to delete your personal information, we can remove it from our own systems, but we cannot remove records from a blockchain, and a wallet address you have used will remain publicly associated with its onchain history. If you link a wallet address to your Tenfold account, be aware that this connects a public, permanent transaction history to your account.

4. What we collect#

4.1 Information you give us

• Account details: email address, username, profile picture, bio.
• Optional profile details: date of birth and phone number. We only ask for these when a Brand's program requires them, or when you choose to add them. We do not require a date of birth to create an account, and we do not use it to verify your age — see Section 12.
• Linked accounts: blockchain wallet addresses, and social accounts you connect or verify (currently Instagram, TikTok, Reddit, and providers offered through our sign-in partner). For social verification we may generate a short-lived code, count verification attempts, and record the username you claimed and the username we confirmed.
• Discord: if you link Discord, your Discord user ID and the servers and roles relevant to a Brand's rules.
• Referral details: if you follow a Brand's referral link and give us your email address to save the offer for later, we store that email address against that Brand's program and send you one branded email with a link back to the offer.
• Content: anything you submit through the Services.
• Sales and support enquiries: what you send us.

4.2 Information we collect automatically

• Device and connection data: IP address, browser and device type, and similar technical details.
• Usage data: pages and screens viewed, features used, and actions taken.
• Location: if a Brand's program includes a location check-in and you grant your browser's location permission, we use your device's location at that moment to confirm you are within the check-in radius. We record the check-in itself. We do not track your location in the background or build a location history.
• Cookies and similar technologies: see Section 8.
• Session replay: a sampled portion of app sessions is recorded by our error-monitoring provider to help us diagnose failures. See Sections 7 and 8.

4.3 Information from physical items and NFC chips

Some Brands ship physical products containing an NFC chip. When you tap one:

• we receive a chip identifier and a one-time code from our chip provider that proves the tap was physically present and recent;
• we may receive a reference to the digital token linked to that chip;
• we create a short-lived, signed proof-of-proximity token so you can complete the action without tapping twice;
• we record the tap event, including whether it succeeded or failed and why;
• if the tap triggers an onchain transfer, we record the resulting transaction reference.

Tap events, one-time-code checks, transfer attempts, and failure states are logged so we can operate the service, prevent replay and fraud, support you when a tap does not work, and keep an accurate record of rewards. We deliberately keep chip API credentials and one-time codes out of our error logs.

4.4 Information from third parties

• Our sign-in and wallet partner passes us the email address, phone number, social credentials, and wallet credentials associated with your login.
• Public blockchains — see Section 3.3.
• Social platforms — public profile and post statistics needed to check a quest requirement you chose to attempt.
• Discord — server membership and role state.
• Commerce platforms — order references used to attribute a reward.
• Brands — information a Brand chooses to import into its program. The Brand is responsible for having the right to give it to us.

4.5 What we do not collect

We do not collect payment card numbers. We do not ask for government identification documents in the ordinary course of the Services. We do not hold your wallet's private keys or seed phrase, and we will never ask for them.

5. Why we use it, and our legal bases#

Where GDPR or UK GDPR applies to processing we control:

Where we act as a processor for a Brand, the Brand determines the purpose and the legal basis.

6. How we share information#

We share personal information with:

• The relevant Brand, for the program you take part in. Brands can see the program data described in Section 3.1 for their own program, and the account information you have chosen to make available to that program. Brands cannot see other Brands' program data.
• Service providers and subprocessors who process on our behalf, by category:

We keep a current, named list of our subprocessors and make it available on request. Brands can request it at founders@10amstudios.xyz, and Participants can ask for it at the same address. We do not publish it as a public page at this time. If we ever do publish one, we will link it from this section.

• Other users, where you make information public. Profiles, galleries, and leaderboards can display your username, profile picture, wallet address, badges, tier, and points within a Brand's program. Some activity records are marked public and appear in program feeds; others are internal only.
• Professional advisers, in confidence.
• Acquirers, in a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply.
• Authorities, where we are legally required to, or where we believe in good faith it is necessary to protect our rights, our users' safety, or the public.

6.1 We do not sell personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act. We have not done so in the preceding twelve months. We do not run advertising or marketing pixels on our website or in our apps.

6.2 Aggregated and de-identified data

We create aggregated and de-identified statistics — for example, how often a feature is used across the platform — and we use them to operate, secure, and improve the Services and to describe the platform generally. This data does not identify you and we do not attempt to re-identify it. We do not sell it.

7. Analytics, error monitoring, and session replay#

We use a product-analytics provider to understand how the Services are used. When you are signed in, we pass it your Tenfold account identifier, your email address, and your username, along with the Brand context you are in. When you sign out, we reset that association.

We use an error-monitoring provider to detect and diagnose failures. It records error details and technical context. It also records a sampled portion of app sessions as a session replay — a reconstruction of what happened on screen — so we can see how an error occurred. Replays are used to fix problems, not to profile you.

When you are signed in, we attach your Tenfold account identifier, your email address, and your username to the errors and replays we receive, so that we can tell how many people a fault affected and reach you about it. When you are signed out, we attach only a pseudonymous device identifier.

Both product analytics and session replay are non-essential, and Section 8 explains how you control them.

If you object to this processing, contact us at founders@10amstudios.xyz.

8. Cookies, similar technologies, and your choices#

We and our providers use cookies, local storage, and similar technologies for two different purposes.

8.1 Essential technologies

These keep you signed in, remember your preferences, protect against fraud and abuse, and keep the Services working. They run wherever you are, because the Services cannot function without them.

8.2 Non-essential technologies

These are our product analytics and our error-monitoring session replay, described in Section 7. They help us understand how the Services are used and diagnose failures. They are not required for the Services to work.

8.3 What happens today, and how to opt out

We want to be straightforward about where we are. We do not currently show a cookie consent prompt anywhere in the Services, and we do not yet offer an in-product "Cookie Settings" control. Product analytics and the sampled session replay load when you use the Services.

There is no in-product switch for this yet, so the control you have today is your browser, and we want to be precise about what it does and does not do. A tracking or content blocker that blocks requests to our analytics and error-monitoring providers stops both of them reaching us, and that is the control that actually works. Blocking or clearing cookies is weaker: it limits the identifiers that persist between visits, but it does not stop the scripts running, and blocking cookies generally will also stop parts of the Services working, because the essential technologies in Section 8.1 rely on them.

You can also object to this processing by writing to us at founders@10amstudios.xyz. We handle that as a rights request under Section 10 rather than as a setting, because there is no per-account switch behind it — we will tell you what we did and when.

We are building a consent prompt for visitors from the EEA, the UK, and Switzerland that will ask for your consent before any non-essential technology loads, alongside a Cookie Settings control you can change at any time. We will update this section, and the effective date at the top of this policy, when that ships.

8.4 Opt-out preference signals

We do not sell or share personal information as those terms are defined under California law, so there is no sale or sharing for an opt-out preference signal to turn off. Where the law requires us to honour an opt-out preference signal such as Global Privacy Control, we will. Our sites do not respond to the older "Do Not Track" browser signal, because there is no common standard for how to interpret it.

9. How long we keep information#

• Your Tenfold account: while it is active, and for a reasonable period after, so that you can return.
• Brand program data: for as long as the Brand instructs, or for as long as we provide the Services to that Brand. When a Brand's agreement ends, its program data is available for export for 30 days, after which we may delete it, subject to backups expiring on their normal cycle.
• Security and audit logs: our administrative audit log records actions taken in the admin portal, including the IP address the action came from. It is append-only, and we have not set an expiry period for it, so those records are kept for as long as we operate the Services. We are reviewing that period and will state it here once it is set.
• Analytics and error data: kept for the retention period configured with each provider, after which the provider deletes it.
• Blockchain records: permanently, and outside our control.

We may keep information longer where the law requires it, or where we need it to establish, exercise, or defend legal claims. We may keep de-identified or aggregated data indefinitely.

10. Your rights, and how to exercise them#

10.1 Contact the Brand first for program data

If your request is about your participation in a Brand's program — your points, your quest progress, your check-ins, your rewards — contact that Brand. The Brand decides what happens to that data, and we act on the Brand's instructions. The Brand's privacy notice will tell you how to reach it.

When a Brand asks us to help with your request, we assist them within a reasonable time. If you send us a request that belongs to a Brand, we will tell you so, and where we can we will pass it to the Brand or point you to them. We will not delete or change a Brand's program records without the Brand's instruction, except where the law requires us to act.

10.2 Contact us for the information we control

For your Tenfold account, our website, our analytics and error monitoring, and our sales and support records, contact founders@10amstudios.xyz.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct it if it is inaccurate;
• delete it;
• restrict or object to how we use it;
• receive a portable copy;
• withdraw consent where we relied on it;
• opt out of the sale or sharing of personal information, or of targeted advertising and certain profiling — noting that we do not sell or share as those terms are defined;
• appeal a decision we make about your request, where your state's law provides for an appeal;
• lodge a complaint with your data protection authority.

You may use an authorised agent where the law allows it. We may need to verify your identity before acting, and we will not discriminate against you for exercising a right.

Limits we want you to know about in advance: We cannot delete anything recorded on a blockchain (Section 3.3). Deleting your Tenfold account may forfeit points, badges, and rewards in every Brand program you belong to. We may retain records we are legally required to keep.

10.3 Where to complain

Contact us first at founders@10amstudios.xyz. If you are in the EEA or the UK, you may also complain to your local supervisory authority.

11. Security#

We use technical and organisational measures appropriate to the risk, including transport encryption, row-level access controls in our database that scope data to the correct Brand and user, hashed API credentials, scoped access tokens, audit logging of administrative actions, and deliberate scrubbing of sensitive credentials from our error logs.

No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.

We do not control your wallet. We never hold your private keys or seed phrase. Keeping your wallet, its recovery phrase, and your sign-in credentials secure is your responsibility. Anyone who controls your wallet can control the assets in it, and we cannot reverse a blockchain transaction.

If you believe you have found a security vulnerability, contact us at founders@10amstudios.xyz.

12. Children and age#

The Services are intended for people who are 18 or older. You must be at least 18, or the age of majority where you live if that is greater, to use the Services on your own behalf.

If you are between 13 and 17, you may use the Services only with the involvement and agreement of a parent or legal guardian, who must accept the Tenfold Terms of Service on your behalf and take responsibility for your use.

The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13.

How this is applied. These are rules, not a technical gate. When you accept the Tenfold Terms of Service you confirm that you meet the age requirement, and we rely on that confirmation. We do not verify your age, we do not require a date of birth to create an account, and we do not operate an age gate anywhere in the Services. A date of birth is an optional profile field, collected only when a Brand's program asks for it as a program requirement, and we do not use it to check eligibility.

A Brand may set a higher age requirement for its own program, and the Brand's requirement applies in addition to ours.

If you believe someone under 13 has given us personal information, contact founders@10amstudios.xyz and we will delete it.

13. International transfers#

We are based in New York, in the United States, and our infrastructure providers are primarily located in the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States and in other countries where our service providers operate.

These countries may not provide the same level of data protection as your own.

Where personal information is transferred out of the EEA, the UK, or Switzerland to us or to our service providers, we put appropriate safeguards in place for that transfer. Brands can request our current data processing terms, including the transfer terms, at founders@10amstudios.xyz.

14. Third-party services and links#

The Services connect to and link out to third parties — wallets, blockchains, social platforms, community platforms, commerce platforms, and marketplaces. Their handling of your information is governed by their own policies, not this one. We are not responsible for their practices. Review them before you connect an account or approve a transaction.

15. Changes to this policy#

We may update this policy. When we do, we will change the effective date at the top and, where the change is material, give notice through the Services or by email. Prior versions are available on request at founders@10amstudios.xyz. Continuing to use the Services after a change takes effect means you accept the updated policy.

16. Contact us#

Goonz LLC d/b/a Tenfold New York, United States founders@10amstudios.xyz

The Tenfold Terms of Service are published at tenfold.so/terms.