Last Updated: 17 May 2025

This "Privacy Notice" describes the privacy practices of Astro Pump and Astro Pump Affiliates (collectively, "Astro Pump", "our", "us" or "we"), in connection with the Astro Pump Sites and the Astro Pump Platform (collectively, "Services"). This Privacy Notice also explains the rights and choices available to individuals regarding their information.

Please read this Privacy Notice carefully to understand our policies and practices regarding your information. If you do not agree with our policies and practices, please do not use the Astro Pump Platform. By accessing or using the Astro Pump Platform, you acknowledge and agree to the terms of this Privacy Notice.

We may update this Privacy Notice in response to evolving laws, regulations, industry standards, or changes to the Astro Pump Platform. Should any changes materially alter your privacy rights, we will inform you as appropriate. If you disagree with the changes, please discontinue your use of the Astro Pump Platform.

Our Site and the Astro Pump Platform are not directed to, and we do not knowingly collect Personal Data from, anyone under the age of 18. If a parent or guardian becomes aware that a child has provided us with information, please contact us so that we can delete such information from our files as soon as reasonably practicable.

Personal Data Controller

The term "Personal Data" as used in this policy refers to information that can be associated with a specific person and may identify that person. Personal Data does not include information that has been aggregated or anonymized so that a specific person can no longer be identified. Any reference to "Personal Data" in this Privacy Notice includes, without limitation, Personal Data as defined by applicable data protection laws.

A Personal Data controller is a person or organisation that controls the collection, holding, processing, or use of Personal Data, including when another person or organisation is instructed to collect, hold, process, use, transfer, or disclose Personal Data on behalf of the controller.

Types of Personal Data Collected

The types of Personal Data we may collect from you or through third parties will depend on our interactions with you. This may include:

• Financial information such as your wallet addresses;
• Transaction information such as the wallet addresses of senders and recipients of Digital Assets, details of your activities on the Astro Pump Platform, and our communications with you;
• Usage Data, which can include your IP address, country of origin, browser and operating system details, and information about how you use the Astro Pump Platform;
• Other personal, commercial, or identification information that we may deem necessary to comply with applicable anti-money laundering laws and other regulations.

We may also obtain Personal Data about you from third parties and publicly available sources. This information is collected when you provide it freely on the Astro Pump Platform or when you interact with it. Unless otherwise noted, all Personal Data we request is mandatory, and failure to provide such data may result in your inability to access or use the Astro Pump Platform. Where Personal Data is not mandatory, you may choose not to provide it. If you have any questions about what data is mandatory, please contact us.

Information We Automatically Collect

When you visit the Astro Pump Platform, we may automatically collect information about your device, including details about your web browser, IP address, domain name, device identifiers, login information, browser type and version, timezone settings, installed cookies, and similar data. We may also collect information about the specific web pages or services you view, the websites or search terms that referred you, and your interactions with the Astro Pump Platform.

Cookies & Similar Technologies

We use cookies (small, often encrypted text files stored on your computer or mobile device) and similar technologies ("Cookies") to provide you with certain functions on our Site and to help us collect data. This section explains how we use Cookies and how you can control them.

How We Use Cookies

We use Cookies to track your usage of the Astro Pump Platform by providing usage statistics. Cookies also help us deliver updates and allow you to authenticate your account based on your browsing history and previous visits. For clarity, we do not combine data gathered from Cookies with third-party data for targeted advertising or measurement purposes.

Types of Cookies

We use both session Cookies (which expire when you close your browser) and persistent Cookies (which remain until you delete them). These Cookies may be grouped into:

• Strictly Necessary: These Cookies are essential for the Site to function properly, including authentication and authorization.
• Functionality: These Cookies enable technical performance and allow us to remember your preferences (such as sign-in information).
• Performance/Analytical: These Cookies help us collect data on how you navigate the Site so we can improve it.
• Targeting: These Cookies deliver relevant content to your device based on previous visits. Some of these may be operated by third parties with our permission.

Method and Basis of Processing Data

Methods of Processing

We employ appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of your Personal Data. Processing is carried out using IT-enabled tools, following strict organisational procedures related to the purposes indicated. Data may be accessible to our administrators, legal, or technical staff, or to external parties (such as technical service providers, hosting providers, or IT companies) appointed as Data Processors. You may request a list of these parties at any time.

Legal Basis of Processing

We process your Personal Data if one of the following applies:

You have given consent for one or more specific purposes. In some cases, we may process your data on an "opt-out" basis without relying on consent if permitted by law.

• Your Personal Data is necessary for the performance of an agreement with you or for pre-contractual obligations;
• Processing is necessary for compliance with a legal obligation;
• Processing is related to a task carried out in the public interest or in the exercise of official authority;
• Processing is necessary for the purposes of legitimate interests pursued by us or a third party.

How We Use Personal Data

We use the Personal Data we collect about you to:

• Provide the Astro Pump Platform and customer support;
• Process transactions and send transaction notices;
• Detect and respond to malicious or fraudulent activity;
• Monitor and analyse your behaviour ("Analytics");
• Beta test features on the Astro Pump Platform;
• Contact you regarding your account or transactions;
• Display content from external platforms;
• Handle productivity-related activities;
• Provide social features;
• Optimise traffic and performance;
• Register and authenticate you as a user;
• Comply with legal obligations and enforcement requests;
• Protect the rights and interests of Astro Pump, its users, and third parties;
• Monitor infrastructure;
• Interact with external social networks;
• Support location-based interactions;
• Manage tags to better analyse activities on the Platform;
• Engage in traffic optimisation and distribution.

How We Share Personal Data

We may share your Personal Data with our service providers and vendors to help provide the Astro Pump Platform. We do not share your Personal Data with third parties without your consent, except as described in this Privacy Notice or as required by law. We may also share your Personal Data within our group and with Astro Pump Affiliates for purposes consistent with this Privacy Notice.

In addition, we may share your Personal Data with third parties that provide services on our behalf or assist in operating the Site. These third parties are required to process your Personal Data only as directed by us and in accordance with this Privacy Notice. We may also share your data in connection with a business transaction, such as a merger, acquisition, or asset sale.

Retention of Personal Data

We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, including for legal, regulatory, accounting, or reporting requirements. Retention periods depend on the nature and sensitivity of the Personal Data, the risk of harm from unauthorized use, the purposes for which it is processed, and applicable legal requirements.

Personal Data collected for contractual purposes will be retained until the contract is fully performed. Data collected for our legitimate interests will be kept as long as needed. In some cases, with your consent, we may retain your Personal Data for longer periods. Once the retention period expires, your data will be deleted or de-identified, except where retention is required by law.

Note that not all Personal Data may be deleted or de-identified (see the section on "Blockchain Transactions" below).

Privacy Technology Practices

Links to Third-Party Sites

The Astro Pump Platform may contain links to websites, mobile applications, and online services operated by third parties. These links are provided for your convenience and do not imply any endorsement or affiliation. We do not control these third-party sites or services, and their privacy practices may differ from ours. We encourage you to review the privacy policies of any third-party sites you visit.

Data Security

We employ administrative, technical, and physical safeguards designed to protect your Personal Data. However, the transmission of information via the internet is not completely secure, and we cannot guarantee the security of your Personal Data transmitted to the Astro Pump Platform. Any transmission is at your own risk.

Blockchain Transactions

Your use of digital assets on the Astro Pump Platform may be recorded on a public blockchain, which is an immutable and distributed ledger. Because blockchains are open to forensic analysis, combining blockchain data with other information may reveal personal data. We have no control over the data on public blockchains and cannot delete or modify personal data recorded there.

Overseas Disclosure and Your Privacy Rights

For the purposes of applicable data protection laws, Astro Pump is the Personal Data controller. As a company operating globally, your Personal Data may be transferred outside your country of residence. Such transfers will be subject to applicable law and protected by international data transfer agreements where necessary.

Residents of certain jurisdictions, such as the EEA and the UK, have rights including:

• The right to obtain confirmation of the Personal Data we process;
• The right to rectify inaccurate Personal Data;
• The right to request erasure of your Personal Data (subject to legal exceptions);
• The right to restrict certain processing of your Personal Data;
• The right to receive your Personal Data in a structured, commonly used, machine-readable format;
• The right to object to the processing of your Personal Data, including automated decision-making;
• The right to withdraw your consent for processing at any time.

You are generally entitled to access the Personal Data we hold about you. If you request access, we will provide your data unless there are legal or administrative reasons to deny your request.

If you believe we have not respected your privacy or applicable laws, please contact our Support team or your local data protection authority.

Third-Party Account Connections (OAuth)

When you “tokenize” a post, you connect via OAuth to one of your social accounts. We request only the minimal scopes needed to:

• Verify that the post or media belongs to you;
• Fetch its metadata (ID, title/caption, description, thumbnails, permalink, timestamps);
• Let you disconnect at any time.

Exact Scopes We Ask For

YouTube (Google)

userinfo.email, youtube.readonly

Facebook

email, public_profile, user_posts, user_videos, user_photos

Instagram

instagram_business_basic

X (formerly Twitter)

tweet.read, users.read

Pinterest

user_accounts:read, pins:read, boards:read

TikTok

user.info.basic, video.list

Data We Store

We only store:

• Your OAuth access token (and refresh token, if provided), encrypted at rest;
• Your social-provider user ID (uid);

How to Disconnect

You can disconnect at any time via your Astro Pump “Connected Accounts” page: https://astropump.fun/connected-accounts (after logging into your account using your wallet). Disconnecting there deletes our stored tokens and prevents further access. You can also revoke access directly on the provider’s sites:

• Facebook App Settings
• Google Account Permissions
• X Connected Apps
• Instagram Apps & Websites
• TikTok Authorized Apps
• Pinterest App Settings

General

If you wish to exercise any of your privacy rights or have any questions about your Personal Data, please contact our Support team and provide sufficient information to verify your identity along with your request. Any Personal Data collected for identity verification will only be used for that purpose.

If you are concerned that we have not complied with your legal rights or applicable privacy laws, you may contact us or your local data protection authority.