Privacy Policy

Scope and controller

This Policy applies to the TOKNIFY website, WordPress account, RWA creation interface, public marketplace, local non-custodial wallet integration, server APIs, NFT metadata workflow and related support. The data controller is TOKNIFY, Local jurisdiction.. Separate asset issuers, custodians, blockchains, token providers and other services may act as independent controllers under their own policies.

By using TOKNIFY, you acknowledge this Policy and the Terms and Conditions. Where consent is the legal basis, you may withdraw it for future processing, but withdrawal does not invalidate earlier lawful processing or reverse public blockchain activity.

Information we collect

• Account information: WordPress user ID, username, email, authentication records and account preferences.
• Wallet and blockchain information: public wallet addresses, network, token balances requested by the interface, transaction hashes, token IDs, NFT ownership, contract events, burns, treasury transfers and redemption records.
• Order and financial records: design ID, payment reference, asset quantity, quote, fees, deposit address, detected payment, settlement, refund and transaction status. We do not collect conventional card details through the active crypto-payment flow.
• Marketplace information: NFT contract and token ID, seller and buyer wallet addresses, listing price and payment token, fee snapshot, expiry, authorization nonce and signature, escrow status, cancellation and purchase transaction records.
• Creation and Gold Planner content: engraving message, prompt description, uploaded reference artwork, saved Gold Planner personalization inputs and source image, shape and design direction, plan amount, selected stablecoin, frequency, next scheduled run, generated image, validation output, metadata, hashes and publication choices.
• Physical fulfillment information: recipient name, email, phone, country, delivery address, city, state or region, postal code, delivery notes, physical order reference, gram amount, fee payment and fulfillment status.
• Technical and security data: IP address, browser and device information, timestamps, request logs, error records, nonce and signature-validation data, fraud or abuse indicators and service diagnostics.
• Communications: support requests, legal notices, feedback and administrative correspondence.

Local non-custodial wallet boundaries

The TOKNIFY RWA wallet is designed to create or import an encrypted keystore in your browser. The encrypted keystore remains in local browser storage. When unlocked, sensitive signing material is held only for the browser session. Your wallet password, plaintext private key and seed phrase are not intentionally transmitted to TOKNIFY servers. Public addresses and signed transactions are transmitted or published as necessary to display balances, make payments, list, buy or cancel marketplace positions, transfer assets or redeem NFTs.

When you use Local Wallet funding for Gold Planner, the wallet password and plaintext private key remain browser-side under the same non-custodial boundary. The service may receive the public owner address, plan identifier, selected token, dedicated destination address, amount, signed transaction data and transaction status needed to verify and sponsor the permitted transfer, but it is not intended to receive the wallet password or plaintext private key.

You control deletion of local wallet storage through your browser or wallet controls. Clearing browser data without a secure backup may permanently remove access. Never send recovery credentials to support.

How information is collected

We collect information directly from forms, uploads, Gold Planner settings, wallet and marketplace actions and communications; automatically from the website and server; from public BNB Smart Chain records and explorers; and from providers involved in generation, pricing, swaps, validation, custody, compliance or settlement. Public-chain information may be combined with account records to verify payment, listings, ownership transfers and redemption. Signed-out visitors may browse public listings and certificates; ordinary technical request data may still be processed for delivery, security and abuse prevention.

Purposes and legal bases

Artificial-intelligence processing

Design instructions, reference images and related technical context may be sent to OpenAI through its API to generate and validate a personalized asset visualization. Do not include unnecessary personal or sensitive information. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer explicitly opts in. Provider retention, safety monitoring and processing remain subject to the applicable account configuration and provider terms. See OpenAI business data privacy.

Generated outputs and validation results may be reviewed automatically and, where support or safety requires, by authorized personnel. Source artwork stays private during the generation workflow unless publication is necessary and approved; the final validated image and NFT metadata become public when the paid asset is finalized.

Public blockchain and NFT information

BNB Smart Chain is a public decentralized network. Wallet addresses, transaction amounts, contract interactions, NFT ownership, marketplace listings, escrow transfers, purchases, platform-fee transfers, cancellations, fulfillment-fee transfers, burns, physical-treasury transfers and redemption events may be visible indefinitely and copied by third parties. Final NFT images, messages, certificates, attributes, token URIs, metadata and cryptographic commitments may also be publicly accessible. Blockchain publication is not confidential, and TOKNIFY generally cannot erase or alter data confirmed on-chain or copied by independent services.

Your street address, phone number and delivery notes are not intentionally written to the public blockchain. Do not place delivery or other private information in an NFT message, image or public transaction field.

How information is shared

We disclose only what is reasonably necessary to:

• hosting, infrastructure, security, email, WordPress and support providers;
• OpenAI for generation and validation;
• BNB Smart Chain nodes, RPC providers, explorers and smart contracts;
• token issuers, decentralized exchanges, liquidity providers, custodians, valuation sources and asset-module partners;
• refiners, manufacturers, assay providers, packaging providers, insurers, logistics providers, customs agents and carriers involved in physical fulfillment;
• auditors, lawyers, accountants, insurers and compliance providers under appropriate duties;
• authorities, courts or affected parties where required by law or necessary to protect rights and safety;
• a buyer, investor or successor in a merger, financing, restructuring or transfer, subject to applicable safeguards.

Public NFT publication and user-initiated blockchain transactions are disclosures to the public, not private processor transfers.

Physical fulfillment data

When you request physical gold, we use your recipient and delivery details to create, verify, manufacture, ship, track and support the order. The most recently submitted profile may be saved with your TOKNIFY account and prefilled for later physical requests so you do not need to enter it again. Review and correct the prefilled information before every order.

We share only the information reasonably needed by the selected fulfillment, compliance, manufacturing, insurance, customs and delivery providers. Those providers may process the information under our instructions or under their own legal obligations and privacy notices. Delivery information is not included in public NFT metadata, but the related wallet, fee payment, NFT burn and treasury transfer remain publicly verifiable.

Marketplace data

Active listings are intentionally public. A listing may display the NFT image and certificate, token ID, contract, XAU₮ backing, seller wallet, selected stablecoin, gross price, platform-fee rate, expiry and on-chain status. Visitors can view this information without an account. Buying, listing and cancelling require the account and owner-wallet checks presented by the service.

Marketplace authorizations, approvals and transactions may reveal seller and buyer addresses, NFT and payment-token contracts, prices, allowances, signatures, nonces and transaction hashes to TOKNIFY services, blockchain infrastructure and the public network. Wallet passwords and plaintext private keys remain subject to the local-wallet boundaries above and are not intentionally transmitted to TOKNIFY.

International transfers

Providers and blockchain infrastructure may process information outside your country. Where applicable law requires it, we use recognized transfer mechanisms such as adequacy decisions, contractual safeguards or other lawful measures. Public blockchain information is globally available and cannot be geographically restricted after publication.

Retention

We retain information only as long as reasonably necessary for service delivery, security, legal obligations and disputes. Account, saved delivery-profile and active-order records remain while the relationship or fulfillment need continues. Financial, settlement, backing, refund, marketplace, physical-order, shipping, customs and compliance records may be retained for up to 7 years after completion or longer where law, warranty, recall or a dispute requires. Support and operational correspondence may be retained for up to 3 years. Private source files may be removed earlier when no longer needed. Backups expire on their normal rotation.

Encrypted local wallet data remains on your device until you remove it. Public blockchain records, decentralized storage, published NFT metadata, marketplace history and copies held by third parties may remain indefinitely.

Cookies, browser storage and similar technologies

WordPress may use essential cookies for login, security, preferences and sessions. The local wallet uses browser storage for the encrypted keystore and session storage for temporary unlocked state. Transaction-resume markers may prevent loss of progress after interruption. Essential technologies are required for requested functionality. Any analytics, advertising or non-essential cookies added by the site must be disclosed and consented to separately where required.

Security

We use measures intended to protect information, including HTTPS, access controls, signed server requests, nonce and replay protection, isolated services, encrypted wallet storage, integrity hashes and restricted private-file access. No internet, blockchain, wallet or storage system is completely secure. You are responsible for device security, strong unique passwords, backups and checking transaction details. Notify us promptly of suspected account compromise without disclosing wallet secrets.

Your privacy rights

Depending on location, you may have rights to be informed; request access, correction or deletion; restrict or object to processing; receive portable data; withdraw consent; and complain to a competent authority. You may also have rights relating to direct marketing and qualifying automated decisions. These rights are not absolute and may be limited by identity verification, legal retention, protection of others, fraud prevention, legal claims and technical impossibility.

Submit a request to [email protected]. State the right requested and enough account or order information to locate the record, but never provide a password, private key or seed phrase. We may verify identity and wallet control before responding.

Deletion and correction limitations

We can remove eligible off-chain account, design or support data when no overriding obligation applies. We cannot reliably delete public blockchain transactions, smart-contract events, NFT ownership history, token metadata already cached or copied, or information independently controlled by another provider. Correcting an off-chain display does not rewrite blockchain history. Cancelling an unpaid request removes it from the customer interface while a limited server audit record may remain to detect late payment and prevent loss.

Automated processing

Gold Planner uses automation to evaluate scheduled run times, available dedicated-wallet balances, saved personalization instructions, current quote inputs, new NFT identifiers, render generation and validation, backing acquisition, minting, status updates, skipped cycles and eligible cancellation refunds. Automation is also used for quote calculation, payment detection, confirmations, AI generation, render validation, swap routing, settlement, minting, refunds, gas recovery, ownership discovery, marketplace listing-floor verification, escrow and purchase validation, fee settlement, ownership updates, redemption verification, physical-eligibility checks, fulfillment-fee verification, NFT burning, treasury settlement and order-status updates. These processes execute user-requested service rules and security controls. Where applicable law gives you rights regarding a solely automated decision with legal or similarly significant effect, contact us to request information or eligible human review.

Children

TOKNIFY is not directed to anyone under 18. We do not knowingly provide RWA or digital-asset services to children. If you believe a child submitted personal data, contact us so eligible off-chain information can be investigated and removed.

Sale of data and marketing

We do not sell or rent private keys, wallet passwords, customer prompts or personal information. We use contact details primarily for transactional, support, security and legal communications. Optional marketing requires the choice or lawful basis applicable in your location, and you may unsubscribe from marketing without disabling essential service notices.

Third-party sites and independent services

Links to explorers, token issuers, blockchains, wallets, exchanges, AI providers or other sites are governed by their own policies. TOKNIFY is not responsible for independent processing. Review third-party terms before connecting a wallet, sending data or executing a transaction.

Changes to this Policy

We may update this Policy when modules, providers, laws or practices change. The effective date will be revised and material changes may be announced on the site or through account contact information. Review the current Policy before submitting a new order or enabling a new asset module.

Contact and complaints

Controller: TOKNIFY
Local jurisdiction.
Privacy email: [email protected]

You may also complain to the data-protection authority competent for your location where that right applies.