Privacy Policy

1. Who we are and what this covers

This policy explains how OK Factory ("UAmbassador", "we", "us") collects, uses, and protects personal data when you use the UAmbassador website (uambassador.com) and mobile apps (together, the "Service") — the referral and ambassador programme for the Faktorist trade ecosystem. It applies to ambassadors and to visitors. Where we decide how and why your data is processed, we act as the data controller.

2. Information we collect

You give us: your name, email, and phone number; profile and contact details; identity and verification information you submit for reward eligibility and KYC/AML checks; and messages you send us.

From your use of the Service: your referral links and codes, the referrals and activity attributed to you, your rewards, commissions, and payout records, and your support and communication history.

Ecosystem identity: where you sign in through, or link to, Faktorist and the FTR ecosystem, we receive the identifiers needed to connect your accounts and maintain a single ecosystem identity.

Wallet: a custodial blockchain wallet address provisioned for you, and an encrypted key we store on your behalf and never expose.

Automatically: device, log, and usage data (such as IP address, app and version, and the pages and actions you take) needed to run, secure, and improve the Service. We do not use third-party advertising trackers.

3. How and why we use your data

We use personal data to operate the ambassador programme and your account; attribute referrals and calculate, verify, and pay rewards and commissions; grant $FTR loyalty rewards and record grants and claims on-chain; run KYC/AML, sanctions, fraud-prevention, and eligibility checks; provide support and send service communications; secure the Service and prevent abuse; and comply with legal, tax, and accounting obligations.

Legal bases (where GDPR applies): performance of our contract with you (running the programme and paying rewards); our legitimate interests (security, fraud prevention, and improving the Service); compliance with legal obligations (KYC/AML, tax, and record-keeping); and your consent where required, which you may withdraw at any time.

4. Custodial wallet and on-chain data

To deliver $FTR rewards we provision and custody a blockchain wallet for you. The encryption key is held securely and is never exposed to you or to third parties. When rewards are granted or claimed, those transactions are written to the public Whitechain ledger. On-chain records are immutable and cannot be edited or deleted by us or anyone else. A wallet address is pseudonymous but, combined with other data, may be linkable to you. Deleting your account removes your custodial wallet and the personal data that links you to on-chain entries, but does not erase the ledger itself.

5. Sharing, international transfers, and retention

We share the minimum necessary with: the Faktorist and FTR ecosystem (to maintain your single identity, balance, and reward attribution); payment, KYC/AML, and compliance providers; infrastructure providers that host and secure the Service; and authorities where required by law. We do not sell your personal data and do not share it for third-party advertising.

International transfers: your data may be processed in countries other than your own, including within the EU and the UAE. Where required, we apply appropriate safeguards to such transfers.

Retention: we keep personal data while your account is active and as needed to provide the Service, then for the periods required for legal, tax, accounting, and fraud-prevention purposes, after which it is deleted or anonymised. On-chain records persist on the ledger as described in section 4.

6. Your rights and choices

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data; object to or ask us to restrict certain processing; and withdraw consent. You can delete your account in-app (Profile → Delete account) or via uambassador.com/data-deletion. To exercise any right, contact privacy@uambassador.com. If you are in the EU/EEA or UK, you may also lodge a complaint with your local data-protection authority. Some data may be retained where we have a legal basis or obligation to keep it.

7. Security, cookies, children, and changes

Security: we encrypt data in transit, protect the custodial key with encryption and access controls, and restrict access to personal data. No system is perfectly secure.

Cookies: we use cookies and similar technologies that are necessary to sign you in and keep the Service secure; we do not use advertising cookies.

Children: the Service is for adults (18 or older) acting for a business and is not directed to children.

Changes: we may update this policy; we will post the new version here and update the date above. Questions: privacy@uambassador.com.