Viplus.org Privacy Policy

Table of Contents:

  1. Scope of Application

  2. Information We Collect from Users

  3. Use, Storage, and Protection of User Data

  4. Digital Asset Wallet Management Policy

  5. Account Creation, Usage, and Termination

  6. User Rights Regarding Personal Data

  7. Third-Party Sharing and Disclosure

  8. Security Measures

  9. Cookies and Tracking Policy

  10. Compliance with U.S. Law and Dispute Resolution

1. Scope of Application

This Privacy Policy (“Policy”) explains how Dream Makers LLC (the owner and operator of Viplus.org) – referred to as “Dream Makers,” “we,” or “us” – collects, uses, and protects personal information when you use the Viplus.org website, mobile applications, and related services (collectively, the “Services”). This Policy applies to all users of our Services, including the Viplus digital wallet, digital asset trading platform, user registration portal, and system access features. It covers all personal data and usage information we obtain through your use of our Services. By using Viplus.org or any associated Services, you (“User” or “you”) agree to the practices described in this Policy. If you do not agree, please discontinue use of the Services.

Please note that this Policy only governs information and activities on our own Services. It does not apply to third-party websites, services, or applications that we do not control, even if our Services link to them. We are not responsible for the privacy practices of those third-party sites. We operate under and in compliance with the relevant laws of the United States, which is our primary jurisdiction. The sections below detail the specific policies and procedures we follow to protect your privacy and security.

2. Information We Collect from Users

We collect various types of information from and about users of our Services. This includes information you provide directly, information collected automatically about your use of the Services, and information from third parties (such as identity verification services). The types of user information we collect may include:

  • Personal Identifiers: Information that identifies you, such as your name, email address, phone number, mailing address, and other contact details you provide when registering for an account or contacting support. We may also collect usernames or profile names you create on our platform.

  • Account Credentials: When you create an account, we collect login credentials like your username and password (passwords are stored in hashed/encrypted form for security).

  • User Profile Data: Any additional profile information you choose to provide (e.g. profile picture, referral codes, or demographic info) if applicable.

  • Communication Records: Copies of communications with us, including emails, support tickets, or chat logs. If you contact us, we may keep records of that correspondence to address your inquiries or issues.

  • Device and Technical Information: When you access our Services, we automatically collect technical information such as your IP address, browser type, device type, operating system, unique device identifiers, and system settings. We log usage data like the dates and times you log in, pages or features you access, and how you navigate or interact with the Services. This may include log files and analytics data that help us understand user activity and improve functionality.

  • Location Data: We may derive approximate location information from your IP address or device settings. For example, we might detect what city or country you are in to customize content or comply with regional requirements. We do not collect precise GPS location unless you explicitly grant permission through your device settings.

  • Cookies and Tracking Data: We use cookies and similar tracking technologies to collect information about your interactions with our website (see the Cookies and Tracking Policy section below for details). This may include data on your browsing behavior, preferences, and referring website.

  • Financial and Transaction Information: If you use our digital asset wallet or trading features, we collect data necessary to facilitate those transactions. This includes digital wallet information (such as your wallet addresses or account numbers on our platform), transaction details (amounts, asset types, timestamps, sender and receiver information for crypto transactions), account balances, and payment information if applicable (for example, if linking a bank account or credit card for purchases, subject to additional security and encryption).

  • Identity Verification Data: For compliance with legal requirements (such as Know-Your-Customer (KYC) and anti-money laundering laws) and to increase account security, we may ask for additional personal data. This could include your date of birth, nationality, government-issued identification numbers (e.g. passport or driver’s license number), copies of ID documents, selfies or biometric identifiers for identity verification, and any other information necessary to confirm your identity or eligibility to use certain features. We only collect this information when required by law or when you engage in specific regulated activities (such as higher-value transactions) that necessitate identity verification.

  • Usage Behavior: We may gather information about how you use and navigate our Services. For instance, we might track features you frequently use, settings you configure, actions you take (like asset trades or transfers), and other usage metrics. This helps us analyze trends, administer and improve the platform, and provide a better user experience.

  • Aggregated Data: We may also generate aggregated, anonymized data from your usage (for example, summarizing overall platform usage trends). Aggregated data does not identify you personally and is not considered personal information. We may use such data for analytical and business purposes.

We collect only the information that is necessary to provide our services and meet our legal and business obligations. You are free to not provide certain optional information; however, note that some of our Services (for example, creating an account or executing a transaction) may require certain data. We will clearly indicate when information is required versus optional. If you have any questions about the information we collect, you can always contact us for more details.

3. Use, Storage, and Protection of User Data

We use the collected user information for various legitimate purposes in connection with operating and providing our Services. The way we use, store, and safeguard your data is as follows:

Use of Data: We use personal information to deliver and improve our Services and to communicate with you. Specifically, your data is used to:

  • Provide Services and Features: We process your information to create and manage your account, authenticate your identity during login, and enable you to use the digital wallet and asset trading features. For example, we use your transaction data to execute and confirm your digital asset trades or transfers.

  • Communicate with You: We use contact information (like email) to send important account and transaction updates, security alerts, and administrative messages. We may also send newsletters or promotional materials about new features or offers, but you can opt out of marketing emails at any time.

  • Customer Support: Information you provide and our records of your usage help us assist you when you contact customer support. We may use your data to investigate and address any issues or questions you have about the Services.

  • Improve and Personalize Services: We analyze usage data and feedback to understand how our Services are used. This helps us troubleshoot performance issues, develop new features, and enhance existing functionality. It also allows us to personalize your experience, such as customizing interface language or content relevant to your region or past usage.

  • Security and Fraud Prevention: We strictly use data to protect the integrity of our platform and our users. For instance, we may use IP addresses, device info, and behavioral patterns to detect and prevent fraudulent or unauthorized activities. Personal data and verification documents are used to comply with anti-fraud and anti-money laundering requirements.

  • Legal Compliance: Where necessary, we use your information to comply with applicable laws and regulations. For example, identity information may be used to comply with KYC/AML obligations, and we may use and retain certain data to fulfill record-keeping requirements or respond to lawful requests by authorities (as detailed in Section 7).

  • Other Legitimate Business Interests: We might use data for internal purposes such as auditing, data analysis, testing, research, and to enforce our Terms of Use or other agreements. If we ever intend to use your data for any purpose that is incompatible with those listed here, we will seek your consent or provide required notice.

Data Storage and Retention: We store user data securely in our systems and servers (including cloud-based storage provided by reputable providers) in the United States or other jurisdictions as needed to operate the service. Personal data will be retained only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. For example, even if you deactivate your account, we may need to keep certain transaction records or identity information for a number of years to comply with financial regulations or tax laws. When personal data is no longer needed, we will anonymize or securely delete it. We maintain detailed internal policies for data retention and regularly review the data we hold, ensuring we do not keep personal information longer than justified.

Throughout its lifecycle, your data is stored in a manner designed to protect it from loss, theft, or unauthorized access. We use encrypted databases and secure cloud storage to store sensitive personal information. For particularly sensitive data (such as passwords or private keys), we apply additional encryption and hashing. We also isolate personal data from the public-facing parts of our service – for instance, your private profile information is not visible to other users by default.

Protection of Data: We are committed to protecting your personal information using appropriate technical and organizational security measures. (See Section 8 Security Measures for more details on how we safeguard data.) In summary, we employ industry-standard security protocols to prevent unauthorized access, disclosure, or alteration of your data. For example, we use HTTPS encryption for data transmission so that information you send to our site is encrypted in transit. Sensitive information like passwords and private keys are stored in encrypted form. We limit access to personal data strictly to authorized personnel at Dream Makers who have a genuine need to access it (for example, a customer support agent troubleshooting an issue, or a compliance officer fulfilling legal requirements). These personnel are bound by confidentiality obligations. We also train our staff on data privacy and security best practices.

Despite all measures, please note that no method of electronic storage or transmission is 100% secure. We continuously update and monitor our security practices, but we cannot guarantee absolute security of data. You also play an important role in keeping your information secure: we urge you to use a strong, unique password for your Viplus account, enable two-factor authentication (if available), and guard your account credentials from unauthorized use. If you suspect any unauthorized activity or a security breach involving your account, please notify us immediately so we can take appropriate action.

4. Digital Asset Wallet Management Policy

This section describes our policies regarding the management and security of digital assets held in your Viplus wallet. We understand that the proper handling of your digital assets (such as cryptocurrencies or tokens) is of paramount importance. Below are key principles of how we manage and safeguard assets in our custody:

  • User Ownership of Assets: Any digital assets stored or reflected in your Viplus wallet remain your property at all times. By using our wallet service, you retain full ownership rights over your cryptocurrencies or digital tokens. We act as a service provider enabling you to store, transfer, and trade these assets, but we do not assume ownership of them. Your balance and holdings are held for your benefit.

  • Custodial Responsibilities: Depending on the nature of the service, we may hold your digital assets in a custodial wallet on your behalf (for example, if we facilitate trades or provide hosted wallet storage). In such cases, we have a fiduciary responsibility to protect those assets. We keep customer assets segregated from the company’s own assets. We do not loan, invest, or use the digital assets in your wallet for any purpose other than to carry out your instructions (such as processing a transaction that you authorize) or as required for routine maintenance of the Services.

  • Secure Storage Measures: We employ robust security measures to protect digital assets. This includes using industry best practices like encryption, multi-signature wallets, and cold storage for the majority of funds. For instance, the bulk of crypto holdings may be kept in offline cold storage systems that are highly secure from online threats, while operational balances are maintained in secure “hot” wallets to facilitate quick transactions. We continuously monitor for any suspicious activity on wallet accounts to prevent unauthorized access or fraud.

  • Transaction Authorization: Every movement of digital assets (sending or trading) from your wallet requires your explicit authorization (such as login credentials entry, transaction confirmation, and any two-factor authentication we implement). We will never initiate a transfer of your assets without your request or consent, except in circumstances where we are required by law or our Terms of Use (for example, a lawful court order, or suspect assets associated with illicit activity – in such rare cases, we may freeze or surrender assets as legally mandated, and we would notify you where permitted).

  • User Responsibilities for Wallet Security: While we implement strong security on our side, you must also take steps to protect your wallet access. Safeguard your account login details and private keys. Do not share your password or 2FA codes with anyone. We recommend enabling all security features we offer (such as two-factor authentication, withdrawal address whitelisting, etc.) to add layers of protection to your wallet. If you lose access to your account or suspect your wallet credentials have been compromised, inform us immediately so that we can help secure your assets.

  • Asset Transfers and Withdrawals: You may withdraw your digital assets or transfer them out of the Viplus wallet at any time, subject to any applicable fees or verification steps. We do not impose unreasonable barriers if you choose to move your assets; our goal is to give you full control. In the event of account termination (see Section 5 below), we will provide instructions for you to withdraw any remaining assets, if possible, or otherwise return assets to you in accordance with legal requirements.

  • Accuracy of Balances: We strive to maintain accurate records of the digital asset balances in your wallet. However, certain external factors (such as blockchain network conditions or forks) could affect balances. We will use commercially reasonable efforts to reconcile and correct any discrepancies. It’s important that you also keep track of your transactions. If you notice any inconsistency in your account balance or transaction history, contact us promptly so we can investigate.

Our digital asset management policy is designed to give you confidence that your assets are handled with care, security, and integrity. We abide by all regulatory requirements relevant to digital asset custody and transactions. If there are significant changes or updates to how we manage digital assets (due to new laws or service changes), we will inform you and update this Policy accordingly.

5. Account Creation, Usage, and Termination

Account Creation: To use certain features of Viplus.org (such as the e-wallet or trading platform), you must create a user account. During registration, we require you to provide accurate and up-to-date information, including at minimum a valid email address and a secure password. You may also be prompted for additional details like your name or phone number for verification purposes. You must be at least 18 years old (or the age of majority in your jurisdiction, if higher) to create an account and use our Services. We do not knowingly allow minors to register accounts; if you are under 18, do not attempt to sign up. By creating an account, you agree to abide by this Policy and our Terms of Use, and you affirm that the information you provide is truthful and yours. You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. Please choose a strong password and do not share it. We encourage using any additional security features we provide (like two-factor authentication) to further secure your account.

Account Usage Guidelines: As an account holder, you agree to use our Services for lawful purposes and in accordance with applicable rules. You must not use your account to engage in illegal activities, violate others’ rights, or attempt to interfere with the platform’s normal operations. Prohibited behaviors include, for example, fraudulent activities, money laundering, attempting to hack or gain unauthorized access to our systems or other users’ accounts, or using the Services in a manner that could harm Dream Makers or other users. We reserve the right to set reasonable rules for usage and to suspend any activities that we suspect violate those rules or pose security risks. You are also expected to keep your account information updated (e.g. if your email changes, update it in your profile) so that we can reach you with important notices. One person or entity may maintain only one account, unless expressly permitted to have multiple by us (such as separate personal and business accounts). If you wish to open an additional account, please contact us with the reasoning. Unauthorized account sharing or assignment is not permitted; the account is meant to be used solely by the individual or entity that registered it.

Account Termination: You have the right to terminate (close) your account at any time if you no longer wish to use our Services. You can typically initiate account deletion through your account settings or by contacting our customer support. Upon your request, we will guide you through the termination process, which may include identity verification for security. When closing your account, you should withdraw any remaining digital asset funds in your wallet to your own external wallet or bank account before the account is fully closed. We will provide assistance or a grace period for you to retrieve assets, as needed. Once an account is deleted, your login will be disabled and personal data associated with your account will be handled in accordance with our data retention and deletion policies (see Section 6 on User Rights, including the right to deletion). Some information may be retained for a period after termination if required for legal compliance (for example, transaction records may need to be kept for regulatory auditing).

Dream Makers also reserves the right to suspend or terminate your account under certain circumstances: for example, if we detect activities that violate our terms or policies, if you have provided false information, or if required by law enforcement or court order. In such cases, we will, when permitted, notify you of the suspension/termination and the reason for it. If your account is terminated by us due to a violation or risk, we may restrict your access to the Services immediately. We will work in good faith to resolve any issues if possible, but our priority is to ensure compliance and security for all users. In the event we terminate your account, we will typically allow you to withdraw any lawful funds or assets that are not implicated in the violation, unless prohibited by law (e.g. assets under investigation or seizure by authorities). Termination of an account shall not waive or eliminate any rights or liabilities that have already accrued up to the date of termination – for example, any fees owed or any misuse that occurred can still be pursued by either party post-termination.

6. User Rights Regarding Personal Data

We respect your rights to control and manage your personal information. Depending on the laws applicable to you (for instance, U.S. federal and state laws, or other international regulations if you reside outside the U.S.), you may have certain rights regarding the personal data we hold about you. We provide all users, regardless of location, with the following core rights and choices concerning their data:

  • Right to Access: You have the right to request a copy of the personal data we have collected about you, and to receive information about how we have used and shared that data. We can provide this in a common electronic format. For example, you may request to know what information we have on file for your account or details about specific transactions.

  • Right to Rectification (Correction): If any of your personal information is inaccurate or outdated, you have the right to request that we correct or update it. You can usually correct basic profile information through your account settings, but for other corrections (or if you need assistance), you can contact us and we will make the necessary changes.

  • Right to Deletion: You have the right to request that we delete your personal data. Upon request, we will erase or anonymize the personal information we hold about you, provided that we do not have a legal obligation to retain it (for example, certain financial transaction records we must keep for a minimum time by law). Account termination (Section 5) is one way to initiate deletion of your data. Note that even after deletion from our active systems, residual data may remain in backups for a short period, but we will purge those in the normal backup cycle. We will also confirm with you once we have fulfilled your deletion request.

  • Right to Data Portability: Where applicable, you may request to obtain your personal data in a structured, commonly used, and machine-readable format, and you have the right to transfer that data to another service provider. We will assist with such requests by providing your data in a CSV or similar format where feasible. (This typically applies to data you provided to us directly.)

  • Right to Withdraw Consent: If we are processing any of your personal data based on your consent (for example, if you consented to receive marketing emails or to connect your account with a third-party service), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. For instance, you can opt out of marketing emails by clicking “unsubscribe” in those emails or adjusting your account preferences.

  • Right to Object or Restrict Processing: In certain situations, you have the right to object to or ask us to limit the processing of your personal information. For example, if you feel our processing is not legitimate or if you want to opt out of certain data uses, let us know. If your jurisdiction provides this right (such as GDPR in the EU), we will evaluate and comply with valid requests. In the U.S., you may specifically have the right to opt out of certain types of data sharing (like not allowing your data to be sold or used for targeted advertising). We already commit not to sell your data, and we provide the ability to opt out of any non-essential data sharing.

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. This means if you choose to exercise rights such as deleting data or opting out of marketing, we will not deny you our Services or provide a different level of service, except as permitted by law. (Keep in mind that deleting certain data might affect our ability to provide some service features, but we will inform you of such consequences if applicable.)

  • Right to Information and Transparency: You have the right to receive clear and transparent information about how we handle your data. This Policy is part of fulfilling that right. If you have any questions about our data practices or the content of this Policy, you can contact us and we will gladly provide additional information. We also will inform you if there is any important change in the way your data is used (see Section 10 regarding updates to the Policy).

  • Right to Lodge a Complaint: If you believe your privacy rights have been violated or you have a concern about our data practices, you have the right to lodge a complaint with a supervisory authority or regulatory agency. For example, in the U.S., you can contact the Federal Trade Commission (FTC). However, we sincerely invite you to contact us first so we can address your concerns directly and promptly – your satisfaction and trust are very important to us.

Exercising Your Rights: You may exercise these rights by accessing your account settings (for certain straightforward requests like correcting your profile or unsubscribing from emails) or by reaching out to us directly. For privacy-specific requests, the fastest way is to email our Privacy Team at [email protected] (if available) or [email protected] with the subject line “Privacy Request”. Please describe your request with sufficient detail so that we can understand and respond. We may need to verify your identity before fulfilling certain requests (to ensure that we do not release or delete the data to the wrong person). Verification might involve confirming information we already have on file or asking for identification. We will respond to your request within a reasonable timeframe, generally within 30 days as required by many regulations, and let you know if we need more time. There is no fee for making a request, though multiple or excessive requests may incur a cost as permitted by law (we will inform you in advance if that is the case).

Please note that some rights may not apply universally. The availability of certain rights can depend on your jurisdiction. We strive, however, to honor the spirit of privacy rights for all our users. If a particular law (like the California Consumer Privacy Act or the EU’s GDPR) applies to your data, we will ensure compliance with those specific requirements in addition to the general rights listed above.

7. Third-Party Sharing and Disclosure

We understand the importance of your personal information and we do not sell your personal data to third parties for their own marketing or profit. Dream Makers is committed to protecting your privacy by limiting how and with whom we share your data. We will never share your personal information with any third parties unless it is in one of the following situations:

  • With Your Consent: We may share your information with third parties if you explicitly ask or consent for us to do so. For example, if you link your Viplus account with a third-party service or participate in a promotion in collaboration with a partner, we will disclose information only with your authorization and inform you what information will be shared.

  • Service Providers (Processors): We use reputable third-party companies to help us operate and improve our Services. These include, for instance, web hosting providers, cloud storage services, payment and banking partners, email delivery services, customer support software, identity verification services, analytics providers, and cybersecurity services. We may share necessary personal information with these service providers but strictly for the purpose of them performing services on our behalf. For example, we might share your email address with an email delivery service to send verification codes, or provide transaction details to a blockchain analytics service for fraud prevention. In all cases, these service providers are contractually obligated to handle your data securely and only for the purposes we specify. They are not permitted to use or disclose your data for their own purposes.

  • Affiliates and Corporate Group: If Dream Makers LLC has affiliate companies or subsidiaries that are involved in providing the Services or are under common ownership/control, we may share information within our corporate family. Any such affiliate receiving your information will abide by terms at least as restrictive as this Policy. For example, if Dream Makers expands and has a U.S. branch and an international branch, data may be shared between them to provide a seamless service, but always under strict privacy and security standards.

  • Legal Requirements and Safety: We may disclose user information when required by law or when we believe in good faith that such disclosure is necessary to (a) comply with a legal obligation, valid subpoena, court order, or regulatory request; (b) enforce our Terms of Use or other agreements; (c) respond to claims or protect our rights, property, or safety, or the rights, property, or safety of our users or the public. For instance, if we receive a lawful request from U.S. law enforcement related to a user’s account (such as an investigation of fraud or other wrongdoing), we may be compelled to provide certain data. We will carefully review each request to ensure it has a proper legal basis and scope. Where allowed, we may notify affected users of such requests.

  • Business Transfers: In the event that Dream Makers LLC undergoes a business transaction such as a merger, acquisition by another company, reorganization, or sale of all or part of its assets, user information (including personal data) may be transferred as part of that deal. This is common when user data is considered a business asset. If such a transfer happens, we will ensure that your personal information remains protected by either requiring the successor entity to honor this Privacy Policy or by obtaining your consent if required by law. We will notify you (for example, via email or a prominent notice on our site) of any change in ownership or use of your personal data as a result of a business transaction, as well as any choices you may have regarding your information in that context.

  • Aggregated or De-Identified Data: We may share aggregated, anonymized information that cannot reasonably identify you with third parties for various purposes (such as industry analysis or research). For example, we could share statistics like “total number of users in 2025” or “percentage of users from each region” with potential partners or on our website. This data will not contain any personal identifiers.

Aside from the situations above, we will not disclose your personal information to any third party. In particular, we do not share your personal details with advertisers or marketing companies without your explicit consent. We also do not engage in selling, renting, or trading email lists or other user information.

When we do share information with third parties as outlined, we apply a “least required” principle – only the minimum necessary information is shared for the intended purpose. We also strive to anonymize or pseudonymize data when possible, especially for analytics or research purposes, so that individuals are not identifiable.

It’s important to note that if you directly disclose information to others through our platform (for example, if our platform includes a public forum, posting content on a blog, or peer-to-peer features where you interact with another user), any information you share in those areas might be visible to other participants. That is governed by those usage settings and not considered us “sharing” your data – rather, you are choosing to share it. Always be careful and avoid posting personal data in any public areas of our site.

If you have any questions about third parties having access to your data, or if you need more specifics about exactly what information has been shared and with whom, feel free to contact us. We maintain records of our data-sharing relationships which you have a right to inquire about (especially if you are in jurisdictions like California, which have “Shine the Light” laws enabling you to request disclosures about certain categories of data shared).

8. Security Measures

We take security very seriously and have implemented a range of technical and organizational measures to safeguard your personal information and digital assets. Our goal is to protect data against unauthorized access, alteration, disclosure, or destruction. Key security measures in place include:

  • Encryption: All communications between your browser/app and our servers are encrypted via SSL/TLS (indicated by the “https” in our URL), protecting data in transit from eavesdropping. Sensitive data (like passwords, private keys, and identity documents) is encrypted at rest in our databases or storage systems. We utilize strong encryption algorithms and key management practices to ensure that even if data were accessed, it would be unintelligible without the decryption keys.

  • Access Controls: We restrict access to personal data strictly to authorized personnel who need it to perform their job duties. Staff access to sensitive information is controlled through role-based access controls and multi-factor authentication. All employees, contractors, and agents with such access are bound by confidentiality obligations. We regularly review and update permissions to uphold the principle of least privilege (everyone gets the minimum access necessary).

  • Authentication and Account Security: User accounts are protected by password authentication, and we require strong passwords. We also offer (and strongly encourage using) two-factor authentication (2FA) for account logins, adding an extra layer of security beyond just a password. Our systems monitor login attempts and will trigger security challenges or locks if suspicious activity is detected (such as many failed logins or login from a new device).

  • Network and System Security: Our servers and infrastructure employ firewalls, intrusion detection systems, and regular security patching to defend against external attacks. We keep our software and frameworks up to date to mitigate vulnerabilities. We also use anti-malware and monitoring tools to detect and block any malicious activities. Regular data backups are performed and stored securely (with encryption) to prevent data loss, and in case of any system failure we can restore data integrity.

  • Audits and Testing: We conduct periodic security audits, vulnerability assessments, and penetration testing (sometimes via independent third-party security firms) to evaluate the strength of our security posture. Any identified issues are promptly addressed. We also comply with security standards and best practices relevant to our industry. For instance, handling of payment information (if any) is done in line with PCI-DSS standards; handling of personal data is done in line with frameworks like NIST or ISO27001 guidelines for information security management where feasible.

  • Organizational Policies: Dream Makers maintains internal policies such as a Data Protection Policy and Incident Response Plan. Our team members are trained on these policies and on privacy/security best practices regularly. We limit the personal devices that can access our systems and enforce the use of security measures like device encryption and secure VPNs for remote connections. We also vet our service providers for strong security practices before engaging them (as mentioned in Section 7).

  • Physical Security: Where applicable, any facilities housing our servers (including cloud data centers we use) employ physical security controls. This may include 24/7 security personnel, CCTV surveillance, biometric or badge entry systems, and secure server cabinets. While we rely mostly on cloud infrastructure, we ensure that our cloud providers have robust physical and environmental security in place.

  • Data Minimization: We adhere to the principle of data minimization – we only collect data that we need (as described in Section 2) and we don’t keep data longer than necessary. By reducing the amount of data stored and the duration of storage, we limit the risk exposure in the event of any security issue.

  • Incident Response: Despite all preventive measures, no system is immune to 100% of risks. We have an incident response plan such that if a security breach or data incident were to occur, we can respond swiftly and effectively. This includes procedures to contain the incident, mitigate any harm, investigate the root cause, and notify affected users and authorities as required by law. In the unfortunate event of a data breach that affects your personal information, we will notify you in a timely manner (consistent with applicable breach notification laws) and provide information on steps we are taking and any steps you might need to take to protect yourself.

By implementing the above measures, we aim to create a safe environment for your data. We also remind users that you are a critical participant in security. Remain vigilant against common risks like phishing attacks – we will never ask for your password via email, and any communication from us will come through official channels. If something seems suspicious, double-check the sender or contact us through our official website. When using the Services, especially on shared or public networks, exercise caution (e.g., always log out after your session).

We are committed to continually enhancing our security as threats evolve. Your trust is our priority, and we invest heavily in protecting it. If you have specific questions about our security practices or need to report a security concern, please reach out to our security team at [email protected] (or through our support contacts).

9. Cookies and Tracking Policy

Like most websites and online services, we use cookies and similar tracking technologies to improve your experience and gather information about how our site is used. This section explains our use of cookies and what options you have.

What Are Cookies: Cookies are small text files that websites place on your computer or mobile device when you visit them. These files allow a website to recognize your device and remember your preferences or actions over time. Cookies serve various purposes: some are essential for site operation, while others help personalize content, remember settings, or analyze site traffic. We also may use related technologies like web beacons (pixel tags) which are tiny graphics embedded on pages or emails that track if you’ve opened an email or visited certain content.

How We Use Cookies: Viplus.org uses cookies to facilitate and enhance your user experience in several ways, including:

  • Essential Cookies: These are necessary for the website and Services to function properly. For example, when you log in, we set an authentication cookie so you can stay logged in as you navigate between pages. Essential cookies also help us enforce security (such as keeping you logged out after repeated failed login attempts) and enable core functionalities like your account portal. Without these cookies, certain services you’ve asked for (like maintaining your logged-in session or initiating transactions) cannot be provided.

  • Preference Cookies: We use these to remember your preferences and settings. For instance, a cookie might remember your chosen language or region, so we show content in your preferred language. It could also remember interface customizations or whether you’ve seen certain notices so as not to show them again. This makes your experience more tailored and convenient.

  • Analytics Cookies: We use analytics tools (such as Google Analytics or similar) that set cookies to collect information about how users interact with our site. This information includes things like which pages are visited, how long users stay, how they arrived at our site, and what features are used. We use these insights to understand usage patterns and improve our Services. The data collected is typically aggregated and does not directly identify individual visitors. For example, analytics cookies might tell us that 1,000 users visited our “Token Sale” page in a week, or that a certain feature is rarely used, guiding us to make improvements.

  • Functional Cookies: In some cases, we may use cookies to enable additional functionality. For example, if we integrate with social media or have a feature that remembers some choices you make within the service beyond basic preferences, cookies help enable those features.

  • Advertising and Tracking Cookies: At this time, we do not display third-party ads on Viplus.org. However, if in the future we engage in any advertising or affiliate programs, cookies might be used to track the effectiveness of ad campaigns or to deliver ads relevant to your interests on other sites. We would update this Policy and provide appropriate disclosures if such cookies come into use. Generally, these cookies would collect information about your browsing habits in order to make advertising more relevant to you. If we implement them, we will also provide you a mechanism to opt out. Currently, any references to advertising cookies are just for completeness; by default, we focus on essential and analytics cookies.

Third-Party Cookies: Some cookies on our site may be placed by third-party services we use. For example, as mentioned, analytics providers like Google Analytics set their own cookies to provide us with traffic data. Similarly, if we have content from other platforms (like an embedded video from YouTube or a social media “share” button), those platforms might set a cookie when you interact with that content. We ensure that we only partner with third parties that have robust privacy practices, and these third-party cookies are governed by the third parties’ own privacy/cookie policies. We recommend reviewing those (e.g., Google’s Privacy Policy for analytics cookies) if you want more information on their practices.

Your Choices: You have the right to control or limit how we and third parties use cookies and tracking:

  • Browser Settings: Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies or alert you when a cookie is being placed on your device. Please note that if you disable cookies entirely, our website may not function properly for you – for example, you may not be able to log in or use certain features that rely on cookies. However, you can typically disable non-essential cookies (like analytics) without impacting core functionality.

  • Cookie Banner/Preferences: When you first visit Viplus.org, you may see a cookie notification or banner (especially if required by law). We will use that to obtain any necessary consent for non-essential cookies. You might have an option to manage your cookie preferences through that interface, allowing you to opt in or out of certain categories of cookies.

  • Opt-Out Options: For third-party analytics and tracking cookies, there are opt-out mechanisms provided by those service providers. For instance, Google offers a browser add-on to opt out of Google Analytics tracking. If we send marketing emails with tracking pixels, you can opt out of receiving those emails by unsubscribing. If we ever use cookies for advertising, we will respect “Do Not Track” signals or provide an opt-out link in the AdChoices program as applicable.

  • Do Not Track: “Do Not Track” (DNT) is a setting you can enable in some browsers to signal that you do not want to be tracked across websites. The internet industry is still working on standardizing how to respond to DNT signals. Currently, we do not respond differently to browsers with DNT signals. Instead, we provide the privacy options described here. If a standard for DNT is established and accepted, we will update our practices accordingly.

Cookie Policy Updates: Our use of cookies may evolve as our Services change or new laws come into effect. We maintain a separate Cookie Policy page with more detailed information on each cookie and its purpose (if required). For now, we include the essential details here to keep you informed. If you’d like more details on specific cookies we use, please see the Cookie Policy or contact us.

By using our site without disabling non-essential cookies, you consent to our use of cookies as described in this section. However, you are free to adjust your cookie settings at any time. We value your right to privacy and are happy to answer any further questions about our tracking practices.

10. Compliance with U.S. Law and Dispute Resolution

Compliance with U.S. Laws: Dream Makers LLC is based in and operates under the jurisdiction of the United States of America, and we are committed to complying with all applicable U.S. federal and state laws regarding privacy, data protection, and digital services. This includes laws such as the Children’s Online Privacy Protection Act (COPPA) – we do not knowingly collect information from children under 13, in compliance with COPPA’s requirements – and the California Consumer Privacy Act (CCPA) for California residents, among others. If you are a California resident, for example, you are entitled to specific disclosures and rights regarding your personal information; this Policy is designed to satisfy those requirements (see Section 6 for how you can exercise your rights). We also adhere to regulations pertinent to financial services and digital assets (such as Anti-Money Laundering laws and guidance from regulatory bodies like FinCEN, SEC, or CFTC as applicable) to ensure we handle both data and assets lawfully and responsibly.

Our privacy practices take into account internationally recognized principles as well, but this Policy is focused on U.S. law. If we become subject to other international laws (for example, the EU’s GDPR for any EU users), we will take steps to comply with those as needed, possibly via separate addendums or notices. We continually monitor legal developments in privacy and cybersecurity and update our policies and operations to remain compliant.

Dispute Resolution: We are committed to working with you to fairly resolve any concerns about privacy or the handling of your personal data. If you have a complaint, question, or dispute regarding this Privacy Policy or our practices, please contact us first at [email protected] or [email protected]. Provide as much detail as possible about your issue, and we will investigate and attempt to resolve the matter. Our team will respond within a reasonable time and work in good faith to address your concerns. Most issues can be resolved quickly through our support channels.

In the event that we cannot mutually resolve a privacy or data use concern, and you wish to pursue further action, the following terms apply: Any dispute, claim, or controversy arising out of or relating to this Privacy Policy or our handling of your personal information shall be governed by the laws of the United States and, to the extent not preempted by federal law, the laws of the State in which Dream Makers maintains its primary U.S. place of business (without regard to conflict of law principles). By using our Services, you agree that any such disputes will be exclusively subject to the jurisdiction of the courts of that State or federal courts of the United States, as applicable, unless we mutually agree to an alternative method of dispute resolution (such as arbitration). We reserve the right to require that certain disputes (especially those that might be brought as class actions) be resolved through binding arbitration on an individual basis, as will be detailed in our Terms of Use. If our Terms of Use contain a dispute resolution clause (like an arbitration agreement or class action waiver), that clause will also apply to disputes relating to this Privacy Policy, as permitted by law.

For example, if Dream Makers LLC’s principal office is in California, any disputes would fall under California law and be brought in the appropriate state or federal court located in California, unless arbitration is invoked. We mention this jurisdiction information to be transparent and to comply with U.S. legal standards about giving notice of governing law in policies and agreements.

Regardless of the forum, our goal is to resolve issues to your satisfaction. You will not be required to waive any of your legal rights or remedies, and this section is not intended to limit rights that cannot be limited by law. It mainly clarifies how we handle legal disputes if they arise. If you are a consumer entitled to protections under certain laws (for instance, specific state laws that provide for alternate dispute resolution or venue), those protections still apply.

Changes and Updates to This Policy: (We include this here as part of compliance.) We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will post the updated Policy on our website with a new “Last Updated” date. If the changes are significant, we will provide a more prominent notice (such as a banner on the site or an email notification). We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after any update constitutes your acceptance of the revised terms.

Contact Information: If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you can contact us at:

  • Email: [email protected]

  • Postal Mail: Dream Makers LLC – Privacy Department, [Euro House, Richmond Hill Road, Kingstown, St. Vincent and the Grenadines]

Chia sẻ