Privacy notice for Civitas and Arena

Who we are

Rome Network Corp., a Panama corporation, operates Civitas and Arena and decides why and how personal data is used for these services.

In this notice, “Rome”, “we” and “us” mean Rome Network Corp.

What we collect

Civitas

We process public wallet addresses, blockchain activity, NFT-related information and the Laurels and activity records associated with wallets.

This can include public blockchain information about people who have not visited Civitas. Anyone can look up a wallet’s public Civitas record.

Arena

Depending on how you use Arena, we process:

• Sign-in information, including an email address or connected wallet.
• Linked wallets and messages signed to verify control.
• Profile names, biographies, links and linked social accounts.
• Public posts submitted for verification.
• App descriptions, contracts, deployment transactions and evidence of activity.
• Team membership, invitations and referrals.
• Milestones, ranks, grant applications and decisions.
• Ambassador activities and their supporting information.
• Messages and requests you send to Rome.

We also derive records from this information, including activity totals, progress and internal assessments used by the Rome team.

Technical information

We process technical information needed to operate and protect the services, such as network addresses, browser information, requests, errors and session information.

The services use cookies or browser storage for functions such as sign-in, wallet preferences and referrals. Civitas and Arena do not use analytics or advertising tracking. Analytics in the wallet connector are disabled.

Information from other sources

We receive information from public blockchains, connected accounts, public posts and information submitted by other users, such as team invitations or referrals.

Claim verification

Identity verification will be required at claim. Before collecting identity documents or other claim-verification information, Rome will explain what is required, why it is used and who receives it.

Do not post identity documents in a public channel.

Why we use it

We use personal data to:

• Operate Civitas and Arena.
• Sign people in and verify control of linked accounts or wallets.
• Record and display activity, Laurels, app progress and public profiles.
• Handle team membership, invitations and referrals.
• Assess applications and submitted activities.
• Detect errors, abuse and unauthorised access.
• Answer requests and communicate about the services.
• Meet legal obligations and handle disputes.

Automated processes help calculate activity and progress. Rome also uses internal assessments to support its team’s decisions. An internal assessment does not itself grant a benefit.

Where applicable law requires a legal basis, we rely on the basis appropriate to the purpose: performing an agreement with you, complying with law, your consent or legitimate interests where that basis is permitted.

Those interests include operating the services, maintaining accurate records and preventing abuse. They remain subject to applicable rights and safeguards.

Public availability does not remove the protections that applicable privacy law gives to personal data.

Where we rely on consent, you may withdraw it. Withdrawal does not make earlier lawful processing unlawful.

What other people can see

Civitas makes wallet activity, Laurels records and leaderboard information public.

Public Arena profiles can show a name, biography, links, a linked social handle, roles, apps and an NFT-holder badge. They do not display your sign-in email, linked-wallet list or personal Laurels total.

Public app pages can show app information, progress, rank and listed contracts. Blockchain links may reveal transactions and deploying wallets.

Information that is not displayed on a public profile may still be inferred from public blockchain records or material you publish elsewhere.

Grant applications, internal assessments and private submission details are available to authorised people who need them to operate the services. App team members may see information needed to manage their app.

Who handles it for us

We use service providers for hosting, email delivery, software maintenance and other functions needed to run the services. They receive information needed for those functions.

Service data is hosted in Finland, in the European Union. Email delivery, other services and authorised access may involve processing elsewhere. Hosting in Finland does not mean that all processing stays in the European Union.

Where personal data crosses borders, Rome must meet the requirements that applicable law places on that transfer.

Wallets, social platforms and other services you choose to use may process information for their own purposes under their own privacy notices.

Rome does not sell personal data.

We may disclose information to professional advisers or authorities where needed to comply with law, protect legal rights or investigate abuse. Information may also be disclosed in connection with a corporate transaction, subject to applicable confidentiality and privacy requirements.

Before collecting information for claim verification, we will provide further information about the organisations involved and their roles.

How long we keep it

We keep personal data for as long as needed for the purposes described here, subject to legal requirements.

The relevant factors include whether an account remains active, whether a programme or application is still being administered, and whether information is needed to address abuse, legal obligations or disputes.

Signing out does not delete your account or records.

After account deletion, copies remain in server logs and restricted backups until they are replaced through normal operations. Information retained for legal or dispute-related reasons is not kept for unrelated uses.

We will explain retention for claim-verification information before collecting it.

Blockchain data cannot be deleted by Rome

Rome cannot change or delete public blockchain records. Other people may also retain copies of public information.

That does not remove your rights concerning personal data Rome holds or controls outside the blockchain. We assess requests concerning those records separately.

Your choices

Depending on the law that applies, you may have rights to access, correct or delete personal data; receive a portable copy; object to or restrict processing; or withdraw consent.

You can delete your Arena account from your account page. You must have signed in recently with a fresh email code or wallet signature and type DELETE to confirm. Deletion takes effect immediately and ends all your Arena sessions.

Account deletion removes your email address, linked wallets, linked social handle, profile name, biography and links, team memberships, your Arena Laurels, your activities, and your pending and declined grant applications. Copies remain in server logs and backups as described above.

If an app you own has other team members, ownership in Arena passes to the longest-standing member and the app stays. If you are its only team member, the app is deleted from Arena. Contracts on public blockchains remain.

Approved grant decisions and Laurels an ambassador earned for referring you remain, with their link to you removed.

For access, correction or anything account deletion does not cover, start a request through Discord. The Rome team handles these requests manually. Do not put sensitive information in a public channel. The team will arrange private handling of your request.

We may ask for information reasonably needed to verify your identity and locate the relevant records. We handle requests within the periods required by law.

If we cannot fulfil a request, we will explain the reason and any applicable way to challenge the decision.

Civitas has no accounts. Deleting your Arena account does not remove Civitas Laurels or activity records calculated from public blockchain data, or stop future processing of that activity. You may separately object to that processing or request its restriction where applicable law provides those rights.

Clearing cookies or browser storage may sign you out or remove preferences. It does not delete information held by Rome.

You may complain to Panama’s data-protection authority or another competent authority. You do not have to contact Rome before exercising that right.

Age

The services are intended for adults with legal capacity to use them.

If we learn that a child has submitted personal data through an account, we will assess and restrict or remove it as required by applicable law.

Contact Rome if you believe a child has submitted personal data.

Changes

We may update this notice by publishing a replacement.

We will provide any notice required by law and obtain consent where required before using personal data in a materially different way.

Contact

Contact Rome Network Corp. through Discord about this notice or your personal data.