Description:
If we store real names or emails linked to wallet addresses, this is sensitive PII. It must be encrypted in the database.
Acceptance Criteria:
[ ] Use AES-256 encryption before saving to the email column.
[ ] Decrypt on-the-fly only when sending notifications.
Labels: security, privacy