Privacy Policy

1. Introduction

OnChainProof ("we", "us", or "our") operates the website onchainproof.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. By accessing or using the Service, you agree to the terms of this Privacy Policy.

OnChainProof is operated by OnChainProof Labs Ltd., a company incorporated in the British Virgin Islands (Company No. 2087341), with its registered address at Craigmuir Chambers, Road Town, Tortola, VG1110, British Virgin Islands.

2. Information We Collect

2.1 Information You Provide

• Account registration data: email address, username, hashed password
• Public Solana wallet addresses you voluntarily connect
• Communication data: support inquiries, feedback, and survey responses
• Payment information processed by third-party payment providers (we do not store card details)

2.2 Information Collected Automatically

• Device and browser information (type, version, operating system)
• IP address and approximate geolocation (country/region level)
• Usage data: pages visited, features used, click patterns, session duration
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referral source and campaign parameters

2.3 Blockchain Data

We index publicly available on-chain data from the Solana blockchain, including transaction histories, token balances, and DEX trading activity associated with public wallet addresses. This data is inherently public and is not considered personal information unless linked to your account.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To create and manage your account
• To generate on-chain analytics, leaderboards, and trade signals
• To send you transactional emails (account verification, password resets, alerts)
• To send marketing communications (only with your explicit opt-in consent)
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with legal obligations and respond to lawful requests
• To analyze usage patterns and optimize user experience

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds:

• Contract performance: processing necessary to provide our Service to you
• Legitimate interests: analytics, fraud prevention, and service improvement
• Consent: marketing communications, non-essential cookies
• Legal obligation: compliance with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: hosting (Vercel), email delivery (Resend), analytics (Vercel Analytics), payment processing (Stripe)
• Blockchain data providers: Birdeye API for on-chain data indexing
• Legal authorities: when required by law, regulation, or legal process
• Business transfers: in connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for up to 90 days for backup and fraud prevention purposes. Anonymized analytics data may be retained indefinitely. On-chain data indexed from public blockchains is retained as part of our analytics database.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Restriction: limit how we process your data
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw previously given consent at any time

To exercise any of these rights, contact us at privacy@onchainproof.io. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We use industry-standard safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to protect data transferred internationally.

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS 1.3), hashed passwords (bcrypt), access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@onchainproof.io
• Entity: OnChainProof Labs Ltd.
• Address: Craigmuir Chambers, Road Town, Tortola, VG1110, BVI