Privacy Policy

1. Introduction

DeFi Guardian ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our interface (the "Interface"). We value transparency and are dedicated to operating a non-custodial service that respects user anonymity while delivering critical monitoring alerts.

2. Information We Collect

We minimize data collection to the absolute essentials required to provide our service.

A. Personal Information

We may collect contact information you voluntarily provide, such as your email address, Discord handle, or Telegram username, solely for the purpose of sending you the alerts you configure. We do not sell this information.

B. Blockchain Data

When you connect your wallet to the Interface, we collect your public wallet address and interactions with smart contracts. This data is publicly available on the blockchain. We do not link this public data to your verified identity unless you explicitly provide such details.

C. Technical Data

We may automatically collect standard technical data, including your IP address, browser type, and device information, to monitor Interface health, prevent DDoS attacks, and improve performance.

3. How We Use Information & Legal Bases (GDPR)

We process your personal data under the following lawful bases:

• Performance of Contract: To provide the Interface services and deliver the alerts you have configured.
• Legitimate Interests: To ensure the security of the Interface, prevent fraud/abuse, and improve our services.
• Consent: Where explicitly required (e.g., for optional marketing communications), which you can withdraw at any time.
• Legal Obligation: To comply with applicable laws and regulations.

4. Sharing and International Transfers

We do not sell your personal data. We share data only with trusted third parties acting as processors under our instructions:

• Subprocessors: We utilize third-party vendors for:
  • Hosting and Infrastructure (e.g., Vercel, AWS).
  • Database Services (Supabase) for storing account data, positions, and alert configurations.
  • Email and Notification Delivery (e.g., SendGrid, Telegram API).
  • Cryptocurrency Payment Verification (on-chain transaction verification via public RPC nodes).
  • Analytics (e.g., simple anonymous session tracking).
• International Transfers: Your data may be transferred to and processed in countries outside your residence (e.g., the United States). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data during such transfers.
• Blockchain Nodes: Your transactions must be broadcast to public RPC nodes to be executed on-chain.

5. Data Retention

We retain data only as long as necessary:

• Contact Info: Retained only while your alert subscriptions are active. Deleted immediately upon unsubscribing.
• Technical Logs: Retained for a limited period (e.g., 30 days) for security auditing and debugging, then deleted.
• Account Data: Your monitored positions, alert configurations, automation rules, and billing records are retained while your account is active. Upon account deletion, all personally identifiable data is purged within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.

6. Your Rights (GDPR & CCPA)

Depending on your location, you have rights regarding your data:

• Access & Portability: Request details of data we hold about you.
• Correction & Deletion: Request correction or total deletion of your personal data ("Right to be Forgotten").
• Opt-Out: We do not "sell" or "share" personal data as defined by CCPA/CPRA. You may opt out of unnecessary processing.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

7. Cookies and Tracking

We use minimal cookies strictly necessary for the operation of the Interface (e.g., session state). We do not use third-party advertising cookies. We honor Global Privacy Control (GPC) and "Do Not Track" signals where applicable.

8. Security and Breach Notification

We implement commercially reasonable security measures. However, no system is immune. In the event of a security breach that compromises your personal data, we will notify you and appropriate authorities as required by applicable law without undue delay.

9. Children's Privacy

Our Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this page periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us via email atprivacy@defiguardian.fi.