Legal
Privacy Policy
This policy explains what information we collect when you use Degxifi, why we collect it, who we share it with, and the controls you have. We try to keep it short and plain.
1. What we collect
- Account info. Email address and a display name when you sign up. If you set up sign-in via a third-party provider (e.g. Privy), we receive whatever profile fields that provider returns to us.
- Wallet info. Solana wallet address(es) you connect or that are created for you, and on-chain transactions you initiate through the Service. On-chain data is, by its nature, public.
- Payment info. When you deposit or withdraw, we receive payment status, amounts, and tx hashes. We do not receive or store your card number, bank credentials, or exchange passwords.
- Usage and device info. Pages you view, actions you take, timestamps, IP address (used for security and abuse prevention), browser and OS strings, and basic device fingerprinting for fraud detection.
- Support correspondence. Emails and messages you send to support, and our replies.
2. What we do with it
- operate, secure, and improve the Service;
- execute the trades, deposits, withdrawals, and rebalances you authorize;
- show you accurate balances, PnL, fees, and history;
- detect, investigate, and prevent fraud, abuse, and breaches of our Terms;
- comply with legal obligations and respond to lawful requests;
- send you transactional emails (for example, deposit confirmations or security alerts) and, if you opt in, occasional product updates.
3. Who we share it with
We share only what is necessary, and only with the following kinds of recipients:
- Infrastructure providers we use to run the Service — database hosting, queue / cache providers, error tracking (Sentry), email delivery, analytics, and Solana RPC providers.
- Authentication and wallet providers such as Privy, which hold the embedded wallet keys on your behalf under their own terms.
- Payment partner NowPayments, for fiat-on / off-ramp and crypto deposits / withdrawals.
- Protocols you transact with on Solana — for example Meteora and Jupiter — receive whatever data is necessary to execute the transaction. On-chain data is public.
- Authorities when a valid legal request requires us to produce records.
We do not sell your data, and we do not share it with advertisers for retargeting.
4. How long we keep it
We keep account and transaction data for as long as your account is active, and for a reasonable period afterwards to satisfy legal, accounting, fraud, and dispute-resolution needs. Aggregated and anonymized data may be retained indefinitely.
5. Your choices
- You can update your name and basic profile fields in Settings.
- You can withdraw your funds and close your account at any time.
- You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where the law gives you that right, by emailing the address at the bottom of this page.
- You can unsubscribe from marketing emails (if you opted in) using the link in the email; transactional emails will keep coming as long as you have an account.
Note: anything that has settled on the Solana blockchain is public and irreversible — we cannot delete it on your behalf.
6. Security
We use TLS in transit, encryption at rest for sensitive fields, scoped access controls, audit logging, and provider-managed secrets. No system is perfectly secure. If we detect a security incident that affects your data, we will notify you in line with applicable law.
7. Children
The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
8. Changes
We may update this policy. If a change materially affects you, we will notify you in the app or by email before it takes effect.
9. Contact
Privacy questions or data requests: support@degxifi.com.