This Privacy Policy ("Policy") explains how Crypto Dapp ("Crypto Dapp," "we," "us," or "our") collects, uses, and protects information when you access or interact with the Crypto Dapp decentralized application (the "Dapp") through cryptod.app, our smart-contract interfaces, APIs, Telegram bot, and related services (collectively, the "Platform").
Sign-in is by one-time email code (OTP); we do not store passwords.
By accessing or using the Platform, you consent to the practices described in this Policy.
1. Information We Collect
When you interact with the Platform, we may collect the following categories of information:
1.1 Wallet & Transaction Data
- Public blockchain wallet addresses you connect to the Platform (EVM and Solana).
- Token balances and positions of those wallets, fetched from a third-party indexer for portfolio display.
- The transaction hash, source chain, source asset, amount, and timestamp of each $OBS purchase.
Note: On-chain $OBS purchases are signed by the wallet you connect and broadcast directly to the blockchain. We do not custody funds or hold private keys. Blockchain transactions are public, immutable, and viewable by anyone via the blockchain ledger — we cannot delete, alter, or hide such data.
1.2 Account & Profile Information
- Your email address, used for sign-in (OTP) and service notices.
- Display name, bio, and profile avatar you choose to set.
- Referral codes you use or share with others.
- Notification preferences and communication settings.
1.3 Social Connection Data
- Telegram username and Telegram user ID when you link your Telegram account.
- Twitter / X handle and user ID when you link your X account.
- LinkedIn profile URL and identifier when you link your LinkedIn account.
- Referral relationships and engagement-program participation data.
1.4 Technical & Usage Data
- IP address (last known IP stored for security purposes), browser type, operating system, device identifiers, pages visited, access times, and interactions with the Platform interface.
- Session information and sign-in activity.
1.5 Program Participation Data
- Partner listings and project submissions.
- Support, bug-bounty, and job-application messages handled through our customer-support provider.
- Loyalty program tier status, $OBS ledger entries, and rewards history.
1.6 Cookies & Similar Technologies
- We use a minimal set of strictly-necessary and first-party analytics cookies and local-storage keys. See our Cookies & Tracking page for the complete inventory.
2. How We Use Your Information
We may process collected data for:
2.1 Service Delivery & Improvement
- Enabling $OBS purchases and crediting your account once a payment is confirmed on-chain.
- Displaying your linked-wallet portfolio overview.
- Personalizing your experience based on wallet activity and preferences.
- Managing loyalty program tiers, rewards, and referral benefits.
- Monitoring Platform performance, troubleshooting issues, and improving functionality.
2.2 Communication
- Responding to inquiries, providing customer support, and sending service-related notices.
- Sending lifecycle and transactional emails about purchases, rewards, and program updates.
2.3 Security & Fraud Prevention
- Detecting and preventing unauthorized activities, abuse, or malicious behavior.
- Processing and validating bug-bounty submissions.
2.4 Legal Compliance
- Meeting obligations under applicable laws, regulations, or legal processes.
3. Data Security & Retention
We implement appropriate technical and organizational measures to safeguard information from unauthorized access, alteration, or disclosure. Personally identifiable data is protected by row-level security policies enforced at the database layer.
- Self-Custody Reminder: We do not store your private keys, seed phrases, or wallet passwords. You are solely responsible for securing your blockchain credentials.
- We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, unless longer retention is legally required.
- Wallet-balance data is refreshed periodically and cached only for as long as needed to display your portfolio overview.
4. Sub-Processors & Third-Party Disclosure
To operate the Platform we share strictly the data each provider needs with the following sub-processors:
- Supabase — application database, authentication (email OTP), and edge-function hosting.
- Reown (AppKit / WalletConnect) — wallet-connection infrastructure.
- LI.FI — cross-chain payment routing for $OBS purchases.
- Zerion — multi-chain wallet balance and position reads.
- Alchemy — blockchain RPC and on-chain settlement webhooks.
- Meld — third-party fiat on-ramp for card payments (where available).
- Intercom — customer support inbox, Fin AI assistant, partner / bug-bounty / job tickets.
- Customer.io — transactional and lifecycle email delivery.
- Amplitude — first-party product analytics (anonymous device + page-view telemetry).
- Resend — SMTP relay used exclusively for Supabase Auth one-time-code emails.
- Authorities or regulators when required by law.
These third parties are bound to use your information only for authorized purposes.
5. Your Choices & Rights
Depending on your jurisdiction, you may have rights to:
- Request access to the personal data we hold about you.
- Request corrections or deletion of your personal data (excluding immutable blockchain records).
- Object to or restrict certain processing.
- Disconnect social accounts and remove linked Telegram, Twitter / X, or LinkedIn data.
- Update your notification preferences and communication settings.
- Unsubscribe from lifecycle email via the link in any message you receive.
To exercise these rights, contact us at support@cryptod.app.
6. Updates to This Policy
We may update this Policy periodically. Updates will be posted on the Platform with a revised "Last Updated" date. Continued use of the Platform after changes indicates acceptance of the updated Policy.
7. Contact Us
If you have any questions, concerns, or privacy-related requests, email support@cryptod.app.