Privacy Policy

At Redacted, privacy is not just a feature—it's our core mission. This Privacy Policy explains how we handle your information when you use our privacy-focused trading platform.

Key principle: We cannot access, view, or control your funds or private keys. We design our systems to minimize data collection and maximize your anonymity.

We use the minimal information we collect to:

• Provide and maintain the Service (authentication, session management)
• Execute automated trade exits based on your configured conditions
• Recover your account in case you forget your username (via email)
• Improve the Service's reliability and performance
• Detect and prevent security threats or abuse
• Comply with legal obligations (only if legally required)

We never use your data for advertising, profiling, or sale to third parties.

We implement industry-standard security measures to protect your data:

• AES-256 encryption: Your master seed is encrypted with your password using AES-256-CBC. We store only the encrypted version.
• Password hashing: Passwords are hashed using bcrypt with high iteration counts. We never store plaintext passwords.
• JWT authentication: Short-lived access tokens (15 minutes) and refresh tokens (7 days) for secure session management.
• Database encryption: All sensitive data is encrypted at rest in our PostgreSQL database.
• HTTPS/TLS: All communication between your browser and our servers is encrypted using TLS 1.3.

Despite these measures, no system is 100% secure. You are responsible for keeping your credentials safe.

All blockchain transactions are public and permanent. Redacted enhances your privacy by:

• Generating fresh ghost wallets for each trade (unlinkable on-chain)
• Breaking transaction linkability through relay mechanisms (planned)
• Using Jupiter aggregator to minimize on-chain footprints
• Burning wallets after use to prevent future identification

Important: While Redacted provides strong privacy guarantees, blockchain analysis can potentially de-anonymize transactions if combined with other data sources. Use the Service responsibly and understand the limits of on-chain privacy.

We retain your data for as long as your account is active. You can request account deletion at any time by:

• Contacting us via Twitter/X DM
• Using the account deletion feature (coming soon)

Upon deletion, we will:

• Permanently delete your encrypted seed and all account data
• Remove all personal information from our databases
• Retain anonymized analytics for up to 90 days for service improvement

Note: Blockchain transactions are permanent and cannot be deleted.

We integrate with the following third-party services:

• Helius (Solana RPC): Broadcasts transactions to the Solana blockchain. Helius may log IP addresses and transaction data.
• Jupiter API: Provides swap quotes and routing. Jupiter receives token addresses and amounts but not your identity.
• DexScreener: Fetches token prices and metadata. No personal data is shared.
• Railway (hosting): Hosts our backend infrastructure. Subject to Railway's privacy policy.

We carefully select providers that respect user privacy. However, we are not responsible for their data practices. Review their privacy policies independently.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request account and data deletion
• Portability: Export your data in a machine-readable format
• Objection: Object to certain data processing activities

To exercise these rights, contact us via @RedactedWallet on Twitter/X.

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy periodically. Material changes will be notified through the Service or via email. The "Last updated" date at the top indicates when this policy was last revised.

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy:

• Twitter/X: @RedactedWallet