Privacy Policy

This policy describes what [COMPANY NAME] ("we", "us") collects when you use Saphire, and why. Saphire is a non-custodial platform — we never hold your private keys or your funds, which limits what we ever have to collect in the first place.

Wallet addresses you connect or generate, and signatures used to prove you control them (Sign-In With Ethereum and the equivalent linking flow for Bitcoin/Tron wallets).

Contact information you choose to give us: an email address, if you add and verify one, used only for account notifications you opt into.

Transaction records: on-chain trades, sends, and fiat/cross-chain swap orders you initiate are logged for compliance purposes (see "Why we log activity" below). We do not custody the underlying funds at any point.

Standard technical data (IP address, browser/device information, timestamps) collected automatically for security and fraud-prevention purposes.

As a business operating in a regulated space, we're required to maintain records of account activity for compliance and audit purposes. Every login, trade, and fiat/swap order is written to an append-only audit trail that is never deleted, matching standard practice for regulated financial platforms.

Our fiat on/off-ramp provider, if you buy or sell crypto with fiat currency — they receive the information necessary to process that order.

Market data and blockchain infrastructure providers (e.g. price feeds, RPC nodes, block explorers) that we query to display balances and prices. These providers typically only see wallet addresses, not your identity.

We do not sell your data to anyone.

We use a single session cookie to keep you signed in after you sign a wallet message, and a short-lived cookie during the sign-in process itself to prevent replay attacks. We don't use third-party advertising or tracking cookies.

You can view and update your profile information at any time from Settings, and view your linked wallets and account activity from Security. You may request a copy of, or deletion of, the personal data we hold about you (subject to our regulatory obligation to retain compliance records for a minimum period) by contacting us at [PRIVACY CONTACT EMAIL].

Compliance-relevant records (audit trail, transaction logs) are retained for the period required by applicable regulation. Other profile data is retained until you request deletion or close your account.

Questions about this policy can be sent to [PRIVACY CONTACT EMAIL].