Privacy Policy

1. Scope

This Policy applies to information collected through:

• our websites and applications
• wallet connections and interactions
• AI-powered features and agents
• analytics and telemetry
• communications with us

This Policy does not apply to:

• public blockchain data recorded on decentralized networks
• third-party websites, wallets, protocols, or services (e.g., Uniswap, Doppler, Farcaster, Anthropic)
• content you make publicly available

1A. Geographic Restrictions

The Platforms are not intended for users in:

• North Korea
• Iran
• Syria
• Cuba
• Russia
• Crimea, Donetsk, and Luhansk regions
• Other OFAC-sanctioned territories

We may use IP-based geoblocking and decline to process data from restricted regions.

2. Information We Collect

2.1 Information You Provide

We may collect information you voluntarily provide, including:

• email address
• username or display name
• messages, feedback, or support requests
• application content and configurations
• other information you choose to provide

You are not required to provide real names to use the Platforms.

2.2 Wallet & Blockchain Information

When you connect a wallet or interact with blockchain features, we may collect:

• public wallet addresses
• blockchain network identifiers
• transaction hashes initiated through our interfaces

2.3 Automatically Collected Information

We may automatically collect certain information, including:

• IP address
• device type, browser, and operating system
• usage data (pages viewed, actions taken)
• timestamps and system logs
• error reports and crash data

This information is used for security, analytics, and platform improvement.

2.4 Cookies & Similar Technologies

We may use cookies, local storage, or similar technologies to:

• remember preferences
• improve performance
• understand usage patterns
• prevent fraud and abuse

You can control cookies through your browser settings.

2.5 AI App Generation Data

When you create applications using Minidev credits:

• We process your prompts using our platform API keys with third-party AI providers (e.g., Anthropic)
• Prompts may be sent to AI providers subject to their privacy policies
• We may retain prompts and generated code for:

• providing the service
• debugging and support
• platform improvement
• abuse prevention

We do not sell your prompts or generated code.

2.6 AI Agent Template Data

If you deploy an AI agent using the Agent Template:

API Keys You Provide:

• You provide your own third-party API keys (e.g., Anthropic, X/Twitter, trading APIs)
• Your keys are stored encrypted at rest
• Keys are used solely to operate your agent on your behalf
• We do not share your keys with other users or use them for our purposes
• You can revoke or delete keys at any time

Agent Data:

• Agent configuration and settings
• Agent memory and conversation context
• Agent action logs and transaction history
• Content generated by your agent

Retention:

• Agent data is retained while your agent is active
• Upon termination, data is deleted within 30 days
• Blockchain transactions are permanent and outside our control

2.7 Payment & Credit Data

When you purchase credits:

• We record transaction amounts and timestamps
• Blockchain payment addresses and transaction hashes
• Credit balances and usage history

We do not store full payment card details (if applicable, handled by payment processors).

3. How We Use Information

We use information to:

• operate and maintain the Platforms
• enable wallet connections and user interactions
• generate applications and host AI agents
• process credit purchases and usage
• improve features, performance, and user experience
• monitor security, prevent abuse, and debug issues
• communicate updates, notices, or responses
• comply with legal obligations
• enforce our Terms

4. Legal Bases for Processing

Where applicable (including under GDPR or India's DPDP Act), we process personal data based on:

• your consent
• performance of a contract
• legitimate interests (e.g., security, analytics, abuse prevention)
• compliance with legal obligations

5. Disclosure of Information

5.1 Service Providers

We may share information with third-party service providers that assist us with:

• hosting and infrastructure (e.g., AWS, Vercel)
• AI services (e.g., Anthropic) - for app generation only
• analytics and monitoring
• customer support tools

These providers are contractually restricted from using information for other purposes.

5.2 AI Providers

For App Generation: Your prompts are sent to AI providers (e.g., Anthropic) using our API keys. These providers have their own privacy policies.

For Agent Template: Your prompts are sent using YOUR API keys directly. We facilitate the connection but you have a direct relationship with the AI provider.

5.3 Legal & Regulatory Disclosures

We may disclose information if required to:

• comply with law, regulation, or legal process
• respond to lawful requests from authorities
• protect the rights, safety, or integrity of TokenFi or others
• investigate suspected fraud or abuse

5.4 Business Transfers

If TokenFi Inc. is involved in a merger, acquisition, reorganization, or asset sale, information may be transferred as part of that transaction.

6. Blockchain Data Disclaimer

7. Data Retention

We retain personal data only for as long as:

• necessary for the purposes described in this Policy
• required by law
• reasonably necessary for security, dispute resolution, or enforcement

Specific retention periods:

• Account data: Duration of account plus 2 years
• Agent data: Duration of deployment plus 30 days
• Usage logs: 1 year
• Support communications: 3 years

Aggregated or anonymized data may be retained indefinitely.

8. Data Security

We implement reasonable technical and organizational measures to protect information, including:

• encryption at rest and in transit
• access controls and authentication
• regular security reviews
• incident response procedures

However:

• no system is completely secure
• we cannot guarantee absolute security
• you are responsible for your own account security

You use the Platforms at your own risk.

8.1 API Key Security

For AI Agent Template users:

• API keys are encrypted at rest using industry-standard encryption
• Access to keys is restricted to essential systems
• Keys are never logged in plaintext
• You should use keys with appropriate permission scopes
• You should monitor your API provider dashboards for unusual activity

9. Your Rights

Depending on your jurisdiction, you may have rights to:

• access your personal data
• correct inaccurate data
• request deletion
• restrict or object to processing
• data portability
• withdraw consent

Limitations:

• We cannot delete blockchain data
• Some data may be retained for legal compliance
• Deletion may require terminating services

We will respond within 30 days (or as required by applicable law).

10. International Data Transfers

Your information may be processed in jurisdictions other than your own, including the United States and India.

We take reasonable steps to ensure appropriate safeguards where required, including standard contractual clauses where applicable.

11. Children's Privacy

The Platforms are not intended for individuals under 18 years of age.

We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it promptly.

12. Third-Party Links & Services

The Platforms may contain links to third-party websites or integrate with third-party services.

We are not responsible for their privacy practices. This includes:

• AI providers (Anthropic, OpenAI)
• Social platforms (X/Twitter, Farcaster)
• Blockchain protocols (Uniswap, Doppler)
• Wallet providers

Review their privacy policies before use.

13. Do Not Track

We do not currently respond to "Do Not Track" browser signals.

14. Changes to This Policy

We may update this Policy from time to time.

Changes will be reflected by updating the "Last Updated" date.

For material changes, we will provide notice through the Platforms or by email.

Continued use of the Platforms after changes constitutes acceptance of the revised Policy.

15. Contact Information

16. Relationship to Other Terms

This Policy supplements:

• TokenFi Inc. Terms & Conditions
• Risk Disclosure
• Token Creator Agreement
• AI Agent Addendum (if applicable)

In the event of a conflict, the Terms & Conditions govern contractual matters.