Privacy Policy

1. Introduction

Chaint ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our blockchain forensic analysis service.

2. Information We Collect

2.1 OAuth Profile Information

When you authenticate via LinkedIn, X (Twitter), or GitHub, we collect:

LinkedIn: Name, email, profile picture, headline, company
X (Twitter): Username, name, profile picture, follower count, email (if available)
GitHub: Username, name, email, profile picture, public repository count

2.2 Usage Data

Ethereum wallet addresses you analyze
Analysis results and timestamps
Query count and usage statistics
IP address and browser information
Session data and cookies

2.3 Technical Data

Device type and operating system
Browser type and version
Error logs and performance metrics

3. How We Use Your Information

We use collected information to:

Authenticate and authorize your access
Provide blockchain forensic analysis services
Enforce usage limits and prevent abuse
Improve our AI models and service quality
Send important service notifications
Comply with legal obligations

4. Data Storage and Security

4.1 Storage

User data stored in PostgreSQL database
Access tokens hashed using SHA-256
Analysis results cached for 48 hours (shallow) or permanently (deep)

4.2 Security Measures

HTTPS encryption for data in transit
Database encryption at rest
Rate limiting and CSRF protection
Regular security audits
Access controls and authentication

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data only in these cases:

Legal Requirements: When required by law or to protect our rights
Service Providers: With trusted third parties who assist in operating our service (e.g., hosting providers)
Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Cookies and Tracking

We use cookies for:

Session management (authentication)
Security (CSRF tokens)
Analytics (usage statistics)

You can disable cookies in your browser, but this may limit functionality.

7. Third-Party Services

We integrate with:

OAuth Providers: LinkedIn, X, GitHub (see their privacy policies)
Etherscan API: For blockchain data retrieval
hCaptcha: For bot prevention

8. Data Retention

User Accounts: Retained until account deletion
Analysis Results: 48 hours (shallow) or permanent (deep analyses)
Logs: 90 days for security and debugging

9. Your Rights

You have the right to:

Access: Request a copy of your data
Correction: Update inaccurate information
Deletion: Request account and data deletion
Portability: Export your data
Objection: Opt-out of certain data processing

To exercise these rights, contact us through the application form.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or service notification.

13. GDPR Compliance (EU Users)

If you are in the European Union, you have additional rights under GDPR:

Right to be forgotten
Right to data portability
Right to restrict processing
Right to object to automated decision-making

14. California Privacy Rights (CCPA)

California residents have the right to:

Know what personal information is collected
Know if personal information is sold or disclosed
Opt-out of the sale of personal information
Request deletion of personal information

15. Contact Us

For privacy-related questions or to exercise your rights, please contact us through our application form or via the contact information provided on our website.