Privacy Policy
Mindjack is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how you can control it. By using the Platform, you consent to the practices described herein.
1. Data Controller
Mindjack ("we," "our," "the Platform") is the data controller for personal data processed through this Platform. For any privacy-related requests, please contact us through the Platform's official communication channels.
2. Data We Collect
| Data Type | Source | Purpose | Retention |
|---|---|---|---|
| Email address | Login via Privy (OAuth/email) | Account identification and authentication | Until account deletion |
| Wallet addresses (public) | User-connected wallet | Authentication, subscription verification, portfolio tracking | Until account deletion |
| Portfolio data | User-added wallet addresses | Portfolio tracking feature | Until user removes or deletes account |
| Subscription/payment records | On-chain transaction signatures | Subscription status verification | 24 months |
| Usage logs | API request logs | Abuse prevention, rate limiting, service improvement | 90 days |
| IP address | HTTP request headers | Security (brute force protection, abuse detection) | 30 days |
Public blockchain data: Wallet addresses and transaction data analyzed by the Platform (KOL wallets, holder data, etc.) are sourced exclusively from public blockchain records (Solana). This data is publicly available on-chain and not considered personal data for public-key addresses.
3. How We Use Your Data
- To authenticate you and manage your account and subscription.
- To provide the features of the Platform (portfolio tracking, personalized settings).
- To prevent fraud, abuse, and unauthorized access.
- To comply with legal obligations.
- To improve Platform performance and features (using aggregated, anonymized data).
We do not sell your personal data to third parties. We do not use your data for targeted advertising.
4. Third-Party Services
We use the following third-party services which may process your data:
- Privy (privy.io): Authentication provider. Handles email/OAuth login. Subject to Privy's own Privacy Policy.
- Helius (helius.dev): Solana RPC and API provider. Receives token addresses and wallet addresses for on-chain queries. No personal data is shared beyond public blockchain addresses.
- Jupiter (jup.ag): DEX aggregator for swap functionality. Swap transactions are processed on-chain; no additional personal data is shared.
- Google Fonts: Font delivery. Google may log your IP address per its own Privacy Policy.
5. Cookies and Local Storage
The Platform uses:
- HTTP-only cookies: For session authentication (JWT tokens). These are strictly necessary and cannot be disabled without breaking authentication.
- Local storage: For user preferences (display settings, watchlist) stored locally in your browser. This data does not leave your device.
We do not use tracking cookies or third-party advertising cookies.
6. Data Security
We implement industry-standard security measures including:
- Encrypted connections (HTTPS/TLS) for all data in transit.
- HTTP-only, SameSite=Strict cookies to prevent XSS-based session theft.
- Rate limiting and brute-force protection on all authentication endpoints.
- No storage of private keys or seed phrases (we never request them).
Despite these measures, no online service can guarantee absolute security. Use the Platform at your own risk.
7. Your Rights
Regardless of your location, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your data where we no longer have a lawful basis to retain it.
- Objection — object to processing based on our legitimate interests.
- Portability — receive your data in a structured, machine-readable format.
- Restriction — request that we limit how we process your data in certain circumstances.
To exercise these rights, contact us through the Platform's official channels. We will respond within 30 days.
8. Data Retention
We retain personal data only as long as necessary for the purposes described in this Policy or as required by applicable law. When your account is deleted, we remove or anonymize your personal data within 30 days, except where retention is required by law.
9. International Data Transfers
Your data may be processed on servers in various countries through the third-party services listed above. Where such transfers occur, we take steps to ensure adequate protection in accordance with applicable law.
10. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the updated policy.
12. Contact
For privacy-related inquiries or data access requests, please contact us through the Platform's official communication channels. You also have the right to lodge a complaint with the data protection authority in your jurisdiction if you believe your rights have been violated.