Privacy Policy

1. Information we collect

PumpIQ does not require your name or government identity to use the Service. We collect:

• wallet addresses and the public on-chain activity of wallets you connect or ask the Service to research;
• login identifiers used for managed-wallet authentication, such as an email address processed through Turnkey;
• session and account records, including session identifiers, active-wallet bindings, and plan or credit state;
• conversation content: the messages you send, AI responses, and the drafts, proposals, and alerts created from them;
• billing records, including quotes, charges, and the payment transactions that fund them;
• technical data such as IP address, browser and device information, and server logs;
• anything you send us directly, such as a support email.

2. Information we never collect

PumpIQ never receives or stores private keys, recovery phrases, key export payloads, or unrestricted signing credentials, for managed or external wallets. Managed-wallet keys exist only inside Turnkey’s infrastructure, and every transaction requires your signature.

3. On-chain data is public

Blockchains are public, permanent records replicated across many operators. Wallet addresses and their transaction history are visible to anyone, and a wallet address can act as a persistent identifier that others may link to you. We treat wallet addresses as personal data in our systems, but we cannot modify or delete anything recorded on a blockchain. Deletion rights described in this policy apply to data we hold, not to the blockchain itself.

4. How we use information

We use the information above to:

• operate the Service: research, drafts, portfolio views, alerts, and copy-trading configuration;
• generate AI responses to your requests;
• quote and process paid analysis and plans;
• secure the Service, enforce limits and policy gates, and prevent abuse;
• comply with legal obligations;
• improve the Service using aggregate, de-identified usage patterns.

We do not sell personal information and do not use it for cross-context behavioral advertising.

5. Who we share information with

We share information with service providers that process it to run the Service:

• Turnkey, for managed-wallet infrastructure and authentication;
• AI model providers, which receive your conversation content and the wallet context you approve in order to generate the response to your request;
• Solana data and RPC providers such as Helius, which receive the addresses and queries needed to answer them;
• hosting and infrastructure providers, currently Vercel and Railway, which run the Service and store its data.

We may also disclose information to comply with law or valid legal process, to protect the rights and security of PumpIQ and its users, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to the transferred data.

6. Cookies and local storage

The Service uses cookies and browser storage for sessions and preferences, such as keeping you signed in and remembering interface state. We do not use third-party advertising cookies.

7. Retention

We keep information for as long as it is needed for the purposes above. Conversation history is retained with your account; to have it deleted, email legal@pumpiq.dev. Billing and compliance records are kept as long as the law requires. Server logs are retained for a limited operational window.

8. Security

We use technical and organizational measures to protect the data we hold, including transport encryption, access restrictions, and deterministic policy gates around wallet actions. No online service can eliminate risk entirely; if we learn of a breach affecting your data we will notify you as the law requires.

9. Your rights

You can request access to, correction of, or deletion of the personal data we hold about you by emailing legal@pumpiq.dev. Deletion is subject to the on-chain limits described above and to records we must keep by law. We will not discriminate against you for exercising these rights.

Residents of California and other U.S. states with privacy laws have rights to know, correct, and delete personal information and to opt out of its sale or sharing; we do not sell or share personal information as those laws define it.

If you are in the EEA or the United Kingdom, we process your data to perform our contract with you, to pursue our legitimate interests in operating and securing the Service, and to meet legal obligations. You additionally have rights to object, to restrict processing, to data portability, and to complain to your supervisory authority.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from them.

11. International use

PumpIQ operates from the United States and processes data there. If you use the Service from elsewhere, your information is transferred to and processed in the United States.

12. Changes to this policy

We may update this policy by posting a revised version with an updated date and, for material changes, notice in the app. Continued use of the Service after a revision takes effect means you accept it.