Privacy Policy

BlockHelix is operated by DeFi Data Ltd ("DeFi Data", "we", "us"), a company registered in England and Wales at 66 Paul Street, London, England, EC2A 4NA. We are the controller of the personal data described in this policy.

This policy explains what personal data we collect when you use our website and API, how we use it, and the rights you have under UK data protection law.

Account and contact data. When you join the waitlist or create an account, we collect your email address and any name you provide, through our authentication provider.

Wallet data. When you connect a wallet, we receive your public wallet address. We never receive or store your private keys or seed phrase.

Usage, analytics, and device data. We collect analytics about how you use the site (pages viewed, referring links, approximate location derived from IP, device and browser type, and interactions such as clicks and scrolling). Our product analytics provider may also record session replays and heatmaps of your visit to help us improve usability. We also keep technical server logs (IP address, request metadata, timestamps).

API data. If you generate API keys, we store the keys and metadata about the requests you make, including for rate limiting and abuse prevention.

We use personal data to operate and secure the service, authenticate you, respond to enquiries, send service and waitlist communications, prevent abuse and enforce usage limits, analyse and improve the product, and comply with our legal obligations.

Our legal bases under UK GDPR are performance of a contract, our legitimate interests in running and securing the service, your consent (for optional analytics cookies and similar technologies), and compliance with legal obligations.

Essential cookies. Our authentication provider sets cookies that are strictly necessary to keep you signed in and to secure the service. These do not require consent and cannot be switched off through the site.

Optional analytics cookies. We use Google Analytics 4 (provided by Google) and PostHog (product analytics, including session replay and heatmaps) to understand how the site is used. These are optional and are used for analytics only. We do not use this data for advertising, and we do not sell it.

Consent and region. We use Google Consent Mode. If you are in the UK, the European Economic Area, or Switzerland, these optional analytics cookies load only after you accept them through our cookie banner, and you can reject them at any time. Outside those regions, analytics run by default; you can still opt out at any time.

Changing your choice. You can reopen your cookie choices at any time using the "Cookie settings" link in the footer. You can also install the Google Analytics opt-out browser add-on and control cookies through your browser settings.

We share data with processors who help us run the service, including: Clerk (authentication), Google (Google Analytics), PostHog (product analytics and session replay), Amazon Web Services (hosting and infrastructure), Alchemy (blockchain RPC access), Resend (transactional and waitlist email), and GeoJS (approximate location derived from your IP address, used only to decide whether to show the cookie banner in your region). We do not sell your personal data. Some of these providers process data outside the UK or EEA, including in the United States.

Where we or our providers transfer personal data outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, so that your data receives an equivalent level of protection.

Vault deployments, transactions, and policy changes are recorded on public blockchains. This on-chain data is public, permanent, and outside our control. We cannot modify or delete information that has been written to a blockchain.

We keep personal data for as long as your account is active or as needed to provide the service, and afterwards only as required to meet legal, accounting, or security obligations. Server and request logs, and analytics data, are retained for a limited period.

Subject to UK GDPR, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

The service is not directed to anyone under 18, and we do not knowingly collect data from children.

We may update this policy from time to time. When we do, we will revise the date at the top of this page.

For any privacy question or request, contact us at will@blockhelix.tech, or write to DeFi Data Ltd, 66 Paul Street, London, England, EC2A 4NA.