Privacy Policy

BlockHelix is operated by DeFi Data Ltd ("DeFi Data", "we", "us"), a company registered in England and Wales at 66 Paul Street, London, England, EC2A 4NA. We are the controller of the personal data described in this policy.

This policy explains what personal data we collect when you use our website and API, how we use it, and the rights you have under UK data protection law.

Account and contact data. When you join the waitlist or create an account, we collect your email address and any name you provide, through our authentication provider.

Wallet data. When you connect a wallet, we receive your public wallet address. We never receive or store your private keys or seed phrase.

Usage and device data. We collect analytics about how you use the site (pages viewed, approximate location, device and browser type) and technical logs from our servers (IP address, request metadata, timestamps).

API data. If you generate API keys, we store the keys and metadata about the requests you make, including for rate limiting and abuse prevention.

We use personal data to operate and secure the service, authenticate you, respond to enquiries, send service and waitlist communications, prevent abuse and enforce usage limits, analyse and improve the product, and comply with our legal obligations.

Our legal bases under UK GDPR are performance of a contract, our legitimate interests in running and securing the service, your consent (for analytics cookies), and compliance with legal obligations.

We use essential cookies from our authentication provider to keep you signed in, and Google Analytics to understand how the site is used. You can control non-essential cookies through your browser settings.

We share data with processors who help us run the service: Clerk (authentication), Google Analytics (usage analytics), Amazon Web Services (hosting and infrastructure), and Alchemy (blockchain RPC access). We do not sell your personal data. Some providers may process data outside the UK or EEA, in which case we rely on appropriate safeguards such as standard contractual clauses.

Vault deployments, transactions, and policy changes are recorded on public blockchains, including Base. This on-chain data is public, permanent, and outside our control. We cannot modify or delete information that has been written to a blockchain.

We keep personal data for as long as your account is active or as needed to provide the service, and afterwards only as required to meet legal, accounting, or security obligations. Server and request logs are retained for a limited period.

Subject to UK GDPR, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

The service is not directed to anyone under 18, and we do not knowingly collect data from children.

We may update this policy from time to time. When we do, we will revise the date at the top of this page.

For any privacy question or request, contact us at will@blockhelix.tech, or write to DeFi Data Ltd, 66 Paul Street, London, England, EC2A 4NA.