Privacy Policy

This Privacy Policy explains how Veltra ("Veltra", "we", "us") collects, uses, and shares information when you use the Veltra Trade History API, dashboard, and websites (the "Service").

1. Information we collect

• Account information: the email address you sign in with, and identifiers from any login provider you use (e.g. Google).
• Usage data: API requests, the wallet addresses you look up, request counts, and timestamps — used to operate and bill the Service.
• IP address: used transiently for rate limiting and security, and recorded in our server and error logs. We do not store your IP address in our own database.
• Page views: the page requested, the referring site, and a timestamp, so we can tell which channels people find us through. This is counted in aggregate and is not linked to your account, an IP address, or a cookie. We separately count unrecognised browser user-agent strings to identify automated traffic; those counts are not tied to individual visits.
• Payment information: processed by Stripe. We do not store your full card details; we receive limited billing metadata (such as plan, status, and the last four digits) from Stripe.
• Cookies: a session cookie to keep you signed in. We do not use third-party advertising cookies.

The wallet addresses and trade data you query are public on-chain information; we retrieve and store them to fulfill your requests and improve response times.

2. How we use information

• To provide, maintain, and improve the Service.
• To authenticate you, send sign-in links, and secure your account.
• To meter usage, process payments, and prevent abuse (including duplicate accounts).
• To communicate with you about your account, service changes, and support.
• To comply with legal obligations.

3. Service providers

We share information with vendors that help us run the Service, including:

• Stripe — payment processing and billing.
• Resend — sending transactional/sign-in emails.
• Supabase and Vercel — database hosting and application hosting.
• Sentry and Axiom — error monitoring and application logging, which may process request metadata (including IP addresses) to help us keep the Service reliable and secure.
• Blockchain data providers used to source on-chain trade history for the wallets you query.

These providers process information on our behalf under their own security and privacy commitments. We do not sell your personal information.

4. Data retention

We retain account and usage data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data (see "Your rights").

5. Security

We use industry-standard measures to protect your information, including hashed API keys and session tokens, encrypted transport (HTTPS), and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the email below. We will respond within the timeframe required by applicable law.

7. Children

The Service is not directed to children under 13 (or the age required by your jurisdiction), and we do not knowingly collect their personal information.

8. International users

We may process and store information in countries other than where you live. Where required, we take steps to ensure appropriate safeguards for such transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice.