Privacy Policy

Last updated: November 1, 2026

In plain terms: we store the public wallet address you connect, your subscription status from our billing processor, and anonymized usage data. We never collect or store your private keys, seed phrase, or card number.

What we collect

Data	Why
Public wallet address (ss58)	To show you your own on-chain holdings and, for Automate-tier accounts, to prepare transactions for your wallet to sign. Tracking an address does not require proving you own it; connecting one does, via a signature.
Session token	Issued only after a valid wallet-ownership signature, to keep you signed in without re-signing every request.
Subscription status (tier, plan)	Synced periodically from our payment processor (Whop) so we know which features your account can access.
Prepared/submitted trade records	Automate-tier transaction intents you chose to prepare, and their on-chain outcome, kept so you can review your own history.
Basic usage/server logs	Standard web request logs (IP, timestamp, endpoint) for abuse prevention, rate-limiting, and debugging.

What we never collect

Private keys or seed phrases — we have no field, form, or code path that accepts one.
Card numbers or bank details — billing is handled entirely by our payment processor (Whop); we never see or store your payment instrument.

Third parties we share data with

Whop — processes your subscription payment and tells us your plan status. Subject to Whop's own privacy policy for anything you give them directly (card details, billing address).
Public blockchain data providers / RPC nodes — we query these for chain data; your wallet address, if you connect or track one, is visible on the public blockchain regardless of Cipher.

We do not sell your data. We do not share your wallet address or usage data with advertisers.

Your choices

You can disconnect your wallet at any time; this ends your session but does not delete historical records already stored (e.g. past prepared-trade intents) which we retain for accounting and audit purposes.
To request deletion of account data not required for legal/audit retention, contact us through the support channel linked in the app.

Security

We use standard practices (encrypted transport, signature-based authentication) to protect stored data. No system is perfectly secure; we cannot guarantee absolute security of any information transmitted to us.

Changes

We may update this policy as the product evolves. Material changes will be reflected by updating the date above.

Contact

Questions about this policy: reach us through the support channel linked in the app.