Privacy Policy

1. Information we collect

We collect only what we need to run the Service:

• Account information — your email address if you sign up with email, or your public wallet address if you sign in with a wallet.
• Usage data — the prompts you submit, the contracts generated, audit results, and records of the deployments you make through the Service.
• Billing data — if you subscribe, our payment processor collects your payment details. We receive only a subscription status and identifiers, never your full card number.
• Technical data — basic request metadata such as IP address, used for security and rate limiting.

We do not collect or store your private keys or seed phrase, and we never ask for them.

2. How we use information

• to provide, operate, and secure the Service;
• to generate and audit contracts and record your deployments so you can see your history;
• to process subscriptions and prevent abuse and fraud;
• to respond to your support requests; and
• to comply with legal obligations.

We do not sell your personal information.

3. Service providers we share with

We share limited information with vendors who process it on our behalf, only as needed to run the Service:

• Supabase — authentication and database hosting.
• Vercel — application hosting.
• AI providers (such as Anthropic and OpenAI) — to generate and review contracts from your prompts.
• Blockchain data providers (such as Alchemy) — to read chain data and broadcast transactions.
• Paddle.com Market Ltd (Paddle) — payment processing as merchant of record.

Each provider handles data under its own privacy policy. We may also disclose information if required by law or to protect our rights and users.

4. Blockchain data is public

When you deploy a contract, the transaction, contract address, and related on-chain data are recorded on a public blockchain. This information is public and permanent by nature, is not controlled by us, and cannot be deleted or changed by us.

5. Data retention

We keep account and usage data for as long as your account is active and as needed to provide the Service, meet legal and accounting obligations, and resolve disputes. You can ask us to delete your account data as described below; on-chain data cannot be deleted.

6. Security

We use reasonable technical and organizational measures to protect your information, including access controls and row-level security on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, email us at oscarlabs.hq@gmail.com. We will respond within the time required by applicable law.

8. International users

We operate from India and use service providers that may process data in other countries. By using the Service, you understand your information may be processed outside your country of residence.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about privacy? Contact us at oscarlabs.hq@gmail.com.