Privacy Policy

Blindspotr ("we", "us", "our") operates a token risk intelligence API available at blindspotr.io. This Privacy Policy explains what data we collect, how we use it, and your rights. By using Blindspotr, you consent to the practices described here.

• Account information: your name and email address, collected when you create an account via our authentication provider (Clerk). You may sign in with email or Google.
• Payment information: your Solana wallet address and transaction signature, collected solely to verify on-chain payment. We do not store private keys, seed phrases, or have custody of any funds.
• Usage data: API request counts, timestamps, rate limit state, and associated API key metadata, stored for billing, abuse prevention, and service operation.
• Technical data: server logs including IP address, request metadata, and error information, used to operate and maintain the service.

We use your information to: operate and provide the Blindspotr API service; verify payments and provision API keys; enforce rate limits and usage quotas; communicate with you about your account, including transactional emails (payment confirmation, key rotation); and improve the service.

We do not sell your personal information. We do not share your data with third parties except as described in Section 4.

We may share your information with trusted service providers who assist us in operating the service, including our authentication provider (Clerk), email delivery provider (Resend), and hosting infrastructure. These providers are prohibited from using your data for any purpose other than providing services to us.

We may disclose your information if required by law or to protect the rights, property, or safety of Blindspotr, our users, or the public.

In the event of a sale, merger, or acquisition, your information may be transferred to the relevant parties.

We retain your account and usage data for as long as your account is active and for a reasonable period thereafter. Server logs are retained for up to 90 days. You may request deletion of your data by contacting us at the address below.

We use industry-standard technical and organizational measures to protect your data. No data transmission over the internet can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your API key.

Blindspotr is not directed at children under 13. We do not knowingly collect information from children under 13.

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our site. Your continued use of the service after changes constitutes acceptance of the updated policy.

Questions about this policy: legal@blindspotr.io