1. Introduction
DeFiGuard AI ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at defiguard.ai and use our services, including our AI-powered smart contract security auditing platform.
By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1. Information You Provide Directly
We collect information that you provide directly to us when you:
- Register for an account or connect your Web3 wallet
- Submit smart contract code for analysis
- Record audit results on-chain
- Mint NFT certification badges
- Contact us for support or inquiries
- Subscribe to our newsletter or updates
This information may include:
- Wallet Address: Your blockchain wallet address (public key)
- Contract Code: Smart contract source code you submit for analysis
- Contract Addresses: Addresses of contracts you audit
- Email Address: If you provide it for communications
- Transaction Data: On-chain transaction hashes and metadata
2.2. Automatically Collected Information
When you use our Service, we automatically collect certain information, including:
- Usage Data: How you interact with our Service, pages visited, features used
- Device Information: Browser type, operating system, device identifiers
- IP Address: Your Internet Protocol address
- Blockchain Data: Public blockchain data related to your transactions
- Cookies and Tracking Technologies: As described in Section 7
2.3. Blockchain Data
Our Service interacts with blockchain networks (Base Sepolia). Blockchain data is public and permanent. When you record audits or mint badges on-chain, this information becomes part of the public blockchain record and cannot be deleted. We access and display this public blockchain data as part of our Service.
3. How We Use Your Information
We use the information we collect to:
- Provide and Improve Services: Analyze smart contracts, generate security reports, record audits on-chain, and mint certification badges
- Process Transactions: Facilitate on-chain transactions for audit recording and NFT minting
- Communicate: Respond to inquiries, send service updates, and provide customer support
- Security: Detect and prevent fraud, abuse, and security threats
- Analytics: Understand usage patterns to improve our Service
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
- Research: Conduct research and analysis to improve security analysis capabilities
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:
4.1. Public Blockchain Data
Information recorded on-chain (audit records, NFT badges) is publicly accessible on the blockchain and cannot be deleted. This data is visible to anyone who queries the blockchain.
4.2. Service Providers
We may share information with third-party service providers who perform services on our behalf, including:
- Cloud hosting and infrastructure providers
- Blockchain network providers (Base Sepolia RPC)
- AI service providers (Google Gemini API)
- Analytics and monitoring services
4.3. Legal Requirements
We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users or others.
4.4. Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Security
We implement appropriate technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS
- Secure storage practices for sensitive information
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Monitoring for security threats and vulnerabilities
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your wallet and private keys.
6. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal information:
Right to Access
You have the right to request copies of your personal information that we hold.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure
You have the right to request that we erase your personal information, under certain conditions. Note: Information recorded on blockchain cannot be deleted.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information.
Right to Data Portability
You have the right to request that we transfer your data to another organization or directly to you.
Right to Object
You have the right to object to our processing of your personal information.
To exercise these rights, please contact us using the information provided in Section 10.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.
Types of cookies we use:
- Essential Cookies: Required for the Service to function properly
- Analytics Cookies: Help us understand how users interact with our Service
- Preference Cookies: Remember your settings and preferences
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
8. Children's Privacy
Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: