Privacy Policy

1. Scope

This Privacy Policy applies to the Niftix website, APIs, and related services at https://niftix.app and affiliated deployments. Niftix is designed to minimize data collection. We do not custody your digital assets. This Policy explains what we collect through the Platform and why. It does not apply to third-party wallets, blockchains, or websites you access through links on our Platform.

2. Information We Collect

2.1 Wallet & blockchain data (public)

When you connect a wallet, we receive your public wallet address. Solana transactions you sign are recorded on a public ledger permanently. Anyone — including us, indexers, and analytics providers — can view addresses, token transfers, and program interactions associated with your activity.

2.2 Profile & swap data (optional / service-related)

If you use Platform features, we may store:

• Display name and avatar URL you choose to set;
• Swap offers you register (assets, status, visibility, expiration, on-chain swap ID);
• Chat messages you send within a swap thread;
• Notification preferences and in-app notification history;
• Reputation or analytics aggregates derived from completed swaps.

2.3 Wallet-signed API requests

For certain actions (creating swaps, updating status, profile edits), you may sign a message with your wallet. We verify the signature to confirm you control the address. We store the wallet address and request metadata — not your private keys.

2.4 Technical & usage data

Our servers and hosting providers may automatically log:

• IP address, browser type, device information;
• Pages visited, timestamps, and API request paths;
• Error logs and performance metrics.

2.5 Local storage

Your browser may store preferences (e.g., avatar preview, display name draft, terms acceptance flag) in localStorage until you clear site data.

2.6 Terms & Privacy acceptance records

When you accept our Terms of Service and Privacy Policy via the site banner, we store an audit record in our database including:

• The document versions you accepted;
• Timestamp of acceptance;
• A pseudonymous browser client ID;
• Your public wallet address, if connected at the time;
• IP address and browser user-agent (standard server logs).

We use these records to demonstrate consent and enforce our policies.

2.7 What we do not collect

• Private keys, seed phrases, or wallet passwords;
• Government ID or traditional financial account numbers (unless you voluntarily email us);
• Payment card data (we do not process fiat payments).

3. How We Use Information

We use collected information to:

• Operate and improve the Platform (display swaps, sync on-chain status, notifications);
• Authenticate wallet-signed requests and prevent abuse;
• Index NFT metadata via providers such as Helius (DAS API) to show your wallet NFTs;
• Process webhooks from blockchain indexers to update swap status;
• Respond to support inquiries and enforce our Terms;
• Comply with legal obligations and protect security.

We do not sell your personal information to third parties for their marketing purposes.

4. Legal Bases (EEA / UK users)

Where applicable, we process data based on:

• Contract — to provide services you request (swap listings, chat, profile);
• Legitimate interests — security, fraud prevention, analytics, service improvement;
• Consent — where required for optional features or marketing (if any);
• Legal obligation — when law requires retention or disclosure.

5. Sharing & Third Parties

We may share information with:

• Infrastructure providers — hosting, databases (e.g., PostgreSQL, MongoDB cache), email if used;
• Blockchain & indexing services — Helius and other RPC/webhook providers to read chain data and deliver events;
• Other users — public swap details, wallet addresses, and chat visible to swap participants;
• Law enforcement — when required by valid legal process or to protect rights and safety.

On-chain data is inherently public and outside our ability to restrict once published to Solana.

6. International Transfers

We and our service providers may process data in countries other than your own. Where required, we implement appropriate safeguards for cross-border transfers.

7. Retention

We retain profile and swap data while your offers are active and for a reasonable period afterward for analytics, disputes, and legal compliance. Webhook and server logs may be retained for a limited period. Blockchain records are permanent and not controlled by Niftix.

8. Security

We use industry-standard measures to protect data in our systems (encryption in transit, access controls, webhook secrets). No method is 100% secure. You are responsible for securing your wallet and device.

9. Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete profile data we hold;
• Object to or restrict certain processing;
• Data portability;
• Withdraw consent where processing is consent-based;
• Lodge a complaint with a supervisory authority.

To exercise rights, contact legal@niftix.app. We may need to verify wallet ownership. We cannot delete or modify public blockchain data.

10. Children

The Platform is not intended for anyone under 18. We do not knowingly collect information from children. Contact us if you believe a minor has provided data and we will delete applicable off-chain records.

11. Changes

We may update this Policy. Material changes will be posted on this page with an updated "Last updated" date. Continued use after changes constitutes acceptance.

12. Contact

Privacy inquiries: legal@niftix.app