Privacy Policy

Last updated: pending first launch.

Template notice: this is a starting document. The operator should review (and likely expand) the GDPR/CCPA sections with a qualified lawyer before accepting real subscribers.

1. What we collect

When you use Vitez we may collect:

Wallet address. The on-chain identifier you sign in with. This is public on the blockchain.
Authentication identities. Telegram user id, Discord snowflake, or email — only when you link them via Privy for community gating or transactional notifications.
Optional notification email. If you provide one in/me for receipts and renewal reminders.
Usage data. Aggregated analytics (page views, funnel events) via PostHog when configured, scoped by anonymous id or wallet address.
Error reports. Server-side exception traces via Sentry, tagged with non-sensitive context (route, function).

2. How we use it

To deliver the Service: route subscribers to gated communities and surface their on-chain subscription state in their dashboard.
To send transactional emails (welcome, receipts, renewal reminders, payment failures, cancellation confirmations, plan discontinued notices). One-click unsubscribe is available in every email footer.
To monitor and improve reliability (anonymised analytics + error tracking).

3. Who we share it with

Privy for authentication and wallet management.
Neon Postgres for the indexed subscription database.
Resend for transactional email delivery.
Sentry / PostHog for observability and analytics.
Inngest for background workflow execution.

We do not sell personal data. We do not share data with advertisers.

4. Your rights

Depending on your jurisdiction (EU/UK GDPR, California CCPA, etc.) you may have the right to access, correct, delete, or export the personal data we hold about you, and to lodge a complaint with your local data-protection authority.

Opt out of email. Use the unsubscribe link in any transactional email footer, or clear your stored notification email at /me.
Disconnect linked accounts. Unlink Telegram / Discord identities from Privy at any time.
Delete data. Contact us; on-chain data cannot be deleted, but we can remove off-chain personal data tied to your wallet.

5. On-chain data

On-chain transactions (subscribes, renewals, cancellations) are public, permanent, and outside our control. You should not consider your wallet address private.

6. Cookies

Vitez uses session cookies set by Privy for sign-in state and a single first-party cookie for anonymous analytics. We do not use third-party advertising cookies.

7. Data retention

Off-chain personal data is retained for as long as you maintain an account with us, plus a reasonable period required for legal or operational reasons (typically 12 months).

8. Children

Vitez is not directed at children under 18 and we do not knowingly collect data from them.

9. Changes to this Policy

Material changes will be announced via the Service. Continued use after a change constitutes acceptance.

10. Contact

Questions about this Policy: contact details to be added before launch.